{"report_id":"814acc17-c576-4d5a-a03b-74592b2c481e","version":6,"status":"done","tags":[],"date":"2025-12-02T10:11:28Z","url":{"schema":"http","addr":"v2.safeadmin.net/dashboard?v=1764670028983","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"104.21.40.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"v2.safeadmin.net/auth/login","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"title":"Safepays","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"5a55cef3b2650f551ec134f40186bc70","sha1":"dc7299d7cdb0f12ebccae0ea9a2268a7d78bec91","sha256":"a35c10e3d47cfd40693f7778dcfbabf60b084bbaedfb719e0b6f018bdbfb84ce","sha512":"9991ea52e61cea29e24289eb5b676029589665775332d9d820673ba3c98e4007a3872a1efd3903595244ab342e5cc2b395ff8c4bc285c754bba60168d9bfb009","ssdeep":"","tlshash":"2fe026e96d65c83564e4038a60f5e29c1a2065a0ba11da0493d8d87a8e10fd78ca2a4c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"v2.safeadmin.net/dashboard?v=1764670028983","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"104.21.40.22","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-06T10:11:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"wss.spaypro.net","ip":{"addr":"104.21.46.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":836,"sent_data":611,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"v2.safeadmin.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":39,"request_count":40,"received_data":11002644,"sent_data":24799,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-30T22:14:19.793229Z","alert_count":0,"request_count":1,"received_data":32341,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-30T22:13:37.547558Z","alert_count":0,"request_count":2,"received_data":98734,"sent_data":1112,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-11-30T22:18:20.15509Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"v2.safeadmin.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56ad6183d014fb486349cdf1cedecf09","sha1":"e637c636e3bd3486d1c016b5582987d37525a2ca","sha256":"495ff0e49da3851679520f64bce34094dfe1ec71e516e846a57393127c576679","sha512":"639e8c96693ec73a58f9650d5a33b48f26bfc162953bd4b3b80636e6bf449f9077def5f41c553f879f351cead1de35a7864a48d2242dbd0452939e712cd1da2f","ssdeep":"192:hrgPIVW+7m8hFX0X8XlXQXAXsXZ/X2XX+X4wXeXH+6lUOObcbWeI//pwjujJiVqb:OPiJX0X8XlXQXAXsXZ/X2XX+X4wXeXHC","tlshash":"732217c7bd8eb019412a44b6a437f0c681fd8f8610211c51d251cafd7e2b3b5bd6ae4a","size":10030,"data":"","first_seen":"2025-12-02T09:56:09.06649Z","last_seen":"2025-12-02T10:11:39.984297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/index-dHKPWpKD.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff156edba9d8a8888ef95967eb084a2b","sha1":"cb4d043784ac448a45dd4cd6ac431fb351bd165d","sha256":"3bd2cf7213712ae72eac806311f6bdf2db7f6a833a2c73aacb13aa4e96f3f79c","sha512":"482eb8651a80e47f3a03c80b5a0b29d55e6ec8b003eb4d28882ddf456b1f5abbad5965c00bdcbfd5c780fd644986942424765044e6d824bd97fb5ae846720b4b","ssdeep":"384:X7ELy5017rV+aY+ld/SkEcy2ra5sSsYlsOBcSRD9j:X7Uy5017rV7Ywd//Ecy2ra5ZBBxRDF","tlshash":"d5a2230157184ab8b67d1fc97bb2320f10e05f01a566c079bf25bdbf746c88da1a47ba","size":21755,"data":"","first_seen":"2025-12-02T10:11:40.007263Z","last_seen":"2025-12-02T10:11:40.007263Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/BrandLogo.vue_vue_type_script_setup_true_lang-BEmsdKHM.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"34091808a6fef6a28aa529809d5bd093","sha1":"cc87da153c4fd8bed670b1f4f67da4b6a435f865","sha256":"2182f5f8da85365fb8c555b5510c74546097e20955548e8f5b229ae7afd991a4","sha512":"660e5f47ce83e88a216e247206dc79fb0cc5b07346eec59e2232ff720497d0abebcba122c90bf17adda62d3daf3e65a88c619e73d39f86c75a440a99e1952bda","ssdeep":"","tlshash":"daf0dc9b6c4b83bac1460845aa674444688d8b98932c7fd9c3a8a62be0d3038c82e960","size":463,"data":"","first_seen":"2025-12-02T10:11:40.012023Z","last_seen":"2025-12-02T10:11:40.012023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VRow-ClQlDVHn.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"055c1ff8bbbfb4fe6083e3c36dcf0948","sha1":"830abc133eb2ec011ef49da1d2536c940471379e","sha256":"95f88eed229578e0e79f3ad64263ac462ddd51a5360e47b6d446866b8805f9fe","sha512":"4d9b3db37a2a4598d8e9b9e36151b324a4d84f38af0d2ff6f59f8667243b20bc4f6c45812babe331dda1336ad21a80f07cc0a4bed0d8431eebe0877a225e35be","ssdeep":"","tlshash":"705131a47459f5b30bc49ca481f92461a8cd3f4ae486e5f0f2ef19ad1e430c46367f89","size":2859,"data":"","first_seen":"2025-12-02T10:11:39.996693Z","last_seen":"2025-12-02T10:11:39.996693Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/auth/login","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-06-20T00:18:04.244198Z","times_seen":7251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-20T02:03:18.418867Z","times_seen":337419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/index-Kxuq9YSd.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bcc7f8030b081732cd6e46a77ece21e","sha1":"d784dfc96b449d09bcb30bb5e9c911bcc262c46d","sha256":"884b9331f708d1356c3a3c8d12be7bcf89dcb56a625f88823f924dfd1c67df09","sha512":"1820c9708f59ef2d66c69225d685841f1c89bdc013efe6b5fccbbd4b44651d69a695f27aed4977b9073e2e2100159697e76f3ec15b3171dd0742102ea8911219","ssdeep":"49152:JHj5nRfLg8mOd0MyfNSbIAl9ZcdKV9aZEorf3E+p28:L5CTDd","tlshash":"b936852f274a247d9a178c7c895d35406aac26ad360798bbbbdd0c719636708fc337b4","size":5053192,"data":"","first_seen":"2025-12-02T10:11:40.025308Z","last_seen":"2025-12-02T10:11:40.025308Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/Login-CPB6FCqF.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"533020a938d619ee7bed0d25a8f058a4","sha1":"cd5f5a3da92a4c550839ff1b18d64042cc5d9d9e","sha256":"e9e3097902d297aa0792978db98cba136de5b635a13cd3c861efe4bb0637f5c0","sha512":"fd4353c1de3650cab3906bf6df4ac389c6b0fb26d8665728d14a9f4f9a14049047bbe06bb7e5c1e30269716083b25857449f63d46d63d53bee41714953158174","ssdeep":"","tlshash":"a681874c747dcbfa718958ecb02214306164692ee3789ae070fe0d306fd6e4647a9767","size":4080,"data":"","first_seen":"2025-12-02T10:11:40.013593Z","last_seen":"2025-12-02T10:11:40.013593Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/LanguageDD.vue_vue_type_script_setup_true_lang-Cc_1Y6Ey.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"75d1e90fa6c3d9b286ad46582f9e11de","sha1":"008ac11477ae65a72e34008aa119a71136b08170","sha256":"c3896007f6bd362f8c02a818080f9034b634c2e086af7e362a5c58576e85f836","sha512":"6590544d6741f07ddf209d58a1a63e34d3e6c0d9b53f5c394fd6201f35dedcdd4d49e3bd805d071cf4eadd29bd7715a6a7b455e72c09eb113c54bf7cc0375e7f","ssdeep":"","tlshash":"512132c9701f8bf5105358cddca58810b35904ade7feaed370ba4e1533a265c26dc756","size":1266,"data":"","first_seen":"2025-12-02T10:11:40.01056Z","last_seen":"2025-12-02T10:11:40.01056Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VContainer-KdLmn1hZ.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fa4d58daf2a298dbc904dda2360f7023","sha1":"be2c6cd3e6195f7de0ed1fe06e426d704ee85a62","sha256":"7f8639f03b92768ab19161039cb091e2b715beb8aebe19b5213dd7302e2c5c97","sha512":"d6ebb5512fec2142d7f83ab6b3b23746540c40463220c9aa6e239eb7e4e3dc639f4ae5465167d156268d305f9061cbfbd61bdebece98a52a3ed3cd3dddc31de2","ssdeep":"","tlshash":"f5f05c196ec56674f7a7188cad1010400f219756ef778cc4b0ee81e8a39846c570baa9","size":458,"data":"","first_seen":"2025-12-02T10:11:39.988033Z","last_seen":"2025-12-02T10:11:39.988033Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/auth/login","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0ae64cce4f24529caa56156b159bdade","sha1":"3f1c5a480a93a0bfdc86eb0d7769ea098682b7a5","sha256":"99cb12f023e5c6752e9a7e0132343acf246a432e31d1e7326a3fad10704711a5","sha512":"0ce54f9c86d027c6895c449a7be022ab96d9df608d39f56a3eb0c2721f49aac55b9f82668c5265ba231c626d7a841bcb68c13b169f5f5f9be40244d0c3abec61","ssdeep":"","tlshash":"eec08cc8a0c22d002602a45010bf38e4a024842770481b028de4dc4c3e230f08233e98","size":141,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-20T00:43:34.507497Z","times_seen":2193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VTextField-KNAsm1l0.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b5a8f87eb02cfd32603a9f0e12842041","sha1":"3b0b1d41ac6dcd2775da431b6fb94c3232cc9f50","sha256":"7178b8f2f83b696a43c93b0079d998937558a2c84747a5ebaed0bf2b6416ac5f","sha512":"852344403d8a393a50ee5de30e333750fb442d20820a127d1c13e4b358105d1ad278e0e71c67397f5d627eb4f294dd45359109371df4a72942bd25f5b9b75bdb","ssdeep":"192:hXO1ynRvMEzKpOYNCH4Rpjh/LSP9cNdWaf4e7ZFEdYR6+wqzG9mzG95TgVYuEF2T:1OInFMNpBN24RH/LacNdlwqZFEd4vamf","tlshash":"e1322ac078faf8379f7b40eeb0d68461d6a81b555421a0e191ba193813c9e9473e6f3e","size":11582,"data":"","first_seen":"2025-12-02T10:11:40.008831Z","last_seen":"2025-12-02T10:11:40.008831Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/dashboard?v=1764670028983","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b9354562dccc19202e25209439d8b71d","sha1":"ab61ada69e466aebdc058a277ee423cd2e2b1712","sha256":"3378b315db7c120319a6cb03146147e0988ad60c669c36b28a63ed2c75096e47","sha512":"ddcf7a8e08b34ff5cbb706a46bc88c63e15f56c091ee2d57c577149e4901e69db367f703f2a880d27ba4da8e7e4398090e1b9597904d1947e735c6fd176de525","ssdeep":"","tlshash":"1111c0b57b1a5534c5c5418b31bee7a93e3260717a029145c3accc299d18ec714efdbe","size":902,"data":"","first_seen":"2025-12-02T10:11:40.027889Z","last_seen":"2025-12-02T10:11:40.027889Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3a3fddd26b6a2f6248d14cdc3ed49ab","sha1":"b5fc7e29208203801bf415f84b4a24218b2b82df","sha256":"cd146d492ebe8697b102c56088686b434e3e448db0f0e58257820aa4521bebf1","sha512":"0fdd3b1a02448cf4ab28784d514ae14c5173fafe371302d2bbcd96a7b474a519164fad6c71ffcecee437ab12a58b7c2d92885dcc9566f616d9f942c08228cc1b","ssdeep":"","tlshash":"28d023d56d75c43151d8024a50f6e3d87660357077119601d3dccd2f5e11ed748f1a5c","size":217,"data":"","first_seen":"2025-12-02T10:11:40.029596Z","last_seen":"2025-12-02T10:11:40.029596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/global-f7j7VBh9.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a05b2c6e96fcd47d791b2c908b1272ca","sha1":"5e517a735d9a300f31fe59349eed9c080461b129","sha256":"639df049b523ecbeb093b2f1349095890bf0ae9cbfa013394d53a403329a3b33","sha512":"f44c470c54a515c3ec83d16ce4438c52d76d9316f093b8418725d0d21b654344123764a95e51ab12e3e5ff80b1215eecf91fb2f6964bd715d4bdb7390f1d3048","ssdeep":"","tlshash":"3001c04e61e09070f05244eaf254193a93390854b24f48e9e55ddda83e9b4fac17ef7a","size":706,"data":"","first_seen":"2025-12-02T10:11:39.991948Z","last_seen":"2025-12-02T10:11:39.991948Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/helpers-BdJtXry9.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"81e3cfa4886a78c1a9d4d07f1ebd9995","sha1":"606f5617d1913d1286022355c062afeeb384481a","sha256":"9298217dfd10be2d61d250a4c2ca03a26bb330e29519d65cda958973ac19f879","sha512":"678d3622917de2093faa0032e9f6ebf776711c186d6d2e1a40c5f8053dd6612f1d1443f3c005a8e70a8bb1fe10f57f6ec28a0d63279fa1715854dd9062d5bbf5","ssdeep":"","tlshash":"795185a4f2ee02085bf150f5c0ab8102332efa67bc868660d01e0c766d57d4bb279f99","size":2721,"data":"","first_seen":"2025-12-02T10:11:39.995019Z","last_seen":"2025-12-02T10:11:39.995019Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VForm-JklBOXeE.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bcb0b32c888d0a6ff0bc7b3d804640ad","sha1":"18fac1ac05498244dbfe8907a334bb7701394575","sha256":"5ed0588198ac9a933fa091d8aa7929934e9e0956e788ee1ff11a01b0b859692e","sha512":"c8f3c6cd7d8c59575fc724bcd8b3b47d306f3aa98592c7c0cae720ba3eeed55152198b1cb1000e0392cefae201c048c74fae9a43e74e3a7b662c14a93b2c7271","ssdeep":"","tlshash":"be0165687cf1e6f41b1e0bfd46671c0301621f6dac7a81a04472ed61379cce41315b2e","size":766,"data":"","first_seen":"2025-12-02T10:11:39.986296Z","last_seen":"2025-12-02T10:11:39.986296Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VCard-CLXZQC7B.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8ff6c3735ab7fe35c9cd88f7dd87cf0d","sha1":"e94d2bf2d530f79863b9a7583ce2e218bbdfd3c8","sha256":"28788dcae8ca41f57a7e7fbd8537492bfac8ad41b870af8478a8e4a71b985c26","sha512":"b8297297daa79806354ade04299dfb6032af2aaad4057596255b82e1ee48f096f99632f53a15d8b386b121a9db650e1a67d5ef6c855c0b0bcaaef0dd73f590fb","ssdeep":"96:QUMk6F7E1SVBKbCCrYR8TlKBepZxSjtNFTb6ZE9ysOq2gFHM:r6pE1SVIC/RS/XxSj9TQE0sOq1HM","tlshash":"6da1425565baea3de63b908ce4ede12257254bc9cae9c590f4f30d0c53c9544b36032f","size":5076,"data":"","first_seen":"2025-12-02T10:11:39.972594Z","last_seen":"2025-12-02T10:11:39.972594Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VMenu-CWsDHqP1.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6b4ea19fd0943934698a655450839379","sha1":"1ab0f71fe1c56ecb65a3b1c093bf5cf2bc496182","sha256":"de845fd7f9e14786d4673980ee191f418c0ee80d568be3cff4f97f4e25fcd721","sha512":"6f91f73bb72ffada460e8566283eaf32d53de2cf9e11c1f7bae7e8de859b5d8567a62863b2bdb95bf1ae548824898e6540caf7cb93e72b473be8fbc05e755442","ssdeep":"96:uxkk1bbJmHVDAAmOVFxa48l1sLU1sbsNjwpk23YtSMOxdKmRaEqB:ul9bJmHVMOVW48jsXbsNjwph3YuxdKm6","tlshash":"d0b1f90cf3f816b223f75aa894a18b07533da6d9281dd4e0753b1d151292744b7aba37","size":5374,"data":"","first_seen":"2025-12-02T10:11:39.968278Z","last_seen":"2025-12-02T10:11:39.968278Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/auth/login","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-06-20T00:43:34.575596Z","times_seen":2351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VField-Ccz7qRV7.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c604f862e3085c4264c16ff8a0d95deb","sha1":"05fc2915d3b13da960a42512758155c7abadcf8e","sha256":"28b6571b96d7c0997f93503a8fa4fdfc3343938d37d8b44499d2ba7a24fa5060","sha512":"421bbbd994b1dda08137997f70621c758a6c8f23462153bde1037703564f9df73f83f2e143b6f5703ea806a64a1f438ca97a3b8421664fd6e13b8db01c9f9249","ssdeep":"192:GsvwfloBl/OkkplI2sgWLS+9TUznAGqPLx1ru6EB26Lj/C0GAbqw:GsvwfWP/gplFsfS+Szn+AJ","tlshash":"96d1f844397ab837e23ba0ec44c5c020a7162bebd4746ad0dab75e6e0298d5c734573e","size":6296,"data":"","first_seen":"2025-12-02T10:11:40.000638Z","last_seen":"2025-12-02T10:11:40.000638Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VMenu-CWsDHqP1.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VMenu-CWsDHqP1.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-14fe\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dn9u7tWPiDzpbZ7PDVB7z1lyJjcYmupT0A8JoL6uYXJOkinhJc3K8raQrygKH9yOwcLH9tJE%2F%2Fa5PAzIpQsZWinoVfmP9ApH9HXwPo%2BO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09ce29f65689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5374,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5372)","md5":"6b4ea19fd0943934698a655450839379","sha1":"1ab0f71fe1c56ecb65a3b1c093bf5cf2bc496182","sha256":"de845fd7f9e14786d4673980ee191f418c0ee80d568be3cff4f97f4e25fcd721","sha512":"6f91f73bb72ffada460e8566283eaf32d53de2cf9e11c1f7bae7e8de859b5d8567a62863b2bdb95bf1ae548824898e6540caf7cb93e72b473be8fbc05e755442","ssdeep":"96:uxkk1bbJmHVDAAmOVFxa48l1sLU1sbsNjwpk23YtSMOxdKmRaEqB:ul9bJmHVMOVW48jsXbsNjwph3YuxdKm6","tlshash":"d0b1f90cf3f816b223f75aa894a18b07533da6d9281dd4e0753b1d151292744b7aba37","first_seen":"2025-12-02T10:11:39.968278Z","last_seen":"2025-12-02T10:11:39.968278Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VCard-CLXZQC7B.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VCard-CLXZQC7B.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-13d4\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8m1cOCEjBLZTSMsuxXdXdB2q%2FBuAEhKKdOViry1wWxSQ%2BL2O2e67jnbQk%2FyrK4DriofrVgbmrLNkOHZKo0FFuVVWRkS2E9%2B1aV%2Bl5WEN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09ce19ed5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5076,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (5075)","md5":"8ff6c3735ab7fe35c9cd88f7dd87cf0d","sha1":"e94d2bf2d530f79863b9a7583ce2e218bbdfd3c8","sha256":"28788dcae8ca41f57a7e7fbd8537492bfac8ad41b870af8478a8e4a71b985c26","sha512":"b8297297daa79806354ade04299dfb6032af2aaad4057596255b82e1ee48f096f99632f53a15d8b386b121a9db650e1a67d5ef6c855c0b0bcaaef0dd73f590fb","ssdeep":"96:QUMk6F7E1SVBKbCCrYR8TlKBepZxSjtNFTb6ZE9ysOq2gFHM:r6pE1SVIC/RS/XxSj9TQE0sOq1HM","tlshash":"6da1425565baea3de63b908ce4ede12257254bc9cae9c590f4f30d0c53c9544b36032f","first_seen":"2025-12-02T10:11:39.972594Z","last_seen":"2025-12-02T10:11:39.972594Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/safepays-logo-BULEOeSX.png","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/safepays-logo-BULEOeSX.png HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/auth/login\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-32eb\"\r\nx-cache: HIT from Backend\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFn5MJxy6TFnDH5b34JXMW7WzEzFjF656KG9ZBZ1cfsYNO43csASJ3a20MkbGSC%2F0E%2F7X3LJw31JRv0ytFtgdsyt%2FsRmwAKKiC1tG3Bq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cefacd5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13035,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 485 x 134, 8-bit/color RGB, non-interlaced","md5":"8f5743e5a71197b78540eb17c99c75fb","sha1":"03806cc37c0ba6633b5d26c6d0b828010e1b753f","sha256":"02c096cc4ffaf7741418f61ed3dbe0a902f1b3c9878469d2c0b1bde3b9aa5668","sha512":"8d6edb9cdbf5678790851e024742520caf65b353ca12e0443a498d12931ae7a23695557ac080840309e7af1bd2e52abf9c88be8d7441c9c7b7891dc1395863c5","ssdeep":"384:SyTcSdids8Z2iAHc5mOIPWnPh3Zz4bAeLfe79qCYS/m5ID:9cJZf5vIP2hpkAofe79qc/m5ID","tlshash":"4042e1ef10ce9155790af7600b15d895f06c945e8351e10a4db00a8bec60269bdfccff","first_seen":"2025-12-02T10:11:39.977487Z","last_seen":"2025-12-02T10:11:39.977487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/index-Kxuq9YSd.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:04.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/index-Kxuq9YSd.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:05 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-4d1b08\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r8uOyJG3hhtiTY14JQiU2wtqyEmFGBNlqs8dk6GvHfJSMYPMbmytaZLMZhvNV7pzNelb%2FHMAmbqxJALZuCfLzXRoVR%2Bd8JFgEsfKRANG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09c43fc15689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5053192,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (43631)","md5":"df798a547f13e6bf61154f9807da59ca","sha1":"c8a18d1a659a2509720eeaed61b8d3547abc94a2","sha256":"5a91cf818e16ae2ee50a11989ed6870099e357072c6fbc4c6a30563c113eb25e","sha512":"2e454cfb87f17e294097410971512f0e141fdae741a643afe15e274244918a38efeab48e17e3f91641f3ac6f993a785b8a8341ca48ff8a182f95b221ab127433","ssdeep":"24576:KsHj5nRfLg8mOd0aHyfNSbIApn9qTuTAFdc:JHj5nRfLg8mOd0MyfNSbIAl9Zcdc","tlshash":"b0255b85b296387346a355ecd47f1107b2362e45644cc468f8bdd8fa2da5e0832bbf78","first_seen":"2025-12-02T10:11:39.981135Z","last_seen":"2025-12-02T10:11:39.981135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/cdn-cgi/challenge-platform/h/b/scripts/jsd/13c98df4ef2d/main.js?","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:05.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/13c98df4ef2d/main.js? HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:05 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=G%2FbnPhIUkiAbs5VbumXb5ywp2CR7AMLiRLA2yRCnbt8MYHU%2B4ZOxBurjxeY7iNB1aAQh0TTMd%2BQPvA%2FdALhiBRpMvE7juSq2pOgWpeep1mGHmGBqDDszAB9dVPys25f4VVUD\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9a7a09c9bdba5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1391\u0026min_rtt=757\u0026rtt_var=787\u0026sent=756\u0026recv=48\u0026lost=0\u0026retrans=0\u0026sent_bytes=873555\u0026recv_bytes=4284\u0026delivery_rate=32249839\u0026cwnd=446400\u0026unsent_bytes=0\u0026cid=24194c4da173581e\u0026ts=1078\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10030), with no line terminators","md5":"56ad6183d014fb486349cdf1cedecf09","sha1":"e637c636e3bd3486d1c016b5582987d37525a2ca","sha256":"495ff0e49da3851679520f64bce34094dfe1ec71e516e846a57393127c576679","sha512":"639e8c96693ec73a58f9650d5a33b48f26bfc162953bd4b3b80636e6bf449f9077def5f41c553f879f351cead1de35a7864a48d2242dbd0452939e712cd1da2f","ssdeep":"192:hrgPIVW+7m8hFX0X8XlXQXAXsXZ/X2XX+X4wXeXH+6lUOObcbWeI//pwjujJiVqb:OPiJX0X8XlXQXAXsXZ/X2XX+X4wXeXHC","tlshash":"732217c7bd8eb019412a44b6a437f0c681fd8f8610211c51d251cafd7e2b3b5bd6ae4a","first_seen":"2025-12-02T09:56:09.06649Z","last_seen":"2025-12-02T10:11:39.984297Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VForm-JklBOXeE.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VForm-JklBOXeE.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-2fe\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=haYvVBejvlEbpKaC3MJnqC43%2FnMp11QlyX5U8Fy6ARdC0LMopzs4482%2F4FA5Sfbcea9YDnik6EXukqD0hZ9WJmpRsaVA8UputKJX%2FNUP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc384f5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (765)","md5":"bcb0b32c888d0a6ff0bc7b3d804640ad","sha1":"18fac1ac05498244dbfe8907a334bb7701394575","sha256":"5ed0588198ac9a933fa091d8aa7929934e9e0956e788ee1ff11a01b0b859692e","sha512":"c8f3c6cd7d8c59575fc724bcd8b3b47d306f3aa98592c7c0cae720ba3eeed55152198b1cb1000e0392cefae201c048c74fae9a43e74e3a7b662c14a93b2c7271","ssdeep":"","tlshash":"be0165687cf1e6f41b1e0bfd46671c0301621f6dac7a81a04472ed61379cce41315b2e","first_seen":"2025-12-02T10:11:39.986296Z","last_seen":"2025-12-02T10:11:39.986296Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VContainer-KdLmn1hZ.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VContainer-KdLmn1hZ.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DH9vEPBot33UY7O16ECIEj1D6MpUyJ%2B080A0tN4ZOHftWuHv6SCTTdAsqSc2Yx34iVVyKpoZMP067tIniKHqsm0mpgieK2RZUd8rxxk3\"}]}\r\netag: W/\"692eb6ce-1ca\"\r\ncontent-encoding: br\r\ncf-ray: 9a7a09cc58735689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (457)","md5":"fa4d58daf2a298dbc904dda2360f7023","sha1":"be2c6cd3e6195f7de0ed1fe06e426d704ee85a62","sha256":"7f8639f03b92768ab19161039cb091e2b715beb8aebe19b5213dd7302e2c5c97","sha512":"d6ebb5512fec2142d7f83ab6b3b23746540c40463220c9aa6e239eb7e4e3dc639f4ae5465167d156268d305f9061cbfbd61bdebece98a52a3ed3cd3dddc31de2","ssdeep":"","tlshash":"f5f05c196ec56674f7a7188cad1010400f219756ef778cc4b0ee81e8a39846c570baa9","first_seen":"2025-12-02T10:11:39.988033Z","last_seen":"2025-12-02T10:11:39.988033Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/global-f7j7VBh9.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/global-f7j7VBh9.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-2c2\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CvfgqsgNfHNqVCG1ZTZxYkRydcVfcMG61qeVgH4GMnd%2FlCn6A5ibp32pluyiCPiFPhqeafWaeL0juPhbvPYOk3OQDgf0W9M1iz6ZmfVV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09ce09d65689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (705)","md5":"a05b2c6e96fcd47d791b2c908b1272ca","sha1":"5e517a735d9a300f31fe59349eed9c080461b129","sha256":"639df049b523ecbeb093b2f1349095890bf0ae9cbfa013394d53a403329a3b33","sha512":"f44c470c54a515c3ec83d16ce4438c52d76d9316f093b8418725d0d21b654344123764a95e51ab12e3e5ff80b1215eecf91fb2f6964bd715d4bdb7390f1d3048","ssdeep":"","tlshash":"3001c04e61e09070f05244eaf254193a93390854b24f48e9e55ddda83e9b4fac17ef7a","first_seen":"2025-12-02T10:11:39.991948Z","last_seen":"2025-12-02T10:11:39.991948Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VContainer-KdLmn1hZ.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VContainer-KdLmn1hZ.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UQRIdPQRTXLjJxUSOCkLcrhHfdqWPR5wUgvYFZ%2BSxM9HCOE29fDNKdZo9wz%2B90NpJZkk42vLwkr4Iw68uyrvTrOnX%2Bi2GSyxccfdbZZw\"}]}\r\netag: W/\"692eb6ce-1ca\"\r\ncontent-encoding: br\r\ncf-ray: 9a7a09ce19ef5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":458,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (457)","md5":"fa4d58daf2a298dbc904dda2360f7023","sha1":"be2c6cd3e6195f7de0ed1fe06e426d704ee85a62","sha256":"7f8639f03b92768ab19161039cb091e2b715beb8aebe19b5213dd7302e2c5c97","sha512":"d6ebb5512fec2142d7f83ab6b3b23746540c40463220c9aa6e239eb7e4e3dc639f4ae5465167d156268d305f9061cbfbd61bdebece98a52a3ed3cd3dddc31de2","ssdeep":"","tlshash":"f5f05c196ec56674f7a7188cad1010400f219756ef778cc4b0ee81e8a39846c570baa9","first_seen":"2025-12-02T10:11:39.988033Z","last_seen":"2025-12-02T10:11:39.988033Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VMenu-CuI4en0f.css","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VMenu-CuI4en0f.css HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-27d\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGHvsJumSXSSM1tRMFCk3zQPoHWZId8%2B9V4lkuchNV8eivWZwJRG3v%2BrVkCTCiC0TvS%2BGkQADV%2BzKgM%2FzTxAk%2FkD0Wm%2BgLfkUOm5xHee\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc28435689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":637,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (636)","md5":"15665965a85b0ecb12d9c98acdb788e7","sha1":"1edd36cfdf56b676437dcd43f419072ed72dd9dc","sha256":"998a0eb873b44e0e69f581ce2a1dea85e8d58d753882341064163ef74b1f7dd5","sha512":"5e8e0f5c9d1d15b15fa44829849c1818c4dd33997d2a9d40af862e640e0adc98788dd6523d84d9e9e4e008b7a4bf9b8faa3b25d8c921d27bdb690170167646b5","ssdeep":"","tlshash":"22f0867625e8c0359b98e42f429f944ed356ef84ca30040eb957231a6ec7bb4eec5211","first_seen":"2025-12-02T10:11:39.993452Z","last_seen":"2025-12-02T10:11:39.993452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/global-f7j7VBh9.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/global-f7j7VBh9.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-2c2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xmb2rpUNEXkaijGCCWJAADgzleDNSYoEFZwEScWMhqUD7KgPC2O6m6kP5JOCOqLUnLlaoEeKAdfyijiLAJwBFKeWDAQABDCSsXJ6YUES\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc384c5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (705)","md5":"a05b2c6e96fcd47d791b2c908b1272ca","sha1":"5e517a735d9a300f31fe59349eed9c080461b129","sha256":"639df049b523ecbeb093b2f1349095890bf0ae9cbfa013394d53a403329a3b33","sha512":"f44c470c54a515c3ec83d16ce4438c52d76d9316f093b8418725d0d21b654344123764a95e51ab12e3e5ff80b1215eecf91fb2f6964bd715d4bdb7390f1d3048","ssdeep":"","tlshash":"3001c04e61e09070f05244eaf254193a93390854b24f48e9e55ddda83e9b4fac17ef7a","first_seen":"2025-12-02T10:11:39.991948Z","last_seen":"2025-12-02T10:11:39.991948Z","times_seen":1,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/helpers-BdJtXry9.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/helpers-BdJtXry9.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-aa1\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42AZHZ1gnF3X1BeHAni5JZxZGBJgb6NDGCFKFcPCEMjbPmNolmXWGaX1mdI%2FLKvGlsGdCh9prXX0ljhvISAeyEXf2WMdw0EC%2B%2BQ7dI5W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc384d5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2721,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (2720)","md5":"81e3cfa4886a78c1a9d4d07f1ebd9995","sha1":"606f5617d1913d1286022355c062afeeb384481a","sha256":"9298217dfd10be2d61d250a4c2ca03a26bb330e29519d65cda958973ac19f879","sha512":"678d3622917de2093faa0032e9f6ebf776711c186d6d2e1a40c5f8053dd6612f1d1443f3c005a8e70a8bb1fe10f57f6ec28a0d63279fa1715854dd9062d5bbf5","ssdeep":"","tlshash":"795185a4f2ee02085bf150f5c0ab8102332efa67bc868660d01e0c766d57d4bb279f99","first_seen":"2025-12-02T10:11:39.995019Z","last_seen":"2025-12-02T10:11:39.995019Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VRow-ClQlDVHn.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VRow-ClQlDVHn.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-b2b\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RwBD39UWgu%2F5EvmCxh%2BBST%2BJMG7eu34IgDnJWI%2Fxbt5XP%2BiLrgnr3e0WSYLSeiviGWyY91EPRQTMXh6qoiQEqtnpGhYrKgqWKv8ozEm2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc48695689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2859,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (2858)","md5":"055c1ff8bbbfb4fe6083e3c36dcf0948","sha1":"830abc133eb2ec011ef49da1d2536c940471379e","sha256":"95f88eed229578e0e79f3ad64263ac462ddd51a5360e47b6d446866b8805f9fe","sha512":"4d9b3db37a2a4598d8e9b9e36151b324a4d84f38af0d2ff6f59f8667243b20bc4f6c45812babe331dda1336ad21a80f07cc0a4bed0d8431eebe0877a225e35be","ssdeep":"","tlshash":"705131a47459f5b30bc49ca481f92461a8cd3f4ae486e5f0f2ef19ad1e430c46367f89","first_seen":"2025-12-02T10:11:39.996693Z","last_seen":"2025-12-02T10:11:39.996693Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VForm-JklBOXeE.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VForm-JklBOXeE.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-2fe\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hzqBOdfPmQzZPM5DIF13lQF6F64Yqa2TLM%2BW1tQjh7kwi0QxLIca3NKdXZqsrdMvEZMEHKlSrzLm92VBTvZTphD%2BOXM1uLgqWSR%2F6EZN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09ce09d95689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (765)","md5":"bcb0b32c888d0a6ff0bc7b3d804640ad","sha1":"18fac1ac05498244dbfe8907a334bb7701394575","sha256":"5ed0588198ac9a933fa091d8aa7929934e9e0956e788ee1ff11a01b0b859692e","sha512":"c8f3c6cd7d8c59575fc724bcd8b3b47d306f3aa98592c7c0cae720ba3eeed55152198b1cb1000e0392cefae201c048c74fae9a43e74e3a7b662c14a93b2c7271","ssdeep":"","tlshash":"be0165687cf1e6f41b1e0bfd46671c0301621f6dac7a81a04472ed61379cce41315b2e","first_seen":"2025-12-02T10:11:39.986296Z","last_seen":"2025-12-02T10:11:39.986296Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Poppins:wght@400;500;600;700\u0026family=Roboto:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:04.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Poppins:wght@400;500;600;700\u0026family=Roboto:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 02 Dec 2025 10:11:05 GMT\r\ndate: Tue, 02 Dec 2025 10:11:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31655,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ad46cc46b5d44d32289619c18ad55866","sha1":"54529093a9327c7738875ab4229d1ce00fb70daa","sha256":"a58dbd807f675917317d10643b55f0126118cec3ff826d43d4717b5cba773c41","sha512":"f373bc80033c6a280063276419f36669f71c4c07ebee9fc3af3daf82d4a18e866538e344cfc55317f52782ccbb2837bc57cd2d587086dfbf7b1190dea5062cc4","ssdeep":"768:eTcfFBhiEymDcTYeBai75tdmtC0BQiVPTX:bAwR","tlshash":"54e220a1042b9400ab830cd223cf7f36fe5e51547045d1b9abfd1e9aacdbc66436936d","first_seen":"2025-11-20T06:58:45.569527Z","last_seen":"2026-01-18T14:54:36.879053Z","times_seen":6,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":123,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/index-Kxuq9YSd.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/index-Kxuq9YSd.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-4d1b08\"\r\ncontent-encoding: gzip\r\nage: 1\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TikmHEF2MvAh5YcIkP5AgdcKOkaGq1fwrbQshY3iPuRRMr6r71SuEsp9bpFx7xi9rKJsTIrMDOrbEdnL0mF46ol%2F0on8x9gkDkZE1%2FwF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc384a5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5053192,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (43631)","md5":"df798a547f13e6bf61154f9807da59ca","sha1":"c8a18d1a659a2509720eeaed61b8d3547abc94a2","sha256":"5a91cf818e16ae2ee50a11989ed6870099e357072c6fbc4c6a30563c113eb25e","sha512":"2e454cfb87f17e294097410971512f0e141fdae741a643afe15e274244918a38efeab48e17e3f91641f3ac6f993a785b8a8341ca48ff8a182f95b221ab127433","ssdeep":"24576:KsHj5nRfLg8mOd0aHyfNSbIApn9qTuTAFdc:JHj5nRfLg8mOd0MyfNSbIAl9Zcdc","tlshash":"b0255b85b296387346a355ecd47f1107b2362e45644cc468f8bdd8fa2da5e0832bbf78","first_seen":"2025-12-02T10:11:39.981135Z","last_seen":"2025-12-02T10:11:39.981135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VField-Ccz7qRV7.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VField-Ccz7qRV7.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-1898\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9h8zfVrTsdwV6K466EoBEA6QVrk8g1neg58Si%2BCC5yWHHbOUN5rb7E8Y1Tlqx4v79jJsofmzux77fNpUBnm5f%2Fd9nrYOxPyKwnTKMaCs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc48615689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6296,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (6295)","md5":"c604f862e3085c4264c16ff8a0d95deb","sha1":"05fc2915d3b13da960a42512758155c7abadcf8e","sha256":"28b6571b96d7c0997f93503a8fa4fdfc3343938d37d8b44499d2ba7a24fa5060","sha512":"421bbbd994b1dda08137997f70621c758a6c8f23462153bde1037703564f9df73f83f2e143b6f5703ea806a64a1f438ca97a3b8421664fd6e13b8db01c9f9249","ssdeep":"192:GsvwfloBl/OkkplI2sgWLS+9TUznAGqPLx1ru6EB26Lj/C0GAbqw:GsvwfWP/gplFsfS+Szn+AJ","tlshash":"96d1f844397ab837e23ba0ec44c5c020a7162bebd4746ad0dab75e6e0298d5c734573e","first_seen":"2025-12-02T10:11:40.000638Z","last_seen":"2025-12-02T10:11:40.000638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VCard-CLXZQC7B.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VCard-CLXZQC7B.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-13d4\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yu%2B8Ekq21qrNT%2FlmrUNU5NWzESwS%2BtZLN%2BPqKasx7dLjmzjxfX1a%2F4TExj1IU7U7KsHsuRI1EPANBnOF8PczqxlEPFIwf4hMBEM9QkTB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc486a5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5076,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (5075)","md5":"8ff6c3735ab7fe35c9cd88f7dd87cf0d","sha1":"e94d2bf2d530f79863b9a7583ce2e218bbdfd3c8","sha256":"28788dcae8ca41f57a7e7fbd8537492bfac8ad41b870af8478a8e4a71b985c26","sha512":"b8297297daa79806354ade04299dfb6032af2aaad4057596255b82e1ee48f096f99632f53a15d8b386b121a9db650e1a67d5ef6c855c0b0bcaaef0dd73f590fb","ssdeep":"96:QUMk6F7E1SVBKbCCrYR8TlKBepZxSjtNFTb6ZE9ysOq2gFHM:r6pE1SVIC/RS/XxSj9TQE0sOq1HM","tlshash":"6da1425565baea3de63b908ce4ede12257254bc9cae9c590f4f30d0c53c9544b36032f","first_seen":"2025-12-02T10:11:39.972594Z","last_seen":"2025-12-02T10:11:39.972594Z","times_seen":1,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/helpers-BdJtXry9.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/helpers-BdJtXry9.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-aa1\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uh%2Ba6J9Ja7085fSlqVFsj0OvkMNLAibDTwUhV5LPVCFqmsf6dS2KE9Sq92a9xDMULeNIPTrSJSYkMF20N0l%2Fd85HihzKhG7pZY0uMXGM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09ce09d85689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2721,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (2720)","md5":"81e3cfa4886a78c1a9d4d07f1ebd9995","sha1":"606f5617d1913d1286022355c062afeeb384481a","sha256":"9298217dfd10be2d61d250a4c2ca03a26bb330e29519d65cda958973ac19f879","sha512":"678d3622917de2093faa0032e9f6ebf776711c186d6d2e1a40c5f8053dd6612f1d1443f3c005a8e70a8bb1fe10f57f6ec28a0d63279fa1715854dd9062d5bbf5","ssdeep":"","tlshash":"795185a4f2ee02085bf150f5c0ab8102332efa67bc868660d01e0c766d57d4bb279f99","first_seen":"2025-12-02T10:11:39.995019Z","last_seen":"2025-12-02T10:11:39.995019Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VRow-ClQlDVHn.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VRow-ClQlDVHn.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-b2b\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=APMFFhdTIAYS%2B91hCnCiCm0h%2F7HBIPjZK8vj8G6FSPErwIC8C%2BbcIHb8oR59Mt7SHFEt9MWxNqdLWj%2FZ20eFcb49ml5wQizbeBJO4FqE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09ce19e45689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2859,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (2858)","md5":"055c1ff8bbbfb4fe6083e3c36dcf0948","sha1":"830abc133eb2ec011ef49da1d2536c940471379e","sha256":"95f88eed229578e0e79f3ad64263ac462ddd51a5360e47b6d446866b8805f9fe","sha512":"4d9b3db37a2a4598d8e9b9e36151b324a4d84f38af0d2ff6f59f8667243b20bc4f6c45812babe331dda1336ad21a80f07cc0a4bed0d8431eebe0877a225e35be","ssdeep":"","tlshash":"705131a47459f5b30bc49ca481f92461a8cd3f4ae486e5f0f2ef19ad1e430c46367f89","first_seen":"2025-12-02T10:11:39.996693Z","last_seen":"2025-12-02T10:11:39.996693Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/dashboard?v=1764670028983","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-02T10:11:04.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /dashboard?v=1764670028983 HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:04 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=10,cfOrigin;dur=59\r\nx-cache: HIT from Backend\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=haMtykfC0QH8L6M1usqa68WSa0v3NxMgkDksW9H7ksWXfy2NzG3hjdUx%2BnW7dsNdH9lo1jwDdFWRkeXVT6RhdDsx1sLAYMQScyODLIuh\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9a7a09c28c5356ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":2232,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (926), with CRLF, CR, LF line terminators","md5":"8ed1fca68bd535acb8ef1d294e5b0ba8","sha1":"8d275235dc1c3f7c8f9287c4d770604d0cded2db","sha256":"df9954d7651278dfe92bf67f6b1035c5f11ec099575b8492a9a30445eba747ce","sha512":"d0ba60945f8cb0d3460a021f7796a14e3369ecf2f036bf58b8c0f814c9b10e6d2dfe1614464203d4cbb0f5c14d57882665f1df7ea2a06e49faf08852abaaf71d","ssdeep":"","tlshash":"394167b53c1044248261824a35b6fb6dfd3761b75a06b440b2fed82eceb4e5b445bc2e","first_seen":"2025-12-02T10:11:40.00228Z","last_seen":"2025-12-02T10:11:40.00228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":35,"dns":14,"connect":1,"send":0,"wait":73,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/favicons/SAFEPAYS.ico","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:05.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /favicons/SAFEPAYS.ico HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:05 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:12 GMT\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6cc-3c2e\"\r\nx-cache: HIT from Backend\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gvi%2FM9S46VU71L1uJ%2BiilS4UEvnDM1gs08HvtMFUA%2BPnzEkPfsNM4oih4wbamIXfez%2FjniL97TnlmmZaXhhjdTRJUr18PQ%2B64Bomrr9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09c97d925689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"622f74f30800b2a855d0376ce1fc8400","sha1":"379c8038993cc1b905e17880169c9ebc11043d71","sha256":"16395c93437249a3d40b0af4f2db6ba671a759810034faa7771546e57080c465","sha512":"49d7fe856f378d8aecb038fb358b6ea473060b07127a3238c4a6b867252e39955cfc8c849f811cd91cd5dd087d085ecbec73853c176bf6f8fd0cb8608f9fdfd6","ssdeep":"48:+aNpmsMTFVcpMndl5FL1lFQNX8m8931Fz8aNr9NwxuSzdB+/Y:+cmsMTFVcuzNHFqsHJTz8aeu+dB","tlshash":"2b6241e7ff960f14dd1162782c6a396150ebae8961dc524a0c8bf4061fff14311ea321","first_seen":"2025-12-02T10:11:40.00384Z","last_seen":"2025-12-02T10:11:40.00384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VMenu-CWsDHqP1.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VMenu-CWsDHqP1.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-14fe\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BfNksBWpbShpJGiruyJ0NKAleGev4RgjwJZxuVtq6Cv7a00rgg9xtbc73GP0qmRdmX6g2nebjYsEu70lGKtQwTQs2Mp04dlfs08DEZ8z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc48655689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5374,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (5372)","md5":"6b4ea19fd0943934698a655450839379","sha1":"1ab0f71fe1c56ecb65a3b1c093bf5cf2bc496182","sha256":"de845fd7f9e14786d4673980ee191f418c0ee80d568be3cff4f97f4e25fcd721","sha512":"6f91f73bb72ffada460e8566283eaf32d53de2cf9e11c1f7bae7e8de859b5d8567a62863b2bdb95bf1ae548824898e6540caf7cb93e72b473be8fbc05e755442","ssdeep":"96:uxkk1bbJmHVDAAmOVFxa48l1sLU1sbsNjwpk23YtSMOxdKmRaEqB:ul9bJmHVMOVW48jsXbsNjwph3YuxdKm6","tlshash":"d0b1f90cf3f816b223f75aa894a18b07533da6d9281dd4e0753b1d151292744b7aba37","first_seen":"2025-12-02T10:11:39.968278Z","last_seen":"2025-12-02T10:11:39.968278Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://v2.safeadmin.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Nov 2025 23:36:19 GMT\r\nexpires: Wed, 25 Nov 2026 23:36:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 556487\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-20T02:48:55.374691Z","times_seen":214365,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":106,"dns":1,"connect":8,"send":0,"wait":9,"receive":11,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:05.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Oct 2025 06:18:58 GMT","end":"Tue, 20 Jan 2026 07:18:54 GMT"},"fingerprint":{"sha1":"C7:F8:82:22:3E:BC:9D:F4:7B:0A:EF:A0:EE:C2:C2:D1:34:7E:55:1D","sha256":"EA:85:37:F0:6A:CB:4D:61:4B:3D:2C:58:4B:FF:E5:CE:3C:33:94:71:D8:11:77:5A:C1:99:2F:94:1F:D2:FD:F1"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://v2.safeadmin.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:05 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9a7a09c45db9568a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-06-20T02:03:18.418867Z","times_seen":337419,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/index-dHKPWpKD.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:05.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/index-dHKPWpKD.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/index-Kxuq9YSd.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:05 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-54fb\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7M2HJGAb2PYDiZA1AkDXcUOzO20%2BlXdA1qrnWmdF2MuWLIDqXkB9DR5MvCmUwsmShz%2FhvAyftwCzjCaFH%2FMr3AxQBcqYorkTeqePVml\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09c97d945689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21755,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (18051)","md5":"ff156edba9d8a8888ef95967eb084a2b","sha1":"cb4d043784ac448a45dd4cd6ac431fb351bd165d","sha256":"3bd2cf7213712ae72eac806311f6bdf2db7f6a833a2c73aacb13aa4e96f3f79c","sha512":"482eb8651a80e47f3a03c80b5a0b29d55e6ec8b003eb4d28882ddf456b1f5abbad5965c00bdcbfd5c780fd644986942424765044e6d824bd97fb5ae846720b4b","ssdeep":"384:X7ELy5017rV+aY+ld/SkEcy2ra5sSsYlsOBcSRD9j:X7Uy5017rV7Ywd//Ecy2ra5ZBBxRDF","tlshash":"d5a2230157184ab8b67d1fc97bb2320f10e05f01a566c079bf25bdbf746c88da1a47ba","first_seen":"2025-12-02T10:11:40.007263Z","last_seen":"2025-12-02T10:11:40.007263Z","times_seen":1,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VTextField-KNAsm1l0.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VTextField-KNAsm1l0.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-2d3e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eSDVfr0aQjS0EaPiNzJJiLVpe5WpObgiit8KhZ7AkFYNzCapvvjFKEpSi28%2BZ4PvAq44hjm2upTNFM1ECdaiNhzINWeEBWsP1KRJY2iM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc38505689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11582,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11581)","md5":"b5a8f87eb02cfd32603a9f0e12842041","sha1":"3b0b1d41ac6dcd2775da431b6fb94c3232cc9f50","sha256":"7178b8f2f83b696a43c93b0079d998937558a2c84747a5ebaed0bf2b6416ac5f","sha512":"852344403d8a393a50ee5de30e333750fb442d20820a127d1c13e4b358105d1ad278e0e71c67397f5d627eb4f294dd45359109371df4a72942bd25f5b9b75bdb","ssdeep":"192:hXO1ynRvMEzKpOYNCH4Rpjh/LSP9cNdWaf4e7ZFEdYR6+wqzG9mzG95TgVYuEF2T:1OInFMNpBN24RH/LacNdlwqZFEd4vamf","tlshash":"e1322ac078faf8379f7b40eeb0d68461d6a81b555421a0e191ba193813c9e9473e6f3e","first_seen":"2025-12-02T10:11:40.008831Z","last_seen":"2025-12-02T10:11:40.008831Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/LanguageDD.vue_vue_type_script_setup_true_lang-Cc_1Y6Ey.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/LanguageDD.vue_vue_type_script_setup_true_lang-Cc_1Y6Ey.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-4f2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2OhnBqUMffuM%2FC%2Fz2oyg2cztk357u%2BeQ8qg8VCcz67xBevwe%2BhuVvuR2DMuTl5PNTyhF7TvPpjMfutOHaeXWIgvpT5bC664sofgsXmP0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc48645689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1266,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (1265)","md5":"75d1e90fa6c3d9b286ad46582f9e11de","sha1":"008ac11477ae65a72e34008aa119a71136b08170","sha256":"c3896007f6bd362f8c02a818080f9034b634c2e086af7e362a5c58576e85f836","sha512":"6590544d6741f07ddf209d58a1a63e34d3e6c0d9b53f5c394fd6201f35dedcdd4d49e3bd805d071cf4eadd29bd7715a6a7b455e72c09eb113c54bf7cc0375e7f","ssdeep":"","tlshash":"512132c9701f8bf5105358cddca58810b35904ade7feaed370ba4e1533a265c26dc756","first_seen":"2025-12-02T10:11:40.01056Z","last_seen":"2025-12-02T10:11:40.01056Z","times_seen":1,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/BrandLogo.vue_vue_type_script_setup_true_lang-BEmsdKHM.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/BrandLogo.vue_vue_type_script_setup_true_lang-BEmsdKHM.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9AK4wcI8zsRuH0LrAVY0zyPZpmnfEr2UbYBzN7bMm7heX0og38IVlcqjT4u0AkHb47vQcS1zCcoCdNKMpuVy0q1rab7AcutBpnMc4lTQ\"}]}\r\netag: W/\"692eb6ce-1cf\"\r\ncontent-encoding: br\r\ncf-ray: 9a7a09cc48665689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (462)","md5":"34091808a6fef6a28aa529809d5bd093","sha1":"cc87da153c4fd8bed670b1f4f67da4b6a435f865","sha256":"2182f5f8da85365fb8c555b5510c74546097e20955548e8f5b229ae7afd991a4","sha512":"660e5f47ce83e88a216e247206dc79fb0cc5b07346eec59e2232ff720497d0abebcba122c90bf17adda62d3daf3e65a88c619e73d39f86c75a440a99e1952bda","ssdeep":"","tlshash":"daf0dc9b6c4b83bac1460845aa674444688d8b98932c7fd9c3a8a62be0d3038c82e960","first_seen":"2025-12-02T10:11:40.012023Z","last_seen":"2025-12-02T10:11:40.012023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/Login-CPB6FCqF.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/Login-CPB6FCqF.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/index-dHKPWpKD.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-ff0\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NxKP%2B5i8YtkOllAIGTtTcmQYLwkWj1jO%2BHuvZvC8wHFNenKlJXPRD2qTwn1iQBHfJyqq9oI8R9V%2BSuIXUM%2BdlnsRWavAZ3ZqWK%2BKocGU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cdd9b05689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4080,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (4079)","md5":"533020a938d619ee7bed0d25a8f058a4","sha1":"cd5f5a3da92a4c550839ff1b18d64042cc5d9d9e","sha256":"e9e3097902d297aa0792978db98cba136de5b635a13cd3c861efe4bb0637f5c0","sha512":"fd4353c1de3650cab3906bf6df4ac389c6b0fb26d8665728d14a9f4f9a14049047bbe06bb7e5c1e30269716083b25857449f63d46d63d53bee41714953158174","ssdeep":"","tlshash":"a681874c747dcbfa718958ecb02214306164692ee3789ae070fe0d306fd6e4647a9767","first_seen":"2025-12-02T10:11:40.013593Z","last_seen":"2025-12-02T10:11:40.013593Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/LanguageDD.vue_vue_type_script_setup_true_lang-Cc_1Y6Ey.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/LanguageDD.vue_vue_type_script_setup_true_lang-Cc_1Y6Ey.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-4f2\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPFkjyp3aEKnOBdF8Vl5j6GoxZRGgdCVaAJN8kSmhjXIcwoHgBjS4tOa4NqL73Qc7b%2B%2F7iLOqHmYgALWwUUd6I2QoW1lDn4ZJYT4WavK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09ce19de5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1266,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (1265)","md5":"75d1e90fa6c3d9b286ad46582f9e11de","sha1":"008ac11477ae65a72e34008aa119a71136b08170","sha256":"c3896007f6bd362f8c02a818080f9034b634c2e086af7e362a5c58576e85f836","sha512":"6590544d6741f07ddf209d58a1a63e34d3e6c0d9b53f5c394fd6201f35dedcdd4d49e3bd805d071cf4eadd29bd7715a6a7b455e72c09eb113c54bf7cc0375e7f","ssdeep":"","tlshash":"512132c9701f8bf5105358cddca58810b35904ade7feaed370ba4e1533a265c26dc756","first_seen":"2025-12-02T10:11:40.01056Z","last_seen":"2025-12-02T10:11:40.01056Z","times_seen":1,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/BrandLogo.vue_vue_type_script_setup_true_lang-BEmsdKHM.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/BrandLogo.vue_vue_type_script_setup_true_lang-BEmsdKHM.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WKyLa79y%2FjQqVLIuFXPNM8K8Nbkjx6Jvkat081B2TyoWr%2BWIODSGg7QByAwjDxCafIde90ouXkenapC96cakKnHXx8iPXJBaXSy3zwUx\"}]}\r\netag: W/\"692eb6ce-1cf\"\r\ncontent-encoding: br\r\ncf-ray: 9a7a09ce19e05689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":463,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (462)","md5":"34091808a6fef6a28aa529809d5bd093","sha1":"cc87da153c4fd8bed670b1f4f67da4b6a435f865","sha256":"2182f5f8da85365fb8c555b5510c74546097e20955548e8f5b229ae7afd991a4","sha512":"660e5f47ce83e88a216e247206dc79fb0cc5b07346eec59e2232ff720497d0abebcba122c90bf17adda62d3daf3e65a88c619e73d39f86c75a440a99e1952bda","ssdeep":"","tlshash":"daf0dc9b6c4b83bac1460845aa674444688d8b98932c7fd9c3a8a62be0d3038c82e960","first_seen":"2025-12-02T10:11:40.012023Z","last_seen":"2025-12-02T10:11:40.012023Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:05.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\ndate: Tue, 02 Dec 2025 10:11:05 GMT\r\ncontent-length: 0\r\ncf-ray: 9a7a09c98d9c5689-OSL\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/13c98df4ef2d/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AHwzzok3qhy%2BK%2BY6iVbJgvW3i4aucwdjNJ6BDcXQyCL80vqreNo1ANOpXbHgu9p4PBZWXyXrb5mQ9USQn7zuhQkBk%2BO%2BXE0kDC3dmXdldHtBdZHGEjLUwU9h19ojj15LeZq6\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1473\u0026min_rtt=757\u0026rtt_var=830\u0026sent=754\u0026recv=46\u0026lost=0\u0026retrans=0\u0026sent_bytes=872799\u0026recv_bytes=3971\u0026delivery_rate=32249839\u0026cwnd=446400\u0026unsent_bytes=0\u0026cid=24194c4da173581e\u0026ts=1054\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10030,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/Login-CPB6FCqF.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/Login-CPB6FCqF.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-ff0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h7mUqC2UevCAiuXMsiRSyuB7O%2BCPhXCIJjt74UhZek98wjrmb4jvRH6cgWr5wZVLLPthu9dmEmTEmZdwb1gmMpq9OS2W3Xk6O5pD9R0z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc38465689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4080,"size_decoded":0,"mime_type":"application/x-javascript","magic":"Java source, ASCII text, with very long lines (4079)","md5":"533020a938d619ee7bed0d25a8f058a4","sha1":"cd5f5a3da92a4c550839ff1b18d64042cc5d9d9e","sha256":"e9e3097902d297aa0792978db98cba136de5b635a13cd3c861efe4bb0637f5c0","sha512":"fd4353c1de3650cab3906bf6df4ac389c6b0fb26d8665728d14a9f4f9a14049047bbe06bb7e5c1e30269716083b25857449f63d46d63d53bee41714953158174","ssdeep":"","tlshash":"a681874c747dcbfa718958ecb02214306164692ee3789ae070fe0d306fd6e4647a9767","first_seen":"2025-12-02T10:11:40.013593Z","last_seen":"2025-12-02T10:11:40.013593Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VTextField-KNAsm1l0.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VTextField-KNAsm1l0.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-2d3e\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B0WFnP02OKRA8MbCCRv81VrojHgtf2hpfLlYBUwt%2FilYE8cVjcSMqEBK1JM4mrLige6nIHafnNZYa4oMiJePc9y8oIxOo9k1vd86xMg5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09ce19db5689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11582,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11581)","md5":"b5a8f87eb02cfd32603a9f0e12842041","sha1":"3b0b1d41ac6dcd2775da431b6fb94c3232cc9f50","sha256":"7178b8f2f83b696a43c93b0079d998937558a2c84747a5ebaed0bf2b6416ac5f","sha512":"852344403d8a393a50ee5de30e333750fb442d20820a127d1c13e4b358105d1ad278e0e71c67397f5d627eb4f294dd45359109371df4a72942bd25f5b9b75bdb","ssdeep":"192:hXO1ynRvMEzKpOYNCH4Rpjh/LSP9cNdWaf4e7ZFEdYR6+wqzG9mzG95TgVYuEF2T:1OInFMNpBN24RH/LacNdlwqZFEd4vamf","tlshash":"e1322ac078faf8379f7b40eeb0d68461d6a81b555421a0e191ba193813c9e9473e6f3e","first_seen":"2025-12-02T10:11:40.008831Z","last_seen":"2025-12-02T10:11:40.008831Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VField-Ccz7qRV7.js","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VField-Ccz7qRV7.js HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/assets/Login-CPB6FCqF.js\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-1898\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8SfdlRRQ%2FORXtoFs8ddjIxAQAP1eGbYXuYxNgP9DWodM9awuyvC6eqx6EgznU%2FmxE68CCHJQRniPs5YgglUW3PRyUC1k1kI0nOuAXZv3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09ce19f15689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6296,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (6295)","md5":"c604f862e3085c4264c16ff8a0d95deb","sha1":"05fc2915d3b13da960a42512758155c7abadcf8e","sha256":"28b6571b96d7c0997f93503a8fa4fdfc3343938d37d8b44499d2ba7a24fa5060","sha512":"421bbbd994b1dda08137997f70621c758a6c8f23462153bde1037703564f9df73f83f2e143b6f5703ea806a64a1f438ca97a3b8421664fd6e13b8db01c9f9249","ssdeep":"192:GsvwfloBl/OkkplI2sgWLS+9TUznAGqPLx1ru6EB26Lj/C0GAbqw:GsvwfWP/gplFsfS+Szn+AJ","tlshash":"96d1f844397ab837e23ba0ec44c5c020a7162bebd4746ad0dab75e6e0298d5c734573e","first_seen":"2025-12-02T10:11:40.000638Z","last_seen":"2025-12-02T10:11:40.000638Z","times_seen":1,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://v2.safeadmin.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Nov 2025 23:36:19 GMT\r\nexpires: Wed, 25 Nov 2026 23:36:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 556487\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-20T02:48:55.374691Z","times_seen":214365,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":111,"dns":1,"connect":20,"send":0,"wait":14,"receive":5,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/cdn-cgi/rum?","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1052\r\nOrigin: https://v2.safeadmin.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/auth/login\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1052,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":2120,\"startTime\":1764670264670,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2024.6.1\",\"timings\":2},\"pageloadId\":\"a87d8270-c575-4e91-9631-41be87fabab1\",\"location\":\"https://v2.safeadmin.net/auth/login\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":598,\"domContentLoadedEventStart\":1172,\"domContentLoadedEventEnd\":1181,\"domComplete\":1950,\"loadEventStart\":1950,\"loadEventEnd\":1950,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":22,\"domainLookupStart\":23,\"domainLookupEnd\":37,\"connectStart\":38,\"connectEnd\":58,\"secureConnectionStart\":41,\"requestStart\":58,\"responseStart\":132,\"responseEnd\":132,\"transferSize\":1862,\"encodedBodySize\":1096,\"decodedBodySize\":2232,\"name\":\"https://v2.safeadmin.net/dashboard?v=1764670028983\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":1950},\"siteToken\":\"f6de6a83c4fb47d3af88d616fe8381d8\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://v2.safeadmin.net\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MyL5AwJN36%2BXFEP5AH4bKEvy037%2FcZUp1ix%2B6Uz0ISU9KSsJKQ%2FdN9qcF8t4MKlwSBLQk78Usjbqm89L%2BHhsMcEXkR3EHDsZwCXdLb3a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9a7a09cfcba55689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/index-baBWvByH.css","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:05.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/index-baBWvByH.css HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:05 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-a4277\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oqQZwviFphWXj6mkQTuGsSpn%2FbS%2BIVzK18Ynkl8%2BgKv0ke1R1dL7gwatpwiFUkK3Ucxz056RCdFkcoq6z2rRRwIwkaKM%2BCt7kWuk%2Fzr%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09c43fc55689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":672375,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61129), with no line terminators","md5":"8ba0cb2114278ca8b725a71c56201384","sha1":"1a0a94698de1c58eb094a27bcefc8afeda46813c","sha256":"46c6f5f5ea7f1abc623dbc126581cdb1eccf8bf56614b14f2c6c6e0ec69e1cdc","sha512":"e49d35476b7ab02e70ebace18594199d07ef8f488434d33594d0385336eb5d76fcf8c783177e2a57e39748f0eeea014de6218a7b50be8cca80c5e837cf320b15","ssdeep":"6144:Uw+pHrtZczRZ4+rO4AHC9WCKePMh8eoXOBkZsNLxdyyw5wmMz4RfD89BFEL1o0DP:78ZYZ4AO4W+Mh+YkZs+B1K+dA0xF","tlshash":"23e488e2f18800d6a737d513c380b7be642ff5b2c6095c56fa1b272d5ac36a615c2e2d","first_seen":"2025-12-02T10:11:40.015776Z","last_seen":"2025-12-02T10:11:40.015776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss.spaypro.net/app/local?protocol=7\u0026client=js\u0026version=8.4.0\u0026flash=false","fqdn":"wss.spaypro.net","domain":"spaypro.net","tld":"net"},"ip":{"addr":"104.21.46.19","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:05.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spaypro.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Oct 2025 17:24:22 GMT","end":"Thu, 29 Jan 2026 18:24:07 GMT"},"fingerprint":{"sha1":"D0:34:58:54:E4:93:3A:56:18:C5:FD:B3:17:86:3F:17:8C:C0:FF:4C","sha256":"0F:66:3F:73:B4:88:CE:A1:B6:3A:26:FF:D7:AB:A1:9D:EE:CF:29:70:95:DE:F3:AC:57:76:7C:EA:0E:EF:06:9C"}}},"request":{"raw":"GET /app/local?protocol=7\u0026client=js\u0026version=8.4.0\u0026flash=false HTTP/1.1\r\nHost: wss.spaypro.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://v2.safeadmin.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: dgQu0qyz4GPG6BTdiAnZYQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 02 Dec 2025 10:11:05 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: TXMmumBJwhCLg1oykN9hq1LE9sc=\r\nX-Powered-By: Laravel Reverb\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=AJbZJSI8UFaMe51fI0R0kXg2h3yTjnXaTrVLDZlwuSkv9CwVek48l%2FSj9s4HaUTEHRNPSHnUvQle8YwqMGpv59YqRjs%2FTHRSG7ZhyVdxzIQCwKzEJ4RpHvAWaNPTeK9Kr0E%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9a7a09c838aa56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=504\u0026min_rtt=462\u0026rtt_var=166\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3108\u0026recv_bytes=1214\u0026delivery_rate=7006451\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=ee67b87ac04ae5df\u0026ts=76\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":25,"connect":25,"send":0,"wait":60,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/cdn-cgi/challenge-platform/h/b/jsd/oneshot/13c98df4ef2d/0.9650601113174461:1764667946:FChe5zewjw8fLyqjMrzrxsp-CZP5lXZf4mXzMhZkaAU/9a7a09c28c5356ab","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/13c98df4ef2d/0.9650601113174461:1764667946:FChe5zewjw8fLyqjMrzrxsp-CZP5lXZf4mXzMhZkaAU/9a7a09c28c5356ab HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12129\r\nOrigin: https://v2.safeadmin.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12129,"data":"Fz0+hVWLh40h5O$WeW18f+V38Xk8JoJ77VLWrR8lg3ygi08HlmZ$g4WT85e0GPzz8XI78t87370W8s7Wj$-+I4zwCc+lgbzkXYT1OGn+j78UWh2Z+6bd8WZsE+mqYhDkpWYEWnG+Vm8HT9l8$dwJVz+yCBW0ZKwIT3E8f2v8WKk2+Ti2bz+J8WgTuDe82BLX882R8baKV88wS+8IOVEO8+8nTvLVt6z27kE8luv4G+mFWbpUxkEO8VvviK048hVR$60OdF13TtiLEWoF+hBWr080T$9ssNJ2EVuAgcGp6iWcIUAZ+cGpypW2eAW1j23PLyt-6E8V5qvWi+WWXEe7UA8WV-1WdEw6rEHrwhosirsKgAy3s+3WzfmWE8zdV78WjqX9$lVlpTJKg+8P1fo2ytvRk3oV0FiREptfkF1wIgtbfsGoARE85DiI$5d2buxJXv882omwZcF9GVT2w5Z+zStU51jB+WPkut3YY6rr8GUss6WTLpHOyS9IYJ+PIKuVD4KB78txj832lotzBZlwZCW6vzB8aKEzRg+VLC27Rh4F+8TP0lFNmnfTkfB5g0h8dNql15rtZnxxN5rjHem92lmSWCV47jwgg5xemjLn0v0At70rG6tqBTv5uo6TU-9ELNZbdN71iBrH1xpJJ0yplw6NaJpeJ+ke6TpDxz6Yo5gymkkb$728WyxmlhqiWtX25+TO8gYB182lsJnN5g85i+qh5nPaJIbY5l7HkoVafWN7tqOth+G+O8zFWKWaX7sh8edL8801+LV4GPU84OlbWv8P9+sV7X7mX09EbOz93k8P5bvXul7of7b0lG5N+YWa9kbGlmVlhjNdDTaH8Tl7Z7OVgTJ48HF8++XWWtOXRI9$ZF53t2iV2VVFWJg7XkVI7$dp0aRWblmTkYfP7fYFb4hLVLN+mWmW87PvkJ5a7LfzTz62zGvo3w8JOfLh$mz1Ol5azOqGkGtLr1y$S636h+LfI80W9gCVmaYOgBf5SPlVH$eXkvjlV+bj8PSVv7VkN0lP4ij2$JtlZ7UldmZ7jtuCJl88be2WJghmVklWq9vz85gbt8843Zgb70Xxn-PtzB1dai3FweAlHhEfo3v7U6vOli5fuwwWxCsHURwAyK6uL57sXzw50tkj+X$a+fLWXG+XfjY8nGskWliZ+1vV3dULsZb78v7zkeHzCXlOM$jJldw84XsSnlvBx+gl$mKLl$04Ml2VbZ9EFWV+LU7gX0Zag8gv+6D0aku$Z$at0asUY$eWSeWBHkGa7n3Yt$-qmlrpWYN30e3XmI8h5P6lshzXjHWaLzkda8zUa5ge7OLu9ZWaW4ZhjOibU8qGsX0X+Bs0iWtFhAGLGkO8ZVLO8kYImRLVgjtzc9HWkD799PK-PEJX7nagpa0iJge6io-E$P2rSHWKkbbCz7+gbJrb5apl-Pja1nTB0unBdAMnaso4x8stpaspuHTPs0me0mdBGesDBkOs4X6ZvbjxkcLXyT+bTYfDF-EFsgVIqxcaSV+1p87qZhiHMKmcvAxMykMjhijkoDzO0kBHWduNU0ELf0qXNk1884T+W8Mz2BDHm83R+F8+XvOtw8yAaHI4Sq6879v$Z7Umx-HnLq+h+lfbHh70eW3bWl6ElnRWngH24X08a7A03ql2WMS+WJuH23-J0OEFJugevm94$yREFWJKO+7i0v56DUXJ0LDh0+C6sX+JZJvObcOD+gGah5b03kBhV1+8PxqsIL8X2$sLhq4W1OfGZJ8xoMDXKqt$ll$7J8GXqi8tzD3a+cOt2VO8jH7bM3V12llvEKvn80WJX+FwFFaHgOgG8bumivkAbzVa38FDCOuEP8003ivghV8qP-9qAIhGXGt0i2oDOvVDkJxxGBJWe8gJlYKXjEDLhDW0iz0egZA2BZua+00X8IWahPNZj3sWe+Yfm9ZpZgFRVfiqRBF5X3oUI070$5uug8H8XHlVDDgwzrlkDF2fOm706ujW8BJ7ZP$3ecJJVNFXYg27hlO8Zg-wzA+O0nDt2873XH3kwS3RP5Zj+7$RdmqYI7O59+evnGmT8N+y6bVFb1vlPivkODAGt2vnp88SWdSDa4Sq2bzH+B2HapEecBFoz1iTBOE8YN+uIoiqiu4rGB41+ZqXnSJymUbAqM6gSL4mCpcD0dXb1957brIlXB8LqbON7DEuXvpLqW8ZV4SVxur8$1s61$zIE8t7ShZfqPaPEjs1faJOgdHKiBuevXdgqa1XnJtHHX6WP4oTrOTEI7tfxAefF+62eDZy8FiEUv8aOy$FYDLVZdAk07rDbuvjuq9537e2$qfFWsVAl7nY0WWaSVSi53Jh7rtTH-rugjZS$e2rRiJlaXLbIcPIoG2nhmI7WvjECuanLZFLqk85fIW7i0lkO02moZF$F9JGXJEoXf$X8tMdi87ilVh4jSe3blnKJ4siL5c9KVw69IVYFquyds770HG+A9rTADnq+UZF$dUtVKL3WJCn6uHOlFdVU0IvWFubZWF8DbaSp$FUxiWcWOHcw6VN64s2zHiF+gf9BASOHW080dnJ4njCWzo1D09qUPid2BcdAqq0PH0Ho28Gi1Yj15iWl6yddt493fBXuaZqUlfNX1Tjc72vaR8zDRagWPi1001WaB$3zA4sJ38iWFPq9JmzYlUuARIZPbFPG6uSSzfb0kJ8LRENE$LgprBdnPO84Klh1WZ4$C-2rV7+G-XHtkHRb0b2MV6GGq4zE5$DI+tgMLI8TfvaqWvF5VwIJYhLU8F2wEdg9VHia8lp6zOwva2TsVSwRNLqkiPizoB9XSf+JOuqJaB9tVDk+xEJ14xyO$cCLhUoYYK4xJND0b0gnYuXwJtEZB9Xt4IlzGT9F5xXVvhmu+iIO5S05lSdPJUg61Hr2xx4Brw8vqakqtWN+gFoV5hM6Y7nEeXHfJqr0i8L8kK-2lH$1BhTvvIFVJPdEJT-Ce$trKZiYu0Ohs0gYvtsgl8OJqAHAquj7bDJkTWBpOvTOMPaR6k114c3gh+iz-i54JV7NE8pb3VxcY1Ob0+$4kfA555urVHFF4LDmxTb8uwCgwv5dbrOLKlXFx31U32yd08yPc$wYgVocoVnCxr6+PutVOSHaR7Zy3P9NnVh+2T5GsfHIlVom7bUMIHhOlTNtShRK9$zr0udcirT+eOrPE+Ro+JkqwSXRDr6V8octfNMplpdU2KXgmXqKavDcK$b787sA89nx714VnKt4qjrHUj8+ZR6GJWJ7pvYLIqc35-$FNupo0KfaNFqbTCYbBX2htknzeqgTHXM+afNKeASLeJ-qNfTaHn$52--Tx2OOs1uT57fj+BJW2nP8qjFtDuW0Zi2kWV$fZ+U$IfqREWdPTLVBn8d9Awwh$MU-rH6BN3XJWhrvLYb8+EshMvB1JfX7KgsZpaRA2Ndgk5vubcB7hxFVCNdxhWOq-RF5EU-s55G8i8B$7WvX5xhWJJYV-l8iDG1cchafai-O-5FL8EfRzRNxc$8y39Di2npxpnJ50i26eqbRELjN1Re8NREna4cRo74Ok8AZMJIxqs+JBXG7r4yJO957D5DJWU42pxANpxC2B7yfjl827f+X5xxbdcyiD5RX7868h8pqU5E5IO-NMx36ji55MsR7RZ72MZIZkFf7C$M9EtdiE4oc1R+P4qC$1syJ1F5iRcWiVxn03sJhjUMLg8FZVXHUMW5Ni570o5G4y$cZBVcx7pFJvn35G5KqNFk9BO5cGV7FfRf5CxBX+5RhSXds9O4bUL7z8Cr5+s+yqxFN3FZ4EzGqiGB$BZyRDxmL7GB572e5GWEkdc1cM00h7S7I8H82Willk7-ROsz40IGVEFK$5Ro9+5hnJVwO6naZSX7xwbT7q5qFJscURc6UcVE4y8uLbl+nd8aTI$CFyt5i8c9GBX1V8rl0Ot5y7a0Zv0GFze1ioJ1bRRm4Yni$xU14zk-G6FeiWl+2cZv0oL8COLgRj6fX8H5h803Faa3ZamU5+D0Kzv8CW85Oo8D5GlY5E2l8z3cO85zyfLEzRsJbJ6fL8PC9BLaxxZPsBJnL8dDlVRociZ5dDxUZ5-3Gy$w5HzSh32w9+ieR90MnXWG0h$ZmHz+Wvnwf5mSxIt5l01+slbUXWN+5a9vXWtW$NVE8i80dnl5UXlGNZwdfDxxnaJTZWNU$-Jv75oag8rpF8o0rCRmFfROXz-lzEslc+ncb8NxVwFn$a9n98b2N+2W2a7S6yNyJzmRFTJ9Z54tcicyN3XWFaG+iIN5p2OZulTfGIJaIp75dHE-8057ioxgKSsOGlIMx8tY0y9ef-l5hJbSfaOS$5O71BW45geeV+0sfyG+OPkYND2gjzPPrUUMJD57JyLO00XAfv7rLgtdt7nKJcU+6+chiaCDfaXytLDD7Ed3qET+AEAdiEddWKUR75kRG7pPYD$3L8opW7ZLuHPf6Mb8LaBZp5$XO8iPvxOlrcx71lzVFJ6-5GNEv1iz-3szi8ZB0PcmbPdCJBqct8jyR0dE2zSeV$In2w4$TntPjH6BO8qCROWu0+xmXHsIqWl7j01jnuquFPK+PRRaBmpdXI0s46$G75ev-557c67ZjdblT0Mxn2c+ii7iL8emwMU2ZPiVU$pvk09e$+e2V+Aj9eJPIgAlUWnvOJTcbDNVEoqvdnsvjiRnioXPSzaVTC0JRC4e7jbxhDXj74O4U$E5eki5fDNhZ5S1t2xrNgzaMEYJ9N8NO5tNR88JWy645K80FaO04H-y5RVobJRcF8CvNaR+2+S$CnLJ8JMubU71W8bFi+P9N2CvJ9n+49izHN0E5ht85yfsFvuI7CtzPk7agp97mXt5Gw4ox7m7w3lF$lMiWrtZYLmlx+57$hV+bMsrnXFflu3FslO00eU-cqL8-35EU485UMXzv+tjV7Gt46RjGxt5o1t92OO1i5V+iYlldw755Ecb7oh8f0dr9JL8y72EU84cqc4HAHv7lflgmEp$w0H2-Z8+JncLa3ZL1NFoAJp$ML27OzYo1exR0qbXM0AEEusfhXmjt9xrhpU$+uX70ulu7orLr9X5LjLaan9C68WBCOX0qu+I0ftHdJG0rmPE2DWVTs6qx3LXwlgiU0R6i2mTlBJUNFUJlcWi80uJ9+xJlnqFVx47kouB9JwxhuuEDqzRng+qd355FrqbxFlHe41eROspLj6VziZi$oKayTUMbSZPO8WOXXzELVKc8IN5W7X0W0VXDmf7deuaqejHVlIeGt0ZHm3U5EqVI2e0DagBtajd0Lpd5Gl9nN0E5+0+P$McVgPPH+Xamx467tna9chgPhOOLLveHqjf8IZXKXYf4iJtU9REIe34zGZ9L7-B+TU2Moczwme10f274odo2h$aiTNZSXGmgZBNRAJr8627z+2x2BUozcl85KhcU85DUqoog2z+UBZmvW85hwcyt1UdOy92PJ$v52m8oaXPz7qTqvff8evEcH7ZVoxt12KU2M5ac6ne04O80sLmPR7COE+7dGnc4XZquJO000IZEF6zaVHHvf2N0PotCDx+itUpFjCzVRUp74vgjtpAp04t5Bo41ZrlieDlM4g4YyRAWJfJAlfDsK0kLuE5$dVoWcGtL5+NXKht6Rc8yzMi9qu+j+tpXkkjcZ3dxf0f4PdoWBpOFyU5NONzoo8KxlBytzmzTtRERE75LILjcyWtHBs7Eq94in73gT5xV8w5JlB8yldDG4gPVzBnt5g5SwE3UZfkEsH8$eTmURWk1+0eZXxCs5z-iS5RibrOZ52jqqY8$zebGtZL15vz+PPAppWH1xXd5EREsXmgIoKXpXrXod2TLOU8N8h8xF$JeGVgvkgv5PL2IU4ntcZuBXVEU4dnxgMVu$Kn0eFtFf5KZKFkttF8Mg$B-dg5Cgwkv+ZE684+LTcgxU$zyxbzI2AVz4MxLjGX6u70F7TmOamjL7Ss6UL7vXkk+$I-6TniF$TE1Bcyhtpm6+M+o+Oeb$Mot8p4b8g5iux8iA-XstcJmoi9tiuLAW13qS6UE9xLDnX8zsgswJFJ77ajBClPv8Ic2VylAo1pi-XjRZdELuaqy3slC54Xnam10WekTSFytUoduclo-+2eH+hgwJEdTVTXPjAfqmYJ1tyNRvcNciO+1BaEgXm92PzDFh9vj+cpdwEd5ZAZBNWVB2BCttE-hOI2B6XWCa7lP5t3leUigxx+JR42OnL8B6hIVEcXSX-DgjmjguXI6JIWHdFo3UszRim8jDZdLdh4XFbC95s9h9JL1i4$YOWy4X9DnDlMsMFXTt8i8u9anaO8o4jELVUZwTlZyl-3RK9E7oCTGcfACO$0MxsPml-eNXPZjLaJf-FyNHkhZiZ7Hdyrm$aEJ$EvCd-+szlTFdW$uguvaACwg7sFK8yJnOCCqk9aOt$4ac8r6oIuW8ZbSInvy7gEV7sT5GOHzaqRVwBTsFnK42JBqTLVsWHVn2w8nJf6wW1w+NhkKrKasUXw-ZvrBOeoy3xUa+0xhr23XFgUZ0272JU5JBYFXumJsszrBXcyL2iVqD18xAMAmq7Was9h2OtwzGGwa+i0l+5BMyssKW3JVXrWMi-omUnXerAfJjk-mtzPDqCOZj-+NUnKJv76N3k8qR9qqIRtIj8w+rHFjnN1ZFxEBncPkJJFEr4hS8$fl$KlvF4axsyFsF8+Vhymssztb05bC8y3lH3ZazIT4BdGXg364UGLD-d3iDU-GE8Mc92Fbmp3tbd8Xodef8Spc-Bw6-L8jdy5Hq2Bkinbdi1o3U+lhTJFl+h3B-PdJaw-PbTIUewZwjwK4oZeCR4rHCtw9jRA$5RRZPGwSjI9uNU6$BJLBUBDv+Rv+AZpwdMYcHf3wE0+ffz6H1dUMu5gwc4116H5qWemdKOKLuKwMGNhYfGJCuS5+4y89rPFnrgdAzGx0ANCV9kDpMXd3UZNuBnqjMXd6B$a4X8$1e+5$35YjH0e-O$okIWvylCJYIHBF8tnhh8i3MWMO-lpwvlv+BPveCZLj+qtkBLTWIPux0KX5MVt5DJavKI2Bqv7ZkS7xb1IFknlkNdro837fIqsap0qZ1YSK6YFlmvU2UisDsY661JNHGHq+Yh+IyxljICksWKBaHPTBTN9LJylotW7NxqGDnHp15J6SRb7qtSdzqjHO57JlvcYe1GewSIdkFinR+j9fZBo4bgUmrHtoKYo1SHLp9$p431-H87CxF8inbpgezyTmgfrU5fIY-002lU9u2yp-fhFFfG$TUrH-HoG5T0s6lx+in6J9qFh+54YGISaRI3J22zk59HUUYUgT+5RfF22ikDkBo55XoGGj7Ka9D8PYsjNC3AYRi8Np$gLA6MyGRvsrIb8OoNij3dY23+rKi6iTtFihiFT9mythBj+swd$KXw0TRHCIxKBg0RBEof9dcG9DcFcV8Abz1vE5K5R2KEr7gdMNeBJpCMo$X3tE5rhRoB1+it9mxdFioU0vXDjmJswEXzVxSKyTIUC57OhylDcjxJLd3Iwl+iAPBZ5+700heghppZUB5pk5MlNarm96880FIdfWWKu$TvjdizahjH7$EjAkJ8FjUO77l8pumVx8RK+Pp86ylu8y3FnVeJnWN0hrinIe1J1pWt+hlbzuYGoVHa7$+J4tVYWjBp8m+UH9dwFWahp8TaCS8+TzGEUbpL8A7J02wI781lJ88JU+xH8ZWIbZ7F$xvWBb5lAYYap-tEdEFgIp810EnsE2oJKfFUkWoLZkV7GTuZbs0L8LWD99alL3u+N3sJS7$jWjbaHK8L2Rik7hs6bl-8BTd9kPXD+KWh++zllXwWqVkZS+BA0d8LGshTWoEL2fYXw8mEH0voJ5Wl2RushEktOiVW+RUzUa+2g7k0xOVk9AzgkyB54izOJO9WgknMN2CMy49vE+WkBJ5t-XFiUVm+JesEX+Wul3VgPe7a4iRo983VjgFbbzu$34O0bBuV8buPrx4GdhyBPz9AHm6Bl0WAtZHUZdEJD83hdks8q5xKvmOi+cWL36E5l29WP7RJg7jlazRMWpzhkbEw8fPfo8Mke82otvFLGvbq72LMW4z$-V49yhBLr8aCami0oULbaMWW2+Iol+chSmfEy6XmoDWRVCks7M+Hll4KY$yL80pzNmfXIxUGWAHROkWxZ+lPHEH7LW8YeW3KV45tL40UW7gIq3N0HEOl6LkilyVruTB5uWvDVhxW0+gAnaG88h9mWlPKli$RlvO+qPaJ1-Xzqm2f367Psv+JzNhlE9Yha$9wRvF-h2+qPzb0sl89gfoW+vf0aUbdlXbZ3J+10uau9Hj8wX+mdkT85rYLO5Gn7hbV+jzZ2kDXs8pbT0yEN4FYO4IO8tDZHZzf7VeEZ+Hti+sg2od1aCbra3anBtzk+z83FI40ZXi+E2-73XCJ5lm+SW97HE4Hs$b5foV7EKJbMX5W7l+I3VLkIo8xWDZjXshHAUK9ei$8BhNa7bD+A4Gn84OkI1kkHf0dj2nJwvV8CoNg9173OJ+H3o8XqW+l1ljIJuB53Pn$8GOBE$30zd$lq8LSdi5az7wqGKISOX3DoJEXacgEPUEW835H0VlH$IOE5V3ZE7fuetw8FF9aMZWk+iGOdJ+93MZWEnpqBho0HEbPZIv6OCOv8seHEin2M9rnCYb37ZZxYAFfOp8M0CDJe0vDrhI8jEV+t8O7DEW-IF583njF-o5zwV48Gkci$NW1vtiIgCzl7V7Gt125$iBZhVsrXj1cUViw8JvGEG0H+8suRD6kfzDaDV-L+ARb+Y1GJ9f8ZVhDizDVjU4+PcuGdVP$CZ9BSbt+sd8gS8TMhXH605ch+hg1n53DZiOj7TVDTjogWlunw5DWN8TSY7VAnXt4i6J78XIRmV83MW$hMit0giX6Jv$GG0da3t0F+tV9788WJ77nzfDkb2fEkgbLX7XuFkJ$NsLOAUk+aV7bNNMt2HlURnX5lvIAlU8C00i$X7X9OWW7RKwqVYKp8NLjK0mNE02hjORjVW5Tf8vJjy6M07KJR$0$$83FgZJZHvVyvR+8DPd3Zg7XDbs9VhKLdgi2cW01JthfiO7C0OZ2OJ8Ld7Lr7M03D3OpWHlEp4zi$vkoRIXLSayqWKX-OJ+$dqK6g7IT4Tx8RHSau9tiONOYWtqiZ4cYLXDE5Wa5Sad$xHjej5meZpHlZNL8ohm8-owiJ52$Vq896l3p4ivU$lrkVvndSajvh+RVO-IU+e5d$8ih5JI-k325yxiSXvb7o+U95ebR-$lvs-+Ug$Eo2PhbTgkD73lc5n7tov27Me188+GzGtEuO5beZSM83V1GyPVbs7X7fJRzH$Ic8S0ETRJfrXZWZZ-05afV8BVA0F+Ag3utyDrWiZl0m51eG3h48iYN5wW7-if$Lzz3Tt+Ttq7CjDT7Ef2DjU4X92LvS7A0ogNdu3V7W$7q0w8RvhbXwXj1az37O0h6$Az+8A0GP9dlEhPpIrfUuHt1uoZFTwoNLGL98fElynvNKUaln0SSF8kFUpVcllvXbOhjJhtLqlSec5VGvboYaU7bCjKFNDWo289lqebGfX+UdhUq5S78j$1DNJasWLIF8UOq2q1VpSYJfvxRlV43cEO+JqNF7fT+bf$uLMt0ntrEMF4WwvWcGyRzvS0JskP++RUgYHl8X5D87e6DDfV0VRJclqsZmvzOW1UpMZ7ec17yT9LyL0moec19N1Sd1JG$fsZYHnjk5+py+fLCR$FjxoO8oEVqZ+OCjq77$aLdAqtiCHv-v5Om1AxxfzkR1rpDPMm$AZFDvWI50VauhovhHAoHpGPIwVpJ+65$WLkPg+UyFZDm7aA1Ld8OOWa2qoGdjaHUii9dohojsNqFoOhV4oDkt+nqizvGE78CrhUNmTMtCbhBA9LOT36W4G$nHKpvO3BWC8EwA1iIhUSgk8Rr8z2k19eAjhk5n$8vzUjOKJl8qc$E679PJZvoeUbl9vrzA0Z$4aV7GNT$v7OVCl+Fc$YT42as8VuW55ulkMvhOtvMeU+Y$xHEM3tLfbU5CCTt2KtDvow4GFNdDifOMVXyOC$r+tfNOb01PxMFm8$1A8MlrbNMimVb2BbP7N-jGlFjx7sPTgRbJcohjd2XoR5Di4F9EE$l4OgLci7uvnDV2+uAJhic+dao6pyJwJYbbZPA+JEOpFJH8CHHZxJfCmjFldqaHGDZocmvuFix3VO+HWWdclcdNguXqDVoD+VSdqXH4x-1Wpi8UiUnFlhj8J8HH4Jin$NDZdFD9vWebeilxRUdwkPvzb+Wv6mbNLu8cZk08wqR1$j4VAp5ceqqI$A0R8t7t-2hjxfXazVv7Ge0rp42eadgd8b5uviwFHOV8FxRHT3EEpvO2HgtbPWk6OmT8Z2I2T38eVn1fU2L01tKyp5F02U7LKO46ZMOX3iW8S8DU$XXDHfGWBVYodbvX+3fi+Wode9YRTJr5pk92BttPS598Le65lhD6$G8v7b10C2zBqDXeGmbXUa7bDxHhFDJSlDfowjJzYP6YJU6ouuGjr$6xx8Pu09c2c6kDZE110rguUt22DVm8xgZ7w2U5aAK7rTd-$A6N5lYqbWqUK0jeDPODxZVhUluzeZuuGHqod7sPBe9Ttr6X1hD5mItUow-jsoi6Z4yeb+G-HP87r4uPt6gGH2bS-kJ4+cPfGFoUSk87mJFJTihDiu0rGuStx8XhZJu4p04jwcZah6povpWFJYbxidk6oBrFLd3Nqa17N2jr6lJYsy$u6Oui6RLeWVj$qZZuR6GoxsxqChxwSkD$A8k2tP7uTiION4dsZ+aD6S1+zT21OxqCyHu3owwBKsb7lRD9SYrgynYxqucHSSt69mY3JXucDsfKr0CNAb2ucDconrRmEVsluyfjft67VaEiu$pq+2W6+2SLvXw+x+nqJmVah5+a05JuZO+BwYb+dhx5fU3luCWJXSEqrSt6iVIfw7wKiZ2AoCZekc7C7rX8jO4cGhJ8$EyPflFtXIjFEPEem2k59XDkPx$pxVfbOD5Irb0uqhiuUOBUJIbBwZxq7fr6XYZsHSagsSrOpOXDbzYP66fEFDvB-bBwVZJEYrujo3JASS6unyrjje3beaD6u4Krbj13JeSHgA2rFMvIJVXdk2A2OFaJw9UlGvxb2dFzJwi7BCr5S2BreJIwxyH8gsScFAJnh5OdBZI2rj3Xzd6$SlyJ4ODalc1JXC+pYfRa0qITGOw4qi4zY$qmUx$uVgdneFGuvU5$anfknWdcByf9gwor08vYJqCL5Pdh64SYk2Ol+hwtwWvWk6F7-S4FfY6R0uOyeb9l3X+rp8v8VJ8n7IvlrO+e+J0Bzi1jlia7BzP0si4Bwa9PWRBXHsCwD0a8oWdAvKLEs6fY+MpF08ae+cHhzk-YFdTjK3$NwUHA8x6a7$E97twWXELB1HsH2Eh29PW0888svAyY8a70+YUqpZX9p8v8n8WVOiVyngkk8WaiPiCl0kgi57YV0vfulS7lWBPP06GLEj+vB+u2rP+887d8aE-a5zVcOkVT4w8FUsHXUeZ0W7CEY7z7$0hqWYW8kkl42J0IiygKk8fty8GuhoW+8mN88V+l8-+88DW1u9GdlqdwaL+l+VR8LBcU48LPSuXdymWb8xeyTc1aOgoKlWK8RGZLh3gF+AN88nI3goB9ziwD0tnS3gZ308I7WHOohpgvBmNuB$BhEVAr7+E8h59yUKS3rz0T8FlO0O-SYgtBP0N8SLP789kBiN7fwgBWWF+hd9s8SX84SuX788W4szOzfdrx2Z8FooPVTu7hdB++e8NvOTuNJpK4+wacqZpl+W$bfapg2LGMv9hh9ftM8DlRJlw9IzZLTV2Lf3VyOo7FZwahl$uO9ec+9EuLEpkLZTfbVhjV+Nr9tdmKf5hZwa9TO-Y5VsWX5RsT9CBrJTg+MY8tS5HYjWyhn-8Zzt4aZ80hgk4+jAT+0NCSW7+CYPlNynWhr8XBE8Yw3ai8h88EB9Ekuu8YObGxLoya1VsDfOGn39+L2EpxGRJGs6Zi9-vZO8l+V+ipKL8aHd5bpVTVaX-6nH28KuOpWrh30nwxU$2iuhg+883$yaM39kiYcwLXX-SXBc4cYsAdJ8cwRZlWI-48fK5FG585W-488cT488WsbatBWRIeky758qVOXh1Wb+j7Zz5B8aGHbr888CH88"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 0\r\ncf-ray: 9a7a09cadee95689-OSL\r\ncf-chl-out-s: Har8VsaBwuRCKlu+NY9cNw==$BrbYntJzsbb8uq2pO6/+RQ==\r\nset-cookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=safeadmin.net; Expires=Wed, 02 Dec 2026 10:11:06 GMT\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=6ZK8n%2FgFI6bnrd%2F6ZpjsjcXMefnGpdUD0xp7DLbTE%2FItxFQyZQlcKYGM65VCVY5ykSOJYuS4gsoYfBx79mC%2BJq7Wyek%2FFqXjMcYeogiMYt7PmtdIK6Gna7nIaV%2FEeTxK87yw\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=1234\u0026min_rtt=757\u0026rtt_var=566\u0026sent=770\u0026recv=61\u0026lost=0\u0026retrans=0\u0026sent_bytes=887356\u0026recv_bytes=17342\u0026delivery_rate=32249839\u0026cwnd=446400\u0026unsent_bytes=0\u0026cid=24194c4da173581e\u0026ts=1262\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T02:50:12.204522Z","times_seen":16565994,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VField-CeRy_tiU.css","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VField-CeRy_tiU.css HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-4208\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vVfL3WjzRzeHkRDCYyZjiO68ufvqkhuEIPBGc0f4icXuDl2CxtMjkGBtIpjv9Ayg%2F49RJxEcgI8laC3LWPoTfLHkBXTPVs2U1W8JC1fG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc28415689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16904,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16903)","md5":"901b7bb754db4ed929fd88debcc42f82","sha1":"db6fca960bae49cff0f44ef855a1d46a33af8d41","sha256":"e16e7aba07a0bfa802ff89d4ff35f19cae4c4803742d511b5c507753f7ed004a","sha512":"5cf62cc757c17985e30cd946c24663d2c82d5b4f5260e7493dd820f1e05349b2c7cf22bb4c3d278de7a2aeedde1df239f07c3e198effe1f8eb0b8237e846450a","ssdeep":"384:oApgKJpo9txEfGl50E0OHkGQG0S0k/0K1zr:omJpI951zr","tlshash":"c972cfa49a803c38da05f4e4de85ee78df0b03b1df1a0352df6b2d1f5746aa01639979","first_seen":"2025-12-02T10:11:40.017605Z","last_seen":"2025-12-02T10:11:40.017605Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VTextField-B-CKwayq.css","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VTextField-B-CKwayq.css HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-161c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRi%2BCLCl%2BJuI4He7UQZ4Sv3Um4Yj486PbyX%2FarM%2F9LkSIwNLOCSS7T7sFR%2FIgOfcTNZLKtwcshlhW92B9F%2BjO2f2iTVgQVT78MUYhFF6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc28425689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5660,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5659)","md5":"9a1689d7a4a53b03d5eecaffb1e86ebd","sha1":"bc119718ceb5ea02eff0f12a931d8127108be55c","sha256":"fa57ef884b6d98fb1446536882fa3782ba3565b2fee84b2e23ff1009a305781e","sha512":"7094c5a882193f20d4d8e2ccf42f1111e6697a78451734b75bd4c2047aa9040be8b0b6c35479a731950dac70da6d0e06d68bbb9898eeb5291e6f800e3c00582c","ssdeep":"96:awB2KFDy6xP7zSvZifcVcfcx1n9eWbPftf1f+Y83N9WFWDel:aGB7xPTaRLFtS9WFWDel","tlshash":"6ec19a720e71b51c491afef9dcc6e828d2049171df41a4a2c9d3751e92ca2922b7fe3d","first_seen":"2025-12-02T10:11:40.019493Z","last_seen":"2025-12-02T10:11:40.019493Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VGrid-Cb7FdSrp.css","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VGrid-Cb7FdSrp.css HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-254a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9yTyuAiArotLH5vSiY16%2FHKJnZw0Ajd0t5%2FYB8bSUOPkkELanhMxXtpaS8vtWT7Wyzqu6V7ekEcfDcjtz%2FTPFsRoI13fFchoXRLyXKU8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc28445689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9546,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9545)","md5":"2fc771ba69129cafb322e82e05ab5e3c","sha1":"9703a28260dedeb09002b7e299f12ef5b4c4a5a4","sha256":"58f30f378a078b06f3dd886b31f669db5dc79d45499f8e5eaba9f83dbd2a7384","sha512":"e653e35176da4ddb17a72426c5c4ca1a0dd4a3c171e2276a60fe179326772a3cdf7764a29ebac5923170d01d23720c97706061cf913110ce8fe040b803ba41eb","ssdeep":"192:r3jUOkEsX2iy5aiCj2IqRgYtrJqWW8ej3Ff/B9gOkTjGjUEzbRtMeU3zWnEUlhwR:rTUOkJF+","tlshash":"0d12f547942a229d4923ba0f3291746ca15e18bf77b5ecf6b39a4de2203e3d01977c47","first_seen":"2024-08-20T10:56:39.009429Z","last_seen":"2026-06-16T09:48:00.531454Z","times_seen":42,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v2.safeadmin.net/assets/VCard-ByBzRDMx.css","fqdn":"v2.safeadmin.net","domain":"safeadmin.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://v2.safeadmin.net/dashboard?v=1764670028983","date":"2025-12-02T10:11:06.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safeadmin.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 01 Nov 2025 12:51:28 GMT","end":"Fri, 30 Jan 2026 13:48:54 GMT"},"fingerprint":{"sha1":"A2:94:FB:85:71:61:E3:1B:EC:65:65:42:0C:1B:1F:42:BA:5B:3E:A3","sha256":"C8:FB:FF:2D:10:7C:2F:5B:37:58:11:53:95:8D:C3:87:6B:16:61:0D:E5:F5:4A:F4:73:95:14:91:6D:C5:A1:36"}}},"request":{"raw":"GET /assets/VCard-ByBzRDMx.css HTTP/1.1\r\nHost: v2.safeadmin.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v2.safeadmin.net/dashboard?v=1764670028983\r\nCookie: cf_clearance=6YtYZyhVac0JfPy.qrWoK5rmAiMzod4bQfY7YJVPPe0-1764670266-1.2.1.1-nXBwJkGwP2JS1IOxQrhq6U9TqgjKguwzTll6A1b6PVhMmbqrvdpEgrj0uZIP853gCpBGq.IpBH9rQEeglrKEIZkDodF8DuVN2j9xKNbyLj5YcVoz6Y0D5U31He6mwo8nwn2naQcMlzp20P6TIsn8UGHKMJxK6zk7Wr7TJFXB3r5VlgBCj3CGrPazaipb.5.bOXPN9wbHHKg_b6wPxj9UcGEJzAqyefWUO3xQNn6J_NA\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 02 Dec 2025 10:11:06 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 02 Dec 2025 09:52:14 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"692eb6ce-19f0\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bf2oQ8ROGI31g3cI1bScaR2igDA9O2xP9JqxrwsJXFUKFTZrZN4insBcptunx23o4JfcCQX6dqUoDjdkQMKXbIJTya1w9FisnvvUZ1KO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a7a09cc28455689-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6640,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6639)","md5":"1a05c3f5dffb41c9076deeb92033631e","sha1":"1437a51ee386eaacb0170e30d125cf8dd1b7ec3e","sha256":"7443f87299ff1f8103453c231cc420b78c9a89b6ad1fa438c8556ce307da0b5a","sha512":"575ed804fd5c00035fd0181f6465c1f206301079bdcf9e84578ec0bee902df4b850cbe2968a4eecc9c2b5d905d86378b9d078771330b86fd38a42e4e80fb8560","ssdeep":"192:x81bdK0yaKkEwKJEMKKEY0Bs8F/KTBwz7WnQD+WEWyvWJ09:i1bdK0JKklKJjKKN0BsU/6Bwz7WQD+Wg","tlshash":"e1d112a84644147dd94ef8aef79afb7dc371a1c8df22004af8c617d582ca7f6990521c","first_seen":"2025-12-02T10:11:40.021728Z","last_seen":"2025-12-02T10:11:40.021728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-02","alert":"Sinkholed","trigger":"v2.safeadmin.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}