{"report_id":"8e91a646-95e2-4cf7-9f91-1eece8619229","version":0,"status":"done","tags":[],"date":"2026-09-05T01:24:45Z","url":{"schema":"https","addr":"saiffx.com/","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"saiffx.com/","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"title":"SAIF FX — Cross-border supplier payments for Dubai’s traders","dom":{"size":89121,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (834)","md5":"72c14bb535c32e1586c15db7a6ff63dd","sha1":"b8831c64c71d156b014e0ee1506e797f418e8050","sha256":"5dff3038de1c810987c8353f05e9cb11061589f3adc5a997eb47050260f5d8db","sha512":"01571b9ff7e06426eec20abce8da360a06bc970247a0d8ea08e50e146bed67a6ae6282e7c6901388b558ea892f45354d5c638f277b46e39510cb62f13997fa74","ssdeep":"1536:wxvaa6KoniyW8oi9MPAsOXPrUGV+7MwQU:wfPZi9MP9q4giMwQU","tlshash":"3c93d612b3fd083ea02341d6b695777a2b7a9147d64d0218f67c02741fa6ccafa3b65c","dom_hash":"domhashd350d9a04512a79b58976c6a349e65b5","first_seen":"2026-09-05T01:14:48.326768Z","last_seen":"2026-09-05T01:24:47.56148Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"saiffx.com/","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":0,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T01:24:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"saiffx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":13197,"sent_data":557,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":7,"received_data":241830,"sent_data":3907,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-30T22:35:21.728174Z","alert_count":0,"request_count":1,"received_data":519733,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"saiffx.com","ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-08-19","domain_rank":0,"first_seen":"2026-09-05T01:14:44.077639Z","last_seen":"2026-09-05T01:14:44.07764Z","alert_count":8,"request_count":8,"received_data":300217,"sent_data":3956,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-652Z6HHFWM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a49df8a7fd02be8660412eb3d18d0ba","sha1":"ec2a7508dc54b4a925ec4b9fea3cb4b28e6ef2e6","sha256":"3b182c65fdc51a3a615a0dbe69ff269cd9b3f50bb144837110ca504f78a71182","sha512":"1ba5761ccd3379f94f3d2f08ba5ee52704f62e7d818e5d309ce594c88115d80e6bb9dfa4c88e1fba6578e4db31bcc370cf746f62daf264ed724d207b19a81192","ssdeep":"6144:rtH1lhNPZfKXr3uNfDZyc3DR/dEpv3ygp0eHQMlOx7aTSp:bhZeCxM0eHnOFL","tlshash":"3bb409ce73c674229396f178903f018ba57b28a2b45cc89af289dce42d3465a5177f7c","size":519129,"data":"","first_seen":"2026-09-05T01:14:23.585869Z","last_seen":"2026-09-05T01:24:47.56444Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saiffx.com/","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7940dd228c938812e013e5b740ef3844","sha1":"f189d426abd7d1862f9a94e5c7e32fddc71611a5","sha256":"088da69e6af119aad7dfad7f86cc0cbc662d58fd30e4afb776d38afc2c70887c","sha512":"c3310dd07f9f5703f41f6b75500bf0dc11ef013cb75f6066bc14d9ec99d47c5084064d10416d0aa04d709d3b1f70ce87379a3b05011468d22644cdf41f536111","ssdeep":"","tlshash":"13c02b8c320f3c7041eb2740cb3fb604f101321895d4aa30080a23054d30e13d754c20","size":148,"data":"","first_seen":"2026-06-18T08:50:29.438081Z","last_seen":"2026-09-05T01:24:47.572251Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saiffx.com/assets/js/main.js?v=1787561691","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e53108be1a76eb4a67de0eb4d593efbc","sha1":"206533f42c35eabe16bc2e6dadc91f8b0e2fa9e5","sha256":"ef3e65b22a2118760e1d806038b6dcc878aab9887dea18125fd095a4ad8238f0","sha512":"63d9be8f5950a41c166b08f996571dd9ee3f5da617d2b4cb6d0b40bf3760b470c1e3c5bad2b7eb89e8c39c554b416dcadaea453606c54d0f32085b16f8cf5406","ssdeep":"96:438faZSGEvw9RE5lKYXFMRDraTSAMROu33ceJ9xNYTypM/5Ao5akUw:P3LvwkPKYXFMR/aTSAMRDceJbS+qq0Uw","tlshash":"53c1402f7ce6307298bbe17a57df5788b43140071806c8163e5cdb821f91f29697ead8","size":5755,"data":"","first_seen":"2026-06-28T11:12:13.755654Z","last_seen":"2026-09-05T01:24:47.570237Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHqv4kjgoGqM7E3t-4s51os.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.272Z","timestamp":1788571455272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/barlow/v13/7cHqv4kjgoGqM7E3t-4s51os.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saiffx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22788\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 08:23:24 GMT\r\nexpires: Sat, 04 Sep 2027 08:23:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:22:44 GMT\r\ncontent-type: font/woff2\r\nage: 61251\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22788,"size_decoded":23600,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22788, version 1.0","md5":"15481e4eab6dc3277d89f1d5871cf08f","sha1":"25ba8a978a3a493ec9f835f7f2cdefe16b55b295","sha256":"2d797dd8b35dcb3413e1af9d7052b3f4f8c341a147cdcb01f4f06af80db53289","sha512":"bb5ba24476faa25680e6644dba33a98afca6ef0936f7be6ee3888d09c2d7b658ccfaae395f173ded5331529e4548b25d923490be1363132ed30e0e368812dace","ssdeep":"384:Jc/2c7dFz93/eRqONl+60qnSY8IkG5zjP2Z8VgG0BFrnIZbp/QPGIZgdT9mEl4/2:JM2c7dZ9vkq68606SVzGJ2uuubbYgDmM","tlshash":"36a2d0de44d674a2d12f32f43c832d1c13bd3558075ad59b6b1a068bf2bca7621e3527","first_seen":"2025-09-11T19:29:34.815552Z","last_seen":"2026-09-05T01:24:47.562249Z","times_seen":9978,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHqv4kjgoGqM7E30-8s51os.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.323Z","timestamp":1788571455323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/barlow/v13/7cHqv4kjgoGqM7E30-8s51os.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saiffx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22772\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:18 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 226377\r\nlast-modified: Wed, 10 Sep 2025 16:22:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22772,"size_decoded":23585,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22772, version 1.0","md5":"a1e2a2d7d4c0a5ba535913f0a2150cae","sha1":"800311e32df4fd8460628e4927d5231cdd21757f","sha256":"4b52ddd4836b592df0e4832b8286956883cdc651b015126bdd18f184b7f90cc3","sha512":"fe985f90d8f10f15a027f1aa977a4cb36c199107b8a57474b4bf78c121691f566e5add4f688fd2fc29ec7938a674a859181afc556c188af57a15f82e3c3c5c0a","ssdeep":"384:VuBhowtOok1JHF5aUPEgF9CsAvHRH+lG43W2YYsQRCTiZCODvlov3:VuMsktbF9CsAfRCG43WtYfC6CODm3","tlshash":"eca2e15cd3447c83a374a6bf1fe4ee6e09cc82622b39d497e8179c441ea5407799c8af","first_seen":"2025-09-11T18:14:34.478127Z","last_seen":"2026-09-05T04:34:47.863609Z","times_seen":7888,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHqv4kjgoGqM7E3q-0s51os.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.346Z","timestamp":1788571455346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/barlow/v13/7cHqv4kjgoGqM7E3q-0s51os.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saiffx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22976\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:41:54 GMT\r\nexpires: Thu, 02 Sep 2027 10:41:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 225741\r\nlast-modified: Wed, 10 Sep 2025 16:22:48 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22976,"size_decoded":23789,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22976, version 1.0","md5":"8a60890dcf69c08feeb58fd58957bce1","sha1":"bcfe95da859bee1bd1d02549b549e44d0b05146d","sha256":"231d487a993e28bc5567c2be8da48acd8e0a209891c11448491eab45db0f8d7c","sha512":"6187ddb9cf9a136c19ba871bcc229bbda49a169aaa54c5cc2d23eee4a5fb1a8fb3c2bfd380d36a0a438fe76e19dd93578cd4cb4b8a2de7172f99ac3e3ee14f18","ssdeep":"384:nNteL0kK1GkvmnTKS2SmG5zTkkaD/vv6KJvxzN/10fSDjd5Maeb8l9ojIml:nNgkunT6NG5zPof6a/1qSd5MYla8ml","tlshash":"c8a2e1c71355d50becb93d7cbd4d53ab634923a712b0e0468fa804c663464d0c609faa","first_seen":"2025-09-11T19:45:57.90254Z","last_seen":"2026-09-05T01:24:47.563849Z","times_seen":1748,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-652Z6HHFWM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.105Z","timestamp":1788571455105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-652Z6HHFWM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saiffx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 01:24:15 GMT\r\nexpires: Sat, 05 Sep 2026 01:24:15 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 173729\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":519129,"size_decoded":174333,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"2a49df8a7fd02be8660412eb3d18d0ba","sha1":"ec2a7508dc54b4a925ec4b9fea3cb4b28e6ef2e6","sha256":"3b182c65fdc51a3a615a0dbe69ff269cd9b3f50bb144837110ca504f78a71182","sha512":"1ba5761ccd3379f94f3d2f08ba5ee52704f62e7d818e5d309ce594c88115d80e6bb9dfa4c88e1fba6578e4db31bcc370cf746f62daf264ed724d207b19a81192","ssdeep":"6144:rtH1lhNPZfKXr3uNfDZyc3DR/dEpv3ygp0eHQMlOx7aTSp:bhZeCxM0eHnOFL","tlshash":"3bb409ce73c674229396f178903f018ba57b28a2b45cc89af289dce42d3465a5177f7c","first_seen":"2026-09-05T01:14:23.585869Z","last_seen":"2026-09-05T01:24:47.56444Z","times_seen":4,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":40,"receive":59,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saiffx.com/assets/uploads/themes/hero_slot3.ebad3840.jpg","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.106Z","timestamp":1788571455106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.saiffx.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 13:55:59 GMT","end":"Tue, 17 Nov 2026 13:55:58 GMT"},"fingerprint":{"sha1":"2D:4B:44:9D:06:09:85:CA:36:37:34:82:84:A3:91:B3:9D:77:0B:56","sha256":"89:CD:45:6E:43:B8:B8:94:10:1D:A2:8F:37:6D:05:57:6A:1F:7F:D1:1B:A2:F8:87:9D:9B:68:C4:47:08:83:85"}}},"request":{"raw":"GET /assets/uploads/themes/hero_slot3.ebad3840.jpg HTTP/1.1\r\nHost: saiffx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saiffx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 01:24:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 24 Aug 2026 09:06:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 102051\r\ndate: Sat, 05 Sep 2026 01:24:15 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102051,"size_decoded":102364,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], progressive, precision 8, 1367x702, components 3","md5":"ebad3840cce48da600171f1e953f5cfd","sha1":"7000a92efff0762785387f430d8f569edebd508c","sha256":"625f18d7ef53d8eaa1eae12befb51988cb9d034ea7c584641249c9296d4a9f27","sha512":"b945184dacc3db514e5353196b8f549b3d814ccd48cc16a7dd82986267d7fc259f6512fcd90ba790a64e20a00606f043a7715724b8e39a898136506920bb9339","ssdeep":"3072:VjWHSanZYDjXLBExRyDt5eW+yQhJKfu04H:VyxZYDT9EjyDitx","tlshash":"61a312290edbcbbcfb60966019b17742fa0a1e344f6d3504e32e74ded8a485a7b750a1","first_seen":"2026-09-05T01:14:48.338383Z","last_seen":"2026-09-05T01:24:47.565019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"saiffx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.343Z","timestamp":1788571455343,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saiffx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 226368\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-05T04:00:51.833709Z","times_seen":277095,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saiffx.com/assets/uploads/themes/slot3.74c9dd7f.png","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.466Z","timestamp":1788571455466,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.saiffx.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 13:55:59 GMT","end":"Tue, 17 Nov 2026 13:55:58 GMT"},"fingerprint":{"sha1":"2D:4B:44:9D:06:09:85:CA:36:37:34:82:84:A3:91:B3:9D:77:0B:56","sha256":"89:CD:45:6E:43:B8:B8:94:10:1D:A2:8F:37:6D:05:57:6A:1F:7F:D1:1B:A2:F8:87:9D:9B:68:C4:47:08:83:85"}}},"request":{"raw":"GET /assets/uploads/themes/slot3.74c9dd7f.png HTTP/1.1\r\nHost: saiffx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saiffx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 01:24:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Aug 2026 13:58:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7967\r\ndate: Sat, 05 Sep 2026 01:24:15 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7967,"size_decoded":8277,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"74c9dd7f0c07cb5f02acaa904c154363","sha1":"1acc7a4a4dcf59540cb294b524e5d9600d49ee9e","sha256":"17a343ab5ee5946e40a9420f39e9a0ff7ba4b0a2c9f813f16c2d64524fbf2757","sha512":"5b81c969f1596df4ba47b940974ebb854a48d52c14f266d63615cd4d98a3807cf9641d29a69ba38a92a1de850e521201f38d25b4dd5079a82dd7384dc390e5f5","ssdeep":"192:pSrZdYDF7vPfKoGFxMN8ptZtJudtPSC0u+BgCgQo:Q1dqHfRGFWOLYj+B/g5","tlshash":"a2f1cf9b21e68d4c11175616d32df8f4bc3a8d9ca06979b7e0eee3c0a5100a03b484b9","first_seen":"2026-09-05T01:14:48.341163Z","last_seen":"2026-09-05T01:24:47.566135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"saiffx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saiffx.com/","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T01:24:14.517Z","timestamp":1788571454517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.saiffx.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 13:55:59 GMT","end":"Tue, 17 Nov 2026 13:55:58 GMT"},"fingerprint":{"sha1":"2D:4B:44:9D:06:09:85:CA:36:37:34:82:84:A3:91:B3:9D:77:0B:56","sha256":"89:CD:45:6E:43:B8:B8:94:10:1D:A2:8F:37:6D:05:57:6A:1F:7F:D1:1B:A2:F8:87:9D:9B:68:C4:47:08:83:85"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: saiffx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.1.34\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 05 Sep 2026 01:24:14 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87695,"size_decoded":18530,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (834)","md5":"39eec18ca3c1f14956c9218078b544dd","sha1":"20233c7f5d30e8895d128a639eb7dea81a2817cf","sha256":"570bb44094017d6de45b1a77f5189495313a3bb490bebd2ab6570dd9deccf8c1","sha512":"7e227154eff9a5ca74de45fc8d5990a3f9b4b73a5df82b90ca0ede4b194fa9ca5c3b5c48c4fc615f384c1f301e98d75c888a64b8580ad24d052f4b2bcd2edc1a","ssdeep":"768:GRvmNaTIVs31kMcqyW8oCpJblSPLwMgM9M/peljH1a1zhUoKzao92JZPVgh/oF:GRvkaTIyUqyW8oYbSPAcG1Vp4X6wQF","tlshash":"3a83b712a3fd183ea06340e2b695677a2b7ad143d64e0218b6bd03741f96ccbf93b55c","first_seen":"2026-09-05T01:14:48.346857Z","last_seen":"2026-09-05T01:24:47.567062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":11,"connect":20,"send":0,"wait":139,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"saiffx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saiffx.com/assets/uploads/themes/slot3.74c9dd7f.png","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.118Z","timestamp":1788571455118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.saiffx.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 13:55:59 GMT","end":"Tue, 17 Nov 2026 13:55:58 GMT"},"fingerprint":{"sha1":"2D:4B:44:9D:06:09:85:CA:36:37:34:82:84:A3:91:B3:9D:77:0B:56","sha256":"89:CD:45:6E:43:B8:B8:94:10:1D:A2:8F:37:6D:05:57:6A:1F:7F:D1:1B:A2:F8:87:9D:9B:68:C4:47:08:83:85"}}},"request":{"raw":"GET /assets/uploads/themes/slot3.74c9dd7f.png HTTP/1.1\r\nHost: saiffx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saiffx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 01:24:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Aug 2026 13:58:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7967\r\ndate: Sat, 05 Sep 2026 01:24:15 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7967,"size_decoded":8277,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"74c9dd7f0c07cb5f02acaa904c154363","sha1":"1acc7a4a4dcf59540cb294b524e5d9600d49ee9e","sha256":"17a343ab5ee5946e40a9420f39e9a0ff7ba4b0a2c9f813f16c2d64524fbf2757","sha512":"5b81c969f1596df4ba47b940974ebb854a48d52c14f266d63615cd4d98a3807cf9641d29a69ba38a92a1de850e521201f38d25b4dd5079a82dd7384dc390e5f5","ssdeep":"192:pSrZdYDF7vPfKoGFxMN8ptZtJudtPSC0u+BgCgQo:Q1dqHfRGFWOLYj+B/g5","tlshash":"a2f1cf9b21e68d4c11175616d32df8f4bc3a8d9ca06979b7e0eee3c0a5100a03b484b9","first_seen":"2026-09-05T01:14:48.341163Z","last_seen":"2026-09-05T01:24:47.566135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"saiffx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.341Z","timestamp":1788571455341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saiffx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 226368\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-05T04:00:51.833709Z","times_seen":277095,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/barlow/v13/7cHqv4kjgoGqM7E3_-gs51os.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.349Z","timestamp":1788571455349,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/barlow/v13/7cHqv4kjgoGqM7E3_-gs51os.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saiffx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22008\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 14:35:15 GMT\r\nexpires: Fri, 03 Sep 2027 14:35:15 GMT\r\ncache-control: public, max-age=31536000\r\nage: 125340\r\nlast-modified: Wed, 10 Sep 2025 16:22:45 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22008,"size_decoded":22821,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22008, version 1.0","md5":"8e986e86d57eb493631f911cb433dff4","sha1":"ad8e9490a983a615bfe43dcd4ad332e611178948","sha256":"cd759df8ef9efc98fee14307b4eb5ba27f08b1f8f2f3ad2872432e25c89907a8","sha512":"55a554f7435bccb7f6fb0b6f9dd76b2981ef737f3cfc50fa9ea494e9ae2f6029a0bc45cf8e9b0e18e2a4423226c8410557979957742417ecdebd241850e1dfa3","ssdeep":"384:HnbuSqWLlaBJfhZSLrvfIk+tB8PHGCGWVigZo7whJ8jyBzae6lRLbxwugfYaH0ph:7KWLlaTZS3b+tBCiWVrZiwhu4glRpVgc","tlshash":"6ba2e1c9c4f59d27f6ce1671ee042bd1600b21dd6b12c1879a1dc25bfd536ab2e8cd08","first_seen":"2025-09-11T19:45:57.911584Z","last_seen":"2026-09-05T03:27:01.120214Z","times_seen":6805,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Barlow:wght@500;600;700;800\u0026family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.100Z","timestamp":1788571455100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Barlow:wght@500;600;700;800\u0026family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saiffx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 05 Sep 2026 01:24:15 GMT\r\ndate: Sat, 05 Sep 2026 01:24:15 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12513,"size_decoded":1534,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"484ae75368e54220a05b36ca55c7dbc9","sha1":"46a6146d4836d7d36d5ef5a29911a5ee827ce890","sha256":"13a45188f415fcec0fed6291015bdf25da0ad4b9eadabf3ea9d9eb80093cc7cf","sha512":"44d604d8249fdcec3bfd18f4e7f41e7a76110bb87e1448835d8cd533d6f65cf3ea097b9e2177ce16738bf42a680d907c1bfb4ea8d7010541ce10c9aa918d084c","ssdeep":"192:cyVlL4Pslu4ID1to9ps4ovNNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:czmRO1XuM0pR","tlshash":"8642ed92006be500ab970dc233cf7e3aae8e61956485d1796ffd0cc99ceed26136871d","first_seen":"2026-06-18T08:50:29.425105Z","last_seen":"2026-09-05T01:24:47.568581Z","times_seen":32,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":36,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saiffx.com/assets/css/tokens.css?v=1787561687","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.101Z","timestamp":1788571455101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.saiffx.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 13:55:59 GMT","end":"Tue, 17 Nov 2026 13:55:58 GMT"},"fingerprint":{"sha1":"2D:4B:44:9D:06:09:85:CA:36:37:34:82:84:A3:91:B3:9D:77:0B:56","sha256":"89:CD:45:6E:43:B8:B8:94:10:1D:A2:8F:37:6D:05:57:6A:1F:7F:D1:1B:A2:F8:87:9D:9B:68:C4:47:08:83:85"}}},"request":{"raw":"GET /assets/css/tokens.css?v=1787561687 HTTP/1.1\r\nHost: saiffx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saiffx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 01:24:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 24 Aug 2026 08:54:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1428\r\ndate: Sat, 05 Sep 2026 01:24:15 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4088,"size_decoded":1960,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"542ae563292eb56d0d6c88a01b489211","sha1":"4321c1193cc19b2b3e3de37a620798f1397b038f","sha256":"6d18baf05acadda25fa4b9c1b89573f0dbacebed3cbc20e01bc0cf1d303e5b99","sha512":"3520846d5d5ba5e5670f0167cacf34531ecb234d961568aadcd144f6018f6f691c18c6c3b34ef996040f65fc5bd9728d6df063718fd8f423972216a263c39a0d","ssdeep":"","tlshash":"3c813d467da420273efec1bb75174da3c974231e6c40968d7cce94502f8d37560aeaa0","first_seen":"2026-08-24T03:14:25.030973Z","last_seen":"2026-09-05T01:24:47.569512Z","times_seen":5,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"saiffx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saiffx.com/assets/js/main.js?v=1787561691","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.112Z","timestamp":1788571455112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.saiffx.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 13:55:59 GMT","end":"Tue, 17 Nov 2026 13:55:58 GMT"},"fingerprint":{"sha1":"2D:4B:44:9D:06:09:85:CA:36:37:34:82:84:A3:91:B3:9D:77:0B:56","sha256":"89:CD:45:6E:43:B8:B8:94:10:1D:A2:8F:37:6D:05:57:6A:1F:7F:D1:1B:A2:F8:87:9D:9B:68:C4:47:08:83:85"}}},"request":{"raw":"GET /assets/js/main.js?v=1787561691 HTTP/1.1\r\nHost: saiffx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saiffx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 01:24:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Aug 2026 08:54:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1748\r\ndate: Sat, 05 Sep 2026 01:24:15 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5755,"size_decoded":2116,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e53108be1a76eb4a67de0eb4d593efbc","sha1":"206533f42c35eabe16bc2e6dadc91f8b0e2fa9e5","sha256":"ef3e65b22a2118760e1d806038b6dcc878aab9887dea18125fd095a4ad8238f0","sha512":"63d9be8f5950a41c166b08f996571dd9ee3f5da617d2b4cb6d0b40bf3760b470c1e3c5bad2b7eb89e8c39c554b416dcadaea453606c54d0f32085b16f8cf5406","ssdeep":"96:438faZSGEvw9RE5lKYXFMRDraTSAMROu33ceJ9xNYTypM/5Ao5akUw:P3LvwkPKYXFMR/aTSAMRDceJbS+qq0Uw","tlshash":"53c1402f7ce6307298bbe17a57df5788b43140071806c8163e5cdb821f91f29697ead8","first_seen":"2026-06-28T11:12:13.755654Z","last_seen":"2026-09-05T01:24:47.570237Z","times_seen":31,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"saiffx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saiffx.com/assets/uploads/themes/slot3.74c9dd7f.png","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.468Z","timestamp":1788571455468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.saiffx.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 13:55:59 GMT","end":"Tue, 17 Nov 2026 13:55:58 GMT"},"fingerprint":{"sha1":"2D:4B:44:9D:06:09:85:CA:36:37:34:82:84:A3:91:B3:9D:77:0B:56","sha256":"89:CD:45:6E:43:B8:B8:94:10:1D:A2:8F:37:6D:05:57:6A:1F:7F:D1:1B:A2:F8:87:9D:9B:68:C4:47:08:83:85"}}},"request":{"raw":"GET /assets/uploads/themes/slot3.74c9dd7f.png HTTP/1.1\r\nHost: saiffx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saiffx.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 01:24:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 20 Aug 2026 13:58:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7967\r\ndate: Sat, 05 Sep 2026 01:24:15 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7967,"size_decoded":8277,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"74c9dd7f0c07cb5f02acaa904c154363","sha1":"1acc7a4a4dcf59540cb294b524e5d9600d49ee9e","sha256":"17a343ab5ee5946e40a9420f39e9a0ff7ba4b0a2c9f813f16c2d64524fbf2757","sha512":"5b81c969f1596df4ba47b940974ebb854a48d52c14f266d63615cd4d98a3807cf9641d29a69ba38a92a1de850e521201f38d25b4dd5079a82dd7384dc390e5f5","ssdeep":"192:pSrZdYDF7vPfKoGFxMN8ptZtJudtPSC0u+BgCgQo:Q1dqHfRGFWOLYj+B/g5","tlshash":"a2f1cf9b21e68d4c11175616d32df8f4bc3a8d9ca06979b7e0eee3c0a5100a03b484b9","first_seen":"2026-09-05T01:14:48.341163Z","last_seen":"2026-09-05T01:24:47.566135Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"saiffx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saiffx.com/assets/css/styles.css?v=1787561686","fqdn":"saiffx.com","domain":"saiffx.com","tld":"com"},"ip":{"addr":"79.133.41.61","port":443,"asn":44066,"as":"firstcolo GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.103Z","timestamp":1788571455103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.saiffx.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Aug 2026 13:55:59 GMT","end":"Tue, 17 Nov 2026 13:55:58 GMT"},"fingerprint":{"sha1":"2D:4B:44:9D:06:09:85:CA:36:37:34:82:84:A3:91:B3:9D:77:0B:56","sha256":"89:CD:45:6E:43:B8:B8:94:10:1D:A2:8F:37:6D:05:57:6A:1F:7F:D1:1B:A2:F8:87:9D:9B:68:C4:47:08:83:85"}}},"request":{"raw":"GET /assets/css/styles.css?v=1787561686 HTTP/1.1\r\nHost: saiffx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saiffx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sat, 12 Sep 2026 01:24:15 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 24 Aug 2026 08:54:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13796\r\ndate: Sat, 05 Sep 2026 01:24:15 GMT\r\nserver: LiteSpeed\r\nstrict-transport-security: max-age=31536000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73804,"size_decoded":14151,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (367)","md5":"460b8be10c0a528388acc917c87b7f5f","sha1":"e7dba8feb3d5430ec4fd2c5ea395aa2c87af8bfa","sha256":"5e2179749d4c8639a4238c15479dd1a2826b9a836d0577ec498fba4c6e9b987e","sha512":"a02719140da56e95331c5911400838fb0c65e8363e5c14003b6ae072d9633a616b74054bd23dc6d070b9f2b32573282f4fe7873a6a5886e807cf04fc6b7ae91d","ssdeep":"1536:HcMeLNTP9JTWd7mS+0ztxSRvlc0yymAA+bjx1B1/z7fqXvBD02vb+L2QXGZctnjv:8MFibH","tlshash":"d0738501be7495b87d33f6a8278b9b5cf358a1018805debdbba910088fc93f9659f744","first_seen":"2026-08-24T03:14:25.031841Z","last_seen":"2026-09-05T01:24:47.571567Z","times_seen":5,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"saiffx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saiffx.com/","date":"2026-09-05T01:24:15.270Z","timestamp":1788571455270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saiffx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 226368\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-05T04:00:51.833709Z","times_seen":277095,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":25,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}