{"report_id":"d78edc27-f39f-47d6-bce3-a2501c608766","version":0,"status":"done","tags":[],"date":"2026-09-11T09:55:08Z","url":{"schema":"http","addr":"safepae.xyz/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"title":"CME Group: A decentralized trading platform with low fees and high liquidity","dom":{"size":28489,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9690)","md5":"19449f812b62228131e1e45c9ba13c9b","sha1":"a35f164addc921d95a91692b7b51eba65fb1fee0","sha256":"4e64ba119a4b4e29431f4ea0012b8c4b63c354527b5bbf7395ae2573137d2085","sha512":"2febc1d4319e20d451d6f24f8b51b7e2cedbd95a88839c3a949415692214f9e10c3bdaaad046c3ce11880e15b437c8c714ef88b850e17af6fc5c6cbaa35f2f47","ssdeep":"384:Ww6LIX62urNZCxP2V1YcJHpLVCEtYFAjHK98ErLvQGuC:DurNQxP2fYcJHpLVCEtcAjHK98qLvQGz","tlshash":"67d267225581402b52b7c4c0eab7bf0ca5a3e31fc90998807aed81ed4fd7eb1a46757d","dom_hash":"domhashdd748ddc7c103f9cef996d5b40c39f5c","first_seen":"2026-09-11T09:55:16.835386Z","last_seen":"2026-09-11T09:55:16.835386Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"safepae.xyz/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T09:55:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"safepae.xyz","ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-10","domain_rank":0,"first_seen":"2026-09-11T09:49:56.488243Z","last_seen":"2026-09-11T09:49:58.16853Z","alert_count":44,"request_count":45,"received_data":6814747,"sent_data":20770,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-03-27T06:51:42.839831Z","last_seen":"2026-09-07T19:11:08.191132Z","alert_count":0,"request_count":15,"received_data":815662,"sent_data":8610,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"99914ced1ac3c7f66ecb2789ed72ce2e","sha1":"cb16c6932a574774b6176c62d6779cafb839a8e6","sha256":"243a82637723559debd3403a06bc78972168b4c4b77ee2c34036102807b8ced2","sha512":"95d7719004e495cf3139c4056b807ef169228799069ec85a29c9b11b19b6dd3b7f5beed2920e64b65a55cb24711dce24dc89080c919a2e002bce98e008f21504","ssdeep":"","tlshash":"d4c08cc4a0d33d001a02645065af29f49028482a70481b129c94d8982e220b09233e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.389736Z","last_seen":"2026-09-11T09:55:41.579288Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d67dbca54364441d541ce6c0570aee99","sha1":"3ffb50acd72025b062febdee78273c778aa5dfda","sha256":"fc18ce1279a466cf095600c7a95639d57fd5fd498b727a62d2adbde66cf093f9","sha512":"2859f9e0e151426a61ff695ddf1efb34b0a6809036149457b74b5b6cf5f3675453776408e5ec0a035237dca19087307464987c3cd553e3200d2bd5bce7d9b18d","ssdeep":"","tlshash":"f8c022c8a0d63a000205580468ef28d494300416b14826268dd0e8882e230b0823bd98","size":169,"data":"","first_seen":"2025-09-10T08:17:47.396455Z","last_seen":"2026-09-11T09:55:41.595804Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"299816b3eb819c5cc0ccdeb20c9748eb","sha1":"ce9836b567b3974a76642c092ace2c7cd5bba830","sha256":"228385a8d32c5793d407aeca2e9f528e0f05dac7f3ad1a7329b51cd420353ed4","sha512":"6d8c5c18efc6da29dc29e932d0d946f514030b048e04349ac1ea407dd138783c4424138349fdc4433939cceded862dd71b1d5d3a4ed914e97f0f4f3a8802bcf9","ssdeep":"","tlshash":"6721efbdc50b61b21e5b2116cbdabc88f39710a9444af5517e9c81900bf497c07bbaee","size":1239,"data":"","first_seen":"2026-09-11T09:48:24.017745Z","last_seen":"2026-09-11T09:55:41.571577Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc3be43f70287b1d8e26bf7ae7c613a4","sha1":"45dc6c0bded0d63bf9404701eaab52e75fc187a2","sha256":"468e127017f3ddeed82014e48f85a9db0753e4256832fb8aef69cf37878dc7ff","sha512":"b2b3f62776f0966aa9121c585369c363d0b63e092ff6b0dbe84a1cd9a91a3d485dda86409c157dd6553937b2021733b47d58a2d555eadc6263d90ce8fa14a287","ssdeep":"","tlshash":"3511abfe191ab0296303804e976b7801642250b9000a184173ccab9dbb9ab6de0cfb8d","size":1034,"data":"","first_seen":"2026-09-11T09:48:24.019335Z","last_seen":"2026-09-11T09:55:41.572911Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-09-11T14:02:56.126766Z","times_seen":42554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-09-11T13:07:26.559169Z","times_seen":43910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f2d1ff31fd40359cdcd82389f1eca94c","sha1":"1759a2cf03866883962b4ca68d96d31e40360eca","sha256":"26a765a0037404e5b2dda3294755a4e204cfc262d25ccd1774fee3465d2402b7","sha512":"27dedd721313792721f299d58e60080e1daa8f4b544e15a9fe8d685a2ae5deb78b8777d6a14ef2c34693c069368d14736511251bc5739cfd8990c32cd3c29823","ssdeep":"","tlshash":"90c08cc6a0e23d101602651025af34e49024802770486b23cd98e8482e230b09233ed8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.374532Z","last_seen":"2026-09-11T09:55:41.603157Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e3f70b3a5c03a5638a90c0ea213eb9e3","sha1":"1ea453799d850e2f239ca0e74dffa849c133ca42","sha256":"e9653d5a4b545e32d7c189be8946108e7434c6c366d711066e2b2673c07c4e88","sha512":"a780c503c707632df3fd72c2c57096fe2156f4a2aa63ae780f7b89ee08c0ab1b4edf30d0e20d4025db0dc7106f3b0de0a391d955c7c3d0a1e7446f12bc606658","ssdeep":"","tlshash":"e3c08cc4a0c27e002603651060af34e4a028802ab0485b42ada4de492e220b08233ed8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.349507Z","last_seen":"2026-09-11T09:55:41.603709Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ed178a1c6a5362dc25ffbc3d45931da6","sha1":"b562c589b10e6842ff6d966fa4c8dbc097743059","sha256":"a3ce8bd3c7517c646d80b8256a1e49274b3938004ea7b7908e202a9525d7ca32","sha512":"1386fc6a9fc025970af8c9a3f1bbc814c4414d0cf0b2a1a82f4d347b7cbc636e90e2d259a3e29bcb30fa9d8ef7d1affc0b7b47bbcf0e0449e6e03c5c64a806f3","ssdeep":"","tlshash":"36c08cc4a0d32e005602691020af25e890244026704c9b02cc94d8592e220b08233f98","size":139,"data":"","first_seen":"2025-02-10T17:00:01.441195Z","last_seen":"2026-09-11T09:55:41.569986Z","times_seen":6088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-web3-be73c185.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a595bcc015bc8dbcc388332b1f836a","sha1":"969f8f6e7b7fb0d926b2f69e3a4d9b40d31dc9f0","sha256":"3400a7db1b1f812e1b1c9de83085b3af33212044d5f8a234ce036ad96195a3d8","sha512":"17e9d51a359ba4e5a7a159755922479f5ae697424bba64a12f3d494830b70731f48432d13ae97fcf10b2bfb55897e66f5bc5a95a93d33f203bf2d3beb2c6e70d","ssdeep":"3072:ydkJu93WuKIfml5iKmAFh+MuFvmMpatfCs:yKJuWuTAXHuFuMpah","tlshash":"bc54f985b592f1600a8a50e0d4f71203f338bd59705bc0a4f6b998eb79bde89d177b38","size":286879,"data":"","first_seen":"2026-09-11T09:48:23.964018Z","last_seen":"2026-09-11T09:55:41.553061Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/views-9ebe03f4.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d34481cd41bc0f6546fd7c9a309d21a","sha1":"2502ac888f029cc01707a04b0618bc069bb0b04f","sha256":"2a5b3cd7de6c311eb63956f51a3c655b2a07432f2b0680ed1d9f21a363fb67a8","sha512":"efbba1a7ba90c2c61cfd05201308a2edf89191a16fdd0ea3dc001125fef8ffd92c8e57d3e13bc96f9974687a6e33415ba1ee7dfea27a998dfc6b6065e4604fb8","ssdeep":"12288:AA2vu/UO3j3XBdtLdzk23NMMCx0M8VXlPjDycrM:Jx/Ui3XntLdz93NMMg/8tYcrM","tlshash":"72e40884f94478b6eab794d0954912c032486fcfd00988a0b5fd5d6a2fffcb5736ab24","size":698368,"data":"","first_seen":"2026-09-11T09:48:23.978167Z","last_seen":"2026-09-11T09:55:41.547987Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9b7ed545c19e9370f1e69c09941133d6","sha1":"a693618104635f9520131c2f67f566d1ebccd00f","sha256":"1cc70f6eaaed8f473436124f9a7aaacb0205b0307fedfdaa0e76de645ad5fb28","sha512":"d773b328fb356a21ac8235ee87bc8ef6a42bf5dd7ef898bd16d76fcefca2cabe26e6000afb6265dcc1a9d20777428d7b0debfdd4ee8f946d45638f210ed317c9","ssdeep":"","tlshash":"19c080c9f0d62d3057025565547f24e8d0264477744c6b53ccd4dc862d520b44233d9c","size":165,"data":"","first_seen":"2025-09-10T08:17:47.355661Z","last_seen":"2026-09-11T09:55:41.587836Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"54e1f523628ec53aa6c9da2e21fe589a","sha1":"319e573f5e9d1cc8004cf42c57492b69b5ebb5f1","sha256":"8ced5be06de5a60d12eccac3b91edcf119a4a8efc0d271f23f6f47a850cb35cc","sha512":"9cc183665bbd9f3471d103faf58c9b637745715bafcb35c6f3f2a7032c277c27a8426682daf7a8afa23942ca6d1f3951a654115b6a2a0e63e4789d6f42d1a5fb","ssdeep":"","tlshash":"cdc08cc8b0c32d102602a81015af24e89038542a704c6b029c94d8582e220b0c333ed8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.331589Z","last_seen":"2026-09-11T09:55:41.580478Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-vant-3e081598.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"774e6400289e3742a2c92b8724a6adcb","sha1":"3fe8d0fce34c7be04022a500ad279ab6dcfcda12","sha256":"4c229efb866afd0869a54bcd6b76f69411fb18922100efe6969a05bf8380a2dd","sha512":"0ab52fab5ef8f13b792d659b43ceedf53ab65716f2880ad8457e96f290cfc27087198aca0bd153c30bfc32eeb44d5cece592c802ec875a087230542347e19560","ssdeep":"3072:V3MW8Js2EAhRfDtZngW6OzJJT4wWhEf2JPsLZJLz6bm7QqVwUyE6BWqZoVYhN:V34EAhRfbzT4wWiDV7VwUkZo+T","tlshash":"76c32ad1b8c6f538977b94e5406b0510b6391b48b009c5e0f07ead8a2f69dd4b2bbf2d","size":124175,"data":"","first_seen":"2026-09-11T09:48:23.958638Z","last_seen":"2026-09-11T09:55:41.50904Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5ddcf000fe640727c37a007add885f01","sha1":"c03cacf1f7fa18c439f4df83c545efdc7947979a","sha256":"1002ce8702b1ab8819bbaaa1107fcac63cc383b1ac134849914669ea3a821780","sha512":"16d0825adacbef5b34caf9e925d789b63afba408f7b8f9cf8ea2cd4de1bf92c21d1edb4a5f233fb755c7a9df1d0bdd22a86bfaac106e69457cd2832ace015a7d","ssdeep":"","tlshash":"bcc08cc8a1c26d001a06641010bf28e49034802674481b029d94d8482e320b08233ea8","size":139,"data":"","first_seen":"2024-11-12T13:07:34.2755Z","last_seen":"2026-09-11T09:55:41.578602Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"69c836debf18a3634df8f278c49d9aea","sha1":"086e288ae65a6ec183004e2fbe63bcbab7ed98f8","sha256":"863f785e9fb53701eb71ffc548cf8362a7f2bcd3d230a4af447d416a225a7ab1","sha512":"038e1620af40474e0b5755b4794e46069174a6d595eda5ee4671578baee3681dd89a1514a97cc56292c2bb7ae527eea8177d05d9926d367d4116da215334b238","ssdeep":"","tlshash":"9cc08cc4a0c32d001602641010bf28e4a0244026b04c2b028c94ec783e220f08233e98","size":139,"data":"","first_seen":"2025-09-10T08:17:47.381426Z","last_seen":"2026-09-11T09:55:41.575352Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3f7e637b7082a00b8216289bc627d697","sha1":"f9f5a52d26fc2e046b3b93ed879e390d293b8315","sha256":"f7630250b912686d0497527de278a399c3fdd6335e8651150aede32379eab0bf","sha512":"3e23680f4170283774a57857fdbce5e4bd0f568f68c346a613e864df88bf088afc98ac8c39fd1154b9a2364abd79b5e9a434111e2d0da0b2d053134bd541aef6","ssdeep":"","tlshash":"efc08cc4a0c23e001a02681524af28e490244027708c1b1a9d94e8482f220b08237e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.333207Z","last_seen":"2026-09-11T09:55:41.613778Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7ba0c33ab9924b69e90373dddaacc5d8","sha1":"82db78c3a3cbfd25cd3bd1fc3b52bdc0f2dddf0f","sha256":"bbec2ef96cdbd9d3a7aa5437e4bcfc268d904a3f23ff830d6b3f1d0fbeced55c","sha512":"34b012ab6d7fe19edd936b8a2f398a305ee628d8e38b0977a3d9c4e9b319aa1f66dff44a5a6c3ea4ab7455a1a05b131f3da4ec95b649b5e8bcfcbb2c2d70deef","ssdeep":"","tlshash":"8ac08cc4a0c62e042602661114af24e49024402670482b228c94e8482e660f08277e98","size":139,"data":"","first_seen":"2025-09-10T08:17:47.403752Z","last_seen":"2026-09-11T09:55:41.607949Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"70cd611e4f9dcf3eb412e803168e805c","sha1":"a4a6e5bb9c5725cf453971a2b0b34d47c5c67417","sha256":"3739e77f9fd2485887db918f74fc0139962f6b2606a595ab0474d57f296d70bd","sha512":"d6297390397556a7a26955051a61d5891de3c273d47a3138e1c9196e422d16a85ab711610b447b904fd4b53ca8af54d584529e5e9fc7d2f0c27337fc8b15daab","ssdeep":"","tlshash":"56c012c9b0c22d10160a641459af38e49024502a74885b668d98d8883f220b0c22bee8","size":161,"data":"","first_seen":"2025-09-10T08:17:47.358343Z","last_seen":"2026-09-11T09:55:41.589709Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"62082b8f6348c541efb31432fc0245cd","sha1":"68a9d03fad2eb32cb093da78d6ecb8a62bc79bca","sha256":"91af6b2f67b7f04bccd8e5cbc4450b4fb3bb1ebc7e77f60da85a03426beaef5b","sha512":"eee66ce2a155f67ab969d402ff5bb8e2004f4c8b02b89d6fb8a9ca95f3697d2fec7decbea3bdabb63195125f872c0922c1dbf1bc8e2b3ee32cc853aea66ecc79","ssdeep":"","tlshash":"5ec08cc8a0d22d101602651020af24e89034442670481b429da4d8482e230b08233f98","size":139,"data":"","first_seen":"2023-05-23T14:47:18Z","last_seen":"2026-09-11T09:55:41.582776Z","times_seen":5319,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fbdc4f602b1d8f5a0c5b4017bd03554f","sha1":"7db7e6ff4e4f7783d47018e96a641a3b38180070","sha256":"4c0c5663ac52fc214041ca71fcc319c12cfbd22b56266bec08bfacd2d7b4d6da","sha512":"b3920adadd26fd351018d3ca507bae361591632d8919e1075c481a001a6d0d766dc9fd338c110bc7d7bf3538ec70527436ee803553a8fedfaaab340b13dcb095","ssdeep":"","tlshash":"79c08cc4a0c23d102a02651160ef28e49025406a70886b028d94d8482e220b48233e98","size":139,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-09-11T09:55:41.598062Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"873ce4e211a88d98497b688349e36d46","sha1":"2c78861041bdcdb602a757959318113f28796c89","sha256":"058a2163683a368fbb309ca0f53de27a5eb9069cf497a45b1f5c6aa212c6dbd0","sha512":"eb0b25bf8fd0b2ddaa5587d5c351c57acdaa483f20706846d32172544c0e1c21cd657c5dceb0df398d36108c98d09ddf5234133cb0a73203cbbdf2ec80f1751d","ssdeep":"","tlshash":"8cc08cc5a0c22d105a02651021af24e49034402670482b129cd4e8482f270f0c237e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.415922Z","last_seen":"2026-09-11T09:55:41.591776Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"309287485a31847b5bfdb4bb870c8242","sha1":"c37ea45c969898fafd41685a4b9a58fe3c18ad01","sha256":"2f8b71a2f87e0438ad72b295d0fa79521ec527d52a3163ec22632c11b4f01d7e","sha512":"b076ebb10ac1acee6a1850a57a7ad65b54886d8826d51e537706e7b9ad7b2f2ad2722675f45e3cbc047f2d5ece5e80fb3c80bc0e98f8e66a6172952a34069091","ssdeep":"","tlshash":"54c08cc9a0c23e005612692154bf29ec9028402a70881b42cca4dc492e320b48233ed8","size":151,"data":"","first_seen":"2025-09-10T08:17:47.408886Z","last_seen":"2026-09-11T09:55:41.615371Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/index-862a306c.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2ff67743d550067413bc3b7cf4c2074","sha1":"495611432092d3f83dc1360d0e8a28e21080b3b9","sha256":"2de24957065516cf761b6086c92500a1ded2636a4ad9f6d790a9ca0012f26184","sha512":"3d94883837fe04eb8c58f70fb2a2b223fe4458c509661938f962bfb74125baf8b8a8af1db49bd8526c89f1f93dff8a71c9430eae3d7650653a9dd63a285e1d74","ssdeep":"384:IwEpqX65Q+r+54KENftdTWeubJMF1/Pnri1C/hhvLW2KI5zBcx+AWDR+jl1phfw2:98qX65+jgTWeubJO1/ji1s5NBcbWDR+/","tlshash":"27920a15b40a9934e2f39595642e0640f1182fdee05394b37afcaf1227e8ca5a35a73e","size":19624,"data":"","first_seen":"2026-09-11T09:48:23.947455Z","last_seen":"2026-09-11T09:55:41.54598Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"62b4203ff4654a9b6b9e21e901bd3c68","sha1":"701428d124fcbc1cd8064d9489dfd5116b6e140f","sha256":"3a5c02e31c99935e438fc014043a7c12369b6d010e9301ca0c683be998050789","sha512":"0b384d2cb09ecc2fbab6b21b6a31eee3e3fe94983a88e12d2d0320b0886e9f1b35be632b5c07f0e8e174fb5322cf71600c607804c1d7881fc3542dc8f1a49439","ssdeep":"","tlshash":"c9c08cc4a1c22d005602681060af25e4a0254427704c5b028ca4e8482e220f08233f98","size":139,"data":"","first_seen":"2025-09-10T08:17:47.394976Z","last_seen":"2026-09-11T09:55:41.576174Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f64d92e54aca57ded23ef9ff8e8372bd","sha1":"1b6cd4aec9ee45ebe0f9a7957817e939cdfcd516","sha256":"e699a73471d8b1e609e682dffe8115f74c9d3b239c7277f2d0b4a9ff412cfdcd","sha512":"12803177be75d90347d75a799671815a890967deed2676bae0ffd2cdbe8e19fd594628a54d3f3fe96aa3a5b8bb22573492d93ad4555b1374ebae1bd1f0d6fc58","ssdeep":"","tlshash":"30c08cc4a0c26d201a02682060bf39e490388027704c1b228c98d8692f220b08237ea8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.348063Z","last_seen":"2026-09-11T09:55:41.610699Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bb48891ae79c177efd20f4673ad5daaf","sha1":"7d9142d8205e7c22d8e02799d24fc0cf6a94163d","sha256":"5bb18e51e1d7966d45a233478b73034ad2177d75fd2ebc56149f029995a73a60","sha512":"63bbfd25218bc56c2986cb67d09e2f96a0fdc0b01722fb4591e186258074a565cb0ed9e25e6b3f4e9f70afb675c322c1b677a42f797d94dfd1658a2ffe04d174","ssdeep":"","tlshash":"6bc08cc8a0c23e005612641110af28e89024442a70881b12dc94d8482f220b08237ed8","size":139,"data":"","first_seen":"2025-03-06T21:41:52.87466Z","last_seen":"2026-09-11T09:55:41.576988Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9b0b0948a68ede956d4f76d6d274d38c","sha1":"d4aa9568d29a33280812b2ca2d7a1dd10b3ed62c","sha256":"7c16dff39f8a6c6dc76ad206f32576e4e4711deb9a6e0ad0e3234972a4d85159","sha512":"76cee0ba5ddb468f379eba2dce3e9a426587207e86a52c5a072acd7892c61871b24a007cab438b304505724e5ce1a98243e6de6702ab75ff903b476aa1bea892","ssdeep":"","tlshash":"a2c08cc8a0d23d102606781010af24e4a024502670485b529c94d8682e261b48333e9c","size":145,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-09-11T09:55:41.600535Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"806d250a08b73bd9858f19cfe1f983b2","sha1":"2ed650f52d0de0de36b360e20742d09db9d5c4c0","sha256":"ad0cc4bbc7e9bf449e781a6c13a53643ff5d64012e227913c47eba697c3b41a8","sha512":"faa069eb12d14006ff1633ac2bb7bf6c20103f9948786dbef073395f93440be62fbb529b7254e8d5650992f2be643721a6d08e9564a1b96aacea89b873a96107","ssdeep":"","tlshash":"c0c08cc4a0d72d102603641410af24e8a0244026b0482b038c94dc682e220b08233ea8","size":142,"data":"","first_seen":"2025-09-10T08:17:47.334802Z","last_seen":"2026-09-11T09:55:41.569115Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"72e9542910f68aa195de90f6364ed2d1","sha1":"4ad02c93ce344c2094c6153ad9958ba3e1c5ec19","sha256":"80621ce50d6feaafc1e4854bee624133e8677a4f21db32249a26c4d0cfc332e2","sha512":"c54ddc6fcd7c337ceed96b05a159af2147f2b5291ef341e39c4f8a8ecc3db591f76c20592cb339beeb6eaf1e2b639c71babe2d64020b9ab98810aef8b96cb8ae","ssdeep":"","tlshash":"a1c08cc4a0c62d001602642050af24e490288026b0481b028c94d8592e230b08237e98","size":139,"data":"","first_seen":"2025-09-10T08:17:47.3911Z","last_seen":"2026-09-11T09:55:41.570788Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"23492bb3f3e87d81d74d83e57c7d4519","sha1":"6e4b41aa90374d5008e9114d63bdea75ca4db552","sha256":"6ffd89c45a0b690780f11a43391e1c7525b680f49355a2799c6b6a9377f3ba36","sha512":"41b5145b76b57773444743892b7bb3d0cbc1aea7bc8c50ccdf3c548b018f28f209b76ff2cf6d9a81a3f1e06c89afa865d46625bb9fdeb1e14c8f0307884f633d","ssdeep":"","tlshash":"f5d02bc5b0d63d6812031a9d181b75d49010807aa8a90b11d860cc643f256f05327d98","size":253,"data":"","first_seen":"2026-01-12T06:59:54.870499Z","last_seen":"2026-09-11T09:55:41.613094Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-lodash-28d24e41.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"775961b61fe54f3cd7cb34ace73df330","sha1":"374b22f53109e697104f8d19dbdd15ecd5c860fe","sha256":"2143787f24eca88a15ec431ae6aebf29ec70a5c95eac5b4523bdfb5ade10bd3e","sha512":"438129baa041f8d12d425e71d83027a487f22e7e24ca3b3468205d01f1ceefb1ebf98a3c336c47189958b6dfbedf3e76f689f796a68ed51ab8ffdbd183aca233","ssdeep":"1536:H8LyadU0JIMfObIq5oe7HQ8K3sUt3W1DCpxVpJycTqDZbQFFKouA2BX:oauy2e7ItGD8xQ8+BX","tlshash":"92935fc83ad2f05a87a370b5007f088bf13e6ea4a89ca504d1a1f4ed7db954ed537e19","size":97263,"data":"","first_seen":"2026-09-11T09:48:23.935659Z","last_seen":"2026-09-11T09:55:41.567393Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-html2canvas-48421fba.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a2f11dc19d860c02c69687b77c757b5","sha1":"23ef12c74f30f83e59916a8ccd2be8ea4a5e3da5","sha256":"bea97db64c99b63623128ceadbe7bf7c0419b3a82b6807c7aa5499f43df6d178","sha512":"2d880e04595d2f0ecbb9a5edd548462535069cfc65082732ca0b676c16b9974c33c6f9fdcd46f66f5573eae13942de127cb52e8a0cf1d91084009ac3c8e33aaf","ssdeep":"1536:3weKEs0+RipH52fREkQk3NS5pU9VjKgFA0oS9BlV7Rf+jJFpwwHiKGFdv+:3xtn+Ri65xr9pn7Rf2CtFE","tlshash":"091446b46ba72cde0b7eb49b001b3d438d981b67117fd1a8f24a6da22d70706ceb1574","size":198453,"data":"","first_seen":"2026-09-11T09:48:23.948628Z","last_seen":"2026-09-11T09:55:41.553746Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"93e3c5b527337811bf62a0aea30b8f99","sha1":"a00de82fb5c057bb4ba20585addacca24653ce65","sha256":"90a15406690dab9a6720e588ac625a89b080a077283f39ceee08d411abf8d3c2","sha512":"9ed4eb02b64d514f8eb280a09947c1075b40dce5a467332b5099518a13234fc95de9c72509032570b44caf4ee3a5b694508ac64a852e6a46c0f099d9b20941e1","ssdeep":"","tlshash":"3fe0abf9a9e650e61e918aaa2eed196590150b73881c3c2d2c457112bedf8243234e20","size":416,"data":"","first_seen":"2026-01-12T06:59:54.859678Z","last_seen":"2026-09-11T09:55:41.601943Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/tw-d57cb3d2.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"590d162bceb17266fd18901dc70dfec9","sha1":"266f8ad69b5b70ca63e0175cbfd9e917053896bb","sha256":"eaa6e97312f99706ceaab43748e80c130d09c0ed084fffc77b1c2469ce9d6512","sha512":"b9bf65aea6d6afed7db03c9c18c3122f7a7d2f47ee27d50452eaf352b2982500359587defb61aab3f9ed306c0b6036b3343087cd11dcc108c2449d497d66fde3","ssdeep":"768:8bgu4TgSnNvog65OyTFwjaPfvn+2vaFRt5eQ4Xt0U2CwMkP0WCX9VP773:XUS9HaOBja3lXtR2TpCX9VPX3","tlshash":"87534bd55cfe9ead44e3962b704f5803a0e78ac9c271c9655fec69f92288b43c393621","size":64230,"data":"","first_seen":"2026-09-11T09:48:23.950744Z","last_seen":"2026-09-11T09:55:41.544641Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b1e6506abda1ffa5b9ab2721a0fee13f","sha1":"cc64d89d747a4c6f5293b262055d3cb8e175b738","sha256":"848a05dd565ed4ad22c665530b61473e4437ca86f8bd027a8c952177f73b5269","sha512":"ac564a39d053f7c5f6e636296207458bae1d069f50356ee85ac23a8045617ebbe8cb5f26870d5a19f2d3cf834bc578918ad2b9f46bb68e3d0961c68841bb6e17","ssdeep":"","tlshash":"ecc08cc4a0c32d001643641050af34e490348026b0481b428c94d8492e230b08233e98","size":139,"data":"","first_seen":"2023-06-07T05:45:46Z","last_seen":"2026-09-11T09:55:41.568255Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"33c61675d0ff5fde66e94e64ce012595","sha1":"4a083e0cf13432af831fbd7b1f4cf8819963dd71","sha256":"62fbf84f9caaf03a2032f215fcd18b7dc3bd8b8960379428c79c92057e5cc226","sha512":"93ae56cd8ff761b3d2415edd4846e58fb85e2c5004f5db1ef70491a97c320b5e366ceea17036fe6ac28b089322ffee8c05eac17ad0acd9a6a633e7cff0835c96","ssdeep":"","tlshash":"88c08cc4a0c6be001a02a92114ff28e89024402bb1481b438c94d8883e230f08237e9c","size":145,"data":"","first_seen":"2025-09-10T08:17:47.383303Z","last_seen":"2026-09-11T09:55:41.586735Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"12efadf3f9248bab80364405fc6ae50d","sha1":"95ac4f0ef1e6bf697c9e6dfc689de967c060b138","sha256":"586f247f55a59cb0eec7862f7a32c5c3d41b4ea73e3f6a87b1b7af6d71be8336","sha512":"f89afec5e1dbcdb369f715e801688fd4a45a7a9df9a27513179aeabee8fead806f727089d15a2079fe72e40ce9ac5165dce2564cb8fa91766e6b6622ad5db429","ssdeep":"","tlshash":"95c08cc5a0c32d411612641120af25e89028442670881b028c98d8492e220b08233e98","size":139,"data":"","first_seen":"2023-08-02T21:25:39Z","last_seen":"2026-09-11T09:55:41.592537Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/imtoken-early-detect.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb1d9bd2e56f1eec2c68da7e0e3aa5cc","sha1":"e9002788eab7183ff408bd7ed2658f0a5a022538","sha256":"ad86db347b0a576fde6078c4645935933dd45bc82ef7da793711936e502baf1f","sha512":"deb9bcfad93f3e71ee25376b5c87fd3775b45419eb45b4a2a8c841c9d63296081f69f5a8f09deb701c9618c1fdcd42774b1495f10422d3a0048a7f1d5667f803","ssdeep":"","tlshash":"6d31cc5c6db781918713a37d83ab5a00b527902b5c0dce40b4ec49f45fb076b5727eac","size":1729,"data":"","first_seen":"2026-09-11T09:48:23.975407Z","last_seen":"2026-09-11T09:55:41.507666Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-8b17b1ad.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a90c3bb9218fa39c61e0ac6d0fa26dee","sha1":"bbada750b5f4d3fea6b015274492bda260294df7","sha256":"dd6762d8953c0c42df2aace97e2a2fba74350c5153e0dcc229f4c311b8254722","sha512":"abe59a77e5c87529133b8c33e2af0db6784b8c0b6cddc77f4d4b434d59f52e791fb4a87baacce2f1ad03b516a3ed82fb09b03f47b8c21b6cfa757cf70c56f620","ssdeep":"6144:mfdoSQtdewgc8ABGGe13cujrWDwzWSF7wVJu6o/ZaAFDBl7TA/V4MrCtHZgw0edl:mKKwf8GZ8zW/Vsztl7U94MrCkw0eDn","tlshash":"ed843ac93291b06543ab15f2007b0007f37aad69744d8464f2add8eb7db998a9277f3c","size":378960,"data":"","first_seen":"2026-09-11T09:48:23.976509Z","last_seen":"2026-09-11T09:55:41.558427Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cf91b633dd7aa3a910f7203ae8fe6e17","sha1":"45d58e726a623b9e8f470e616bb21e0d79b921b9","sha256":"aa19bcc17f77cb209b91962de32d71b2d5dcb71dd7c34ce623ea6bed117e3eb1","sha512":"0fee27821ca07b1d1334a207806b1d1b49a8fdd98737f499c880ca9e835ceb36c18607e7072ee36e642bfefd2ba7186545b7fc04d2f07c9fb17dde2c806355ab","ssdeep":"","tlshash":"41c080c470e27d44165565b5207f74d45034441ff459db52dcd4ec593d225b4d337db8","size":172,"data":"","first_seen":"2024-12-08T15:39:09.836814Z","last_seen":"2026-09-11T09:55:41.577806Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0c989ec0e3aa71422941125d41590718","sha1":"68c300d731c44d97ba00e4f957fce7d1fb2ebc12","sha256":"2bdfc0bda288d1bfe35558845be3a512d17e611978c4820ae97e98989689c8b6","sha512":"54337ec3c3811ecde687d1313ecd69ce85c5e3e712a4f4b46d4a5df9a26bea9e908263222988014dca0381bd1173e7b37ebf4a3c906c93ce98d8f66112827e95","ssdeep":"","tlshash":"37c012caa4d72d0019156525586f25e85024541660486662dd98d89d3e530f0d633dd8","size":175,"data":"","first_seen":"2025-09-10T08:17:47.384722Z","last_seen":"2026-09-11T09:55:41.590888Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/charting_library/charting_library.min.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-11T10:05:44.627817Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f02ffcfbde7b0afe29639198c8137cac","sha1":"9daf59294380c8be478844674d1b14b2ab42c5fb","sha256":"24ce4bd7ea58074683fccedf514c4762d6158f8f5d771b13c28be886db279435","sha512":"a124ddc942e46c2aecfd7afe8749354031f513c621d746cd422197f4244a4cb12a0faca8d587600c27412f1b0affe8658fdd3d7eb8ebf642be682174919f69e9","ssdeep":"","tlshash":"aec08cc4a0c22d101a02a41410af24e49028802674482b438c98e8a82e220b08233e98","size":139,"data":"","first_seen":"2024-12-08T15:39:09.853482Z","last_seen":"2026-09-11T09:55:41.605443Z","times_seen":156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7342d694359f6501f1a37ab724ae4026","sha1":"626f4d5031895f2a3fcf2a567c1594d15aa92ea1","sha256":"7b7d3ea99fe9d0e649809d2e75383e09456d68384c5eebbfb88635556b3333d0","sha512":"78405995edae3d53f49d3d33fc4290464b1cafefec05c56d3ba376cb60f93499674bbc61e28ea159e24c7264674407a09212f869f54c8cabb3d1ea2faa98cd0d","ssdeep":"","tlshash":"6bc08cd4a0c32e205602645490bf29e89028402674489b228ca4dc883e220f0933bed8","size":145,"data":"","first_seen":"2026-01-12T06:59:54.831599Z","last_seen":"2026-09-11T09:55:41.594554Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"65cc32c48c6ca2b8b2fd44c1670ae667","sha1":"f2a116897b02c9bf0bb31247024703d913d0cd13","sha256":"83e989e9718ddc6751b336792e962c10faa616a9f3feaffc90f9c430e4c6d221","sha512":"bd8ce0e0a56f50ef5d499026d682702cf4fc60698a0152097cad28c8b889fcd4bdad15f87af7f14437f9cba7bac5e26d80af6bbc49249f7efbdc468ef39be9f4","ssdeep":"","tlshash":"11c08cc4a0c22d001602681110bf24e890244427704c5b028c98dc583e220b49237ed8","size":139,"data":"","first_seen":"2024-12-08T15:39:09.862859Z","last_seen":"2026-09-11T09:55:41.60485Z","times_seen":194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"da8870e8f91c100d1289b5d674d79719","sha1":"bab07e63954180edc7b17bb56f2388e0909adf50","sha256":"dcc9b3c574a45f128bdb702399164352e0ae6395538f842b5db4d7392f8435a5","sha512":"c61471f7631b78733e7558c48063a9970bd9322da50a5cfdf03c348dd35835943b3daf4bf9e8719b4538a7b478e209ac117ded132df3267d59ccb8324ba7b957","ssdeep":"","tlshash":"cac08cc8a0d22d101a16651010bf24e890244027708c2b128d95d8582e220b09233e98","size":139,"data":"","first_seen":"2024-09-19T22:02:28.524757Z","last_seen":"2026-09-11T09:55:41.59941Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b2b3ea37e2b36bf6f6262c1d4ff4c280","sha1":"fb13f38483f3bae7d9939b0f40dc51727e70d179","sha256":"566b00f7251a423fca57149536787725157e6a2328900bf3281a3c47b9fe346d","sha512":"ff736e35d86ab390958ddfef64b8fc4aecdce87b4546a67f44bfb8ba3f0945736fa417ef987b37451d4ceb7de84fb6cd2f933deeb2a6f33e2b773c958d440b2a","ssdeep":"","tlshash":"48c08cc4a0e37e001602a46050bf29e494248027b0481b12cca4e8493e220b48233e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.387248Z","last_seen":"2026-09-11T09:55:41.612337Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"129463649cfe1e6da2601ba0b4fb5c02","sha1":"57c96d43497844b234a8dec63b89ab010f172282","sha256":"172b8c198bb5f9a5bc608b93009af24d284b14b79d4431d66b742528c1a56ca5","sha512":"d1c7d8e20c2119b51600d20d1fd269605a61f71aa86ab069d9363ec2f47bb2d694746c833a8612e60c1c3d4011b6bf43c73c0067330e1b051b413bec0765dcf4","ssdeep":"","tlshash":"c9c080c870d63e1055137621587f7dd45025845770cc2b13add5e9963d130f05237de8","size":166,"data":"","first_seen":"2025-09-10T08:17:47.397918Z","last_seen":"2026-09-11T09:55:41.604276Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/imtoken-optimize.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b12816fb8813cda7044dbc67cd195a45","sha1":"da52d3feaede4c9f4093573a98ff75beb3cecb9b","sha256":"6c67c9545e8b426384447e8208e2e0c6926c31ffa82f00e8eb893119a0b3b6f9","sha512":"f6d9d3e9616362ae5bef3af6649def266960cdb79914653a2319c19005ed997ef769796a35d5291c4cd23aad67e7ff67d02366b97666ddc2ade6e7b90cfd48f9","ssdeep":"192:XCnGdutiZsHmibiZGHmS8YFyBB+2DWquC5:9uUyh2MiluG","tlshash":"70e1206f15f20130077320bd0bdb6645f523e25b6a1dee29b69c43981fe0a1756d32ee","size":7365,"data":"","first_seen":"2026-09-11T09:48:23.919886Z","last_seen":"2026-09-11T09:55:41.531924Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0b48a69b3dbf0bf2046c242d50bcb8f5","sha1":"cfa9102a0876374a86ef020802b6a1be7dfc7e33","sha256":"c80e33c1ae32a391fd9eb854137e1e59ac6fed826ac111e8552baf841781cd5d","sha512":"d72ef1401baf59e17fed232b7d8088bc76bcf0fa6605f38ec5520dc1bb04fb97b4f9485916cd7350350b9b88a045a4a56f26003b8900f8a0df2de9011c909ca5","ssdeep":"","tlshash":"5fc08cc8b0c73d001602651051af24e4a025802b70485f829c94dc582e6a0b88237ed8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.339938Z","last_seen":"2026-09-11T09:55:41.585812Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9de360927f595df662fc2e5d01541cc8","sha1":"f70c054c038de4221d28367f5f859323d910c0c9","sha256":"ff03315a46977ac5b3a2c46ff43c957cd8079ac1b309ea959ae833f897456124","sha512":"2d1e1f311c664eec828d73e51508c28ca0399c89811f89808b8fdcb6294753853734362e6712388da4c081224df6e6770c3e1c84a3f6c8fee7741c057fcbb723","ssdeep":"","tlshash":"f2c08cc4a0e27d111a12665010af28e4a0284426704c1b028c94dc483e220b48233ed8","size":145,"data":"","first_seen":"2025-09-10T08:17:47.367854Z","last_seen":"2026-09-11T09:55:41.601248Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5a741ae792e6cf3866098824f6425908","sha1":"03325689d6904c2310c938c2baeadb8f83577843","sha256":"728d9906e1733c43a3fd936d49ea82a3d58157dabdfec06666ac6d562b768f40","sha512":"f8a1c341da352f259ffe15464d069f264214769a077c2939845aa04dcee844323c63efebd6663aacc7f22f2744e6ff143e75bc8ddaf09096c2cfea6025258c08","ssdeep":"","tlshash":"5bc08cc4b0d62d002602652010af24e4a026842ab0482b129cd4d8482e630f08237e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.419365Z","last_seen":"2026-09-11T09:55:41.584886Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5febe8d2633d5282468730c324915ac4","sha1":"5f67c959b7f66605a59b93afffa9d6df117b3dda","sha256":"97e463b3f8268760c7e9c35c2bc2e5f69558ae3d46603330211266ab98f8647f","sha512":"b2b7d8dab316539c57168c78e1ca61f96c135df0f43a578ad8eba36f8d2001721d983c309d6fa9100bb49ebe34d304f06655a29ad3c927c7bc095be982d753cc","ssdeep":"","tlshash":"15c08cc4b0e73e602a46641618af34e4903a4427b48c2b03ace8dc583f2a4b48233eac","size":160,"data":"","first_seen":"2025-09-10T08:17:47.36588Z","last_seen":"2026-09-11T09:55:41.597073Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-vue-652c4c09.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ec2d556e8326b430340d0d1674f40ae","sha1":"38a294e16182004597d59758c07919b02e661c9e","sha256":"67d3f9714818fdc4aa4e6258a360092c1fd3601f293c11ac34cea45e0cdfb7b1","sha512":"fb15acd744251e42a88583c5b1405dd7ed81966a16c70b2e544bee16e46153b5025949d14d72266dcec7c51a9dc60d7998a2d90242ada69e542a7e65f350cb51","ssdeep":"1536:XbjlFKTYsg6AkAK88LLgEOXSBKLc6HptntXAZE8ldPJJA7WaTC9/E:rMg6AkAK8AgEFBKPHptpAZL5A7WEC1E","tlshash":"24c308e93282b46163fa19e600770111f3392959380ed4d4f16daddb3d3789a91fbe2d","size":128940,"data":"","first_seen":"2026-09-11T09:48:23.905268Z","last_seen":"2026-09-11T09:55:41.539256Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3e305c76f1af41368fd6bac1d3232bf3","sha1":"cd489168607fa0abcc5a4dbfc874fece85a4ec57","sha256":"487f403c5d61bfb6900aeeaf2635e0b1b1e79b7972cc0c3fbd6d33f6540867f9","sha512":"7d2e0f811670556b702ba1a4d121e840af1dad9c37b529ecd8c35b6695a8a4cdad9764090657891b098aadaad10fee0494c9c1cf28350da07a70b9158ede5000","ssdeep":"","tlshash":"c3c08cc9a0c22e002606681011af24e49028402a74481b42cde8d8982e220f49233ea8","size":145,"data":"","first_seen":"2024-11-01T12:54:56.038953Z","last_seen":"2026-09-11T09:55:41.583903Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f92cd56df0fe3c30a562a8b6003eecd0","sha1":"e4e20f513728065c7ea5f81ddbbce97ddd61e815","sha256":"8acd75e1589a65a8035809036a7a673ba9fec685f18fdc7ff6c1c831f8cd51ac","sha512":"899305f7a9ba086a29565d8afe55506525ea0f986fa0dc52b4a30fc56cb9fd72e3d1a30f7265a3cc444b597f9d0235f695ad4802524b2d959b91ce3ba29e3c7e","ssdeep":"","tlshash":"2bc08cc4a0e32e101602681020af2ae4a024806a70485b129c94d8482e220b09237e98","size":139,"data":"","first_seen":"2025-09-10T08:17:47.346619Z","last_seen":"2026-09-11T09:55:41.614508Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ba5d595ef4b52558187a9bbbb2beafb4","sha1":"d3e3c6014f6d6ce793cadf2ec046944a95df534f","sha256":"0f88c4ff7b0d233b0baa04ebb62a01833800d8573a0dbd1aa31bc36b9686c280","sha512":"f8e7dc85c79d137045c1a7f4f61da98885b443de9b1f6606c9a038ce1ef1f17a776534705132acaab8b9df0434f3431bd270dad5cc5d77db032eb021aec473ed","ssdeep":"","tlshash":"90c08cc4b0d72d102a02645010af24e490248026b1485b62cd94e8482e620b0823be98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.364339Z","last_seen":"2026-09-11T09:55:41.593328Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-i18n-86676d52.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbbf3355be1aee426259cbdfc05615a2","sha1":"1450c3c015a99313abded6937d964975c52a264e","sha256":"34c11e6ded74b53477fad0899ef7d91132c3ca3bf3c097e8924b1a7b77e8748a","sha512":"1f4f9784c83ac3e27d8b0a5180619da44f47eda4459abda693ab3104dbf2fac808d12893e17391a18e4d82f48ba8debda6e841f52e377e5f210f094981047df2","ssdeep":"768:xMPpyGrecKPUVO8pYJtRmUqdIVojB0TZXM/oM5lqz4WUpjc6gWoamZw9SV1FqEhU:jsCVw0TZXBwl5FG6gWf4xSzdgo","tlshash":"a043e7d635d7b016977a56e620b31101ab3e1b59380e9884f1bdda873e33c5a83b7f18","size":60532,"data":"","first_seen":"2026-09-11T09:48:23.91623Z","last_seen":"2026-09-11T09:55:41.539883Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-element-634158bf.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"212f26699824fbeacf6d480320066d2a","sha1":"0ff1b83b9666d520f197501e2669b879a51327c8","sha256":"01037f79cccd6be630d2ed9bb10ccd0fc02d2363a8193262b0f91201b6f7bbbc","sha512":"c7480c42a9cf44f1393ffffdbdfb7cfec65adcb41dbdee68068c0a252d6314d4666c7047f4f75a20c78c55410b30f12fe3ff805b7f4aa51733c0889ff9b6898f","ssdeep":"12288:wglOOmshG4unXAZFM1LRbTvbFZE4s1fqEmM4a6:wglOOvhG4uXAZmhR/bFZE4sVqEmq6","tlshash":"baf44b95b855f436dbfa94c980990500b72d174db028c8f1f5bf8d2a229fd50b2afb39","size":794706,"data":"","first_seen":"2026-09-11T09:48:23.926287Z","last_seen":"2026-09-11T09:55:41.548726Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8cbcbedac33f0cafecbe67b053728199","sha1":"64c49c9b7075be6804dfb62b6787eca117efc172","sha256":"8d4839f2f6359f36b660cca9fc64ed9328af59af8f527f249103ebf97cf8539b","sha512":"aeff1d1f0290a7cbce15c5d49f2c8784f9b057a2c1315954e6fa667cfde7a392e72ffbe39f6ff93eec2e08028ce497856d503d39b0e37383226c5c3033196107","ssdeep":"","tlshash":"b2c08ccaa0c27d011602691154af28e89024402770485b429cd4ec482e720b48233e98","size":145,"data":"","first_seen":"2025-09-10T08:17:47.36284Z","last_seen":"2026-09-11T09:55:41.60253Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3dc9372c0a86b3e08715295e8a171a9c","sha1":"db1de60b6110300390d5971bb281bec79431d903","sha256":"c4ab2a9236985d34344ae0e03cb2a48741e5ea7e65085c3d574b9fa8bd8c2c1c","sha512":"64c769bfd47a7ba93611c012a6e69cce2a783b77617c5a1cb77d058f66da3aaa45eae386997391ea5bbba4ca02f2bf6abf5469e1c7baf679fdd2e7db422992bf","ssdeep":"","tlshash":"33c08cc4a0c22d405602642410af28e49026402678482b028c94d8883e220b48233e98","size":139,"data":"","first_seen":"2024-08-19T22:08:48.259555Z","last_seen":"2026-09-11T09:55:41.611616Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"bb8b1b57541c4ee360af205c72b6ef15","sha1":"a7990a3bbb8f1e2e24cef649613ad7cd910209fd","sha256":"2abe382b98ff32a5b6361bb13f82618ddae27a6a3154fbf9aa648ce99b33bc38","sha512":"e8d1c94b953cf21eebcfa2f7896637a2b7edd504864c21b4b3510c6b850175b8f0c649b37026404f38858c67a2e8a71dc3877fcd34a9f27b8b9bafce4fea8cc0","ssdeep":"","tlshash":"35c08cc4a0c32d001a02651010bf64e890284026b0482b02cc94d8483e220b08233e98","size":139,"data":"","first_seen":"2023-08-02T21:25:38Z","last_seen":"2026-09-11T09:55:41.588815Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-echarts-ac6706e5.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0f68316ae5d0bb7ce326fc86f3322ab","sha1":"a8f671dc104753a02466b8101b29bc0d825b1471","sha256":"47f7e12f4386fb530d2d22d8b8f45c9be73c593130c359cd62c067f8e2d15ea7","sha512":"aa7f12a99dad5208015a905190545d7abcfd2128e0c8200e558ce280cb7ab6bc9139e84288925829402dfd73e4298c4ce519f97281c7b3ad4c579ace3ce07b8f","ssdeep":"12288:kFHycAbfS+3O4urBgaBjgLDfhQWBIqr3s96v16xLxsWw8ilNH9G2uIgd8Q:iWf8BcDf1BFr3sLbsL8ilNH02uIgdX","tlshash":"1025099cb654743543a73174066f050f933a680db50b86a8fb69e4ea6cbd44f223bf78","size":1023313,"data":"","first_seen":"2026-09-11T09:48:23.917363Z","last_seen":"2026-09-11T09:55:41.510064Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9faf97934e43fad21bbff41ac16c29da","sha1":"59c8dc1d4e1fa181a49d2ef547edfaa6d2da939c","sha256":"20a386b35237dc6c32b4b306ae6f476d8b0043253f0607a1a30c0a4f878d37f9","sha512":"6247a1e05a4141821528f2784eede90d71432449dee39c1e66a021dddad6fcf147dfb515dd3add4916029e03810e453c5b80f54bd2f70966b3addc4756c34708","ssdeep":"","tlshash":"8ec08cc4a0d36e045a02a42161bf29e4a0244426b04c3b128cd4ec683e230f08233e98","size":151,"data":"","first_seen":"2025-09-10T08:17:47.343238Z","last_seen":"2026-09-11T09:55:41.606233Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/#/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6f6515cf6ae8b8b6e7ff8f1d62280c4e","sha1":"a789878b8073d795d74c0be9bd92c2bbf5f4c6b1","sha256":"228b90c73f608a1a43ad053c62df1a8e512db8cd6aefaad49e3f2e1a602c7398","sha512":"104baf40ad35784adafb3476cee6e5dae7ae02db4312259801916224654dce31ef9788862200bb4e06790b42021f8d087f04aa548232a3eb201b54aeb7fecd70","ssdeep":"","tlshash":"bdc08cc8a0c22d101a06691020af24e4a0258027b0586b828c98d8582e620f0823bea8","size":145,"data":"","first_seen":"2024-12-08T15:39:09.845355Z","last_seen":"2026-09-11T09:55:41.581596Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"safepae.xyz/assets/tw-d57cb3d2.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.777Z","timestamp":1789120474777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/tw-d57cb3d2.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YuFyZCqPabNCXjLA9GBppC0SUYqTLmsNh64nPVAfwLHdVw6EnJqWiGQBpjDj7GoN2XrwGEE3UotHVcOFIeNjm3hcdce9FZ0GoqwImVRKjI3XE1Hmy6UxFMuBxA%2FkhA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-fd40\"\r\nexpires: Fri, 11 Sep 2026 18:53:33 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 10860\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab7597e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64832,"size_decoded":26011,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (43652), with no line terminators","md5":"590d162bceb17266fd18901dc70dfec9","sha1":"266f8ad69b5b70ca63e0175cbfd9e917053896bb","sha256":"eaa6e97312f99706ceaab43748e80c130d09c0ed084fffc77b1c2469ce9d6512","sha512":"b9bf65aea6d6afed7db03c9c18c3122f7a7d2f47ee27d50452eaf352b2982500359587defb61aab3f9ed306c0b6036b3343087cd11dcc108c2449d497d66fde3","ssdeep":"768:8bgu4TgSnNvog65OyTFwjaPfvn+2vaFRt5eQ4Xt0U2CwMkP0WCX9VP773:XUS9HaOBja3lXtR2TpCX9VPX3","tlshash":"87534bd55cfe9ead44e3962b704f5803a0e78ac9c271c9655fec69f92288b43c393621","first_seen":"2026-09-11T09:48:23.950744Z","last_seen":"2026-09-11T09:55:41.544641Z","times_seen":7,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0ff2d36a99b4b4d3b9e58dbdaf37ab1df.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.166Z","timestamp":1789120475166,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ff2d36a99b4b4d3b9e58dbdaf37ab1df.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 23782\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDCD14BBC3631687A27\r\nAccept-Ranges: bytes\r\nETag: \"516157290B6FB65A740976C10A954D2E\"\r\nLast-Modified: Tue, 10 Dec 2024 07:43:34 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6027171461498336641\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=ff2d36a99b4b4d3b9e58dbdaf37ab1df.png\r\nCache-Control: no-cache\r\nContent-MD5: UWFXKQtvtlp0CXbBCpVNLg==\r\nx-oss-server-time: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":23782,"size_decoded":24347,"mime_type":"image/png","magic":"PNG image data, 308 x 310, 8-bit/color RGBA, non-interlaced","md5":"516157290b6fb65a740976c10a954d2e","sha1":"f5056edc9311873421bef51695fac0a325eb7f5c","sha256":"a9f270f9f8b6f1b50009b88cefc094faa4b0af40f11e4e657a4aff3d760dae35","sha512":"8484d66910669f23ac5a26b8b5add429396fe40fd7c3feacdc9b8071e34043e798074d23b757e39dcf36c69a166536742c5727893df96860435944fc4eb0819b","ssdeep":"384:CHJWfy29WDrfssB+lU2z8GSDVJfVL59eIFnSdQmN7ZE7UiRsZRAJRR+hXKoveQFi:MJWa29YIjllfKZN9ebdQmRSlsXApQ8","tlshash":"f1b2e1bbacdda0b0fc688c2614ec944d69d34e5c837c9a4a11ffc74e382c594d1ba995","first_seen":"2025-03-27T06:51:59.159771Z","last_seen":"2026-09-11T09:55:41.564831Z","times_seen":98,"resource_available":false,"data":null}},"time_used":1384,"timings":{"blocked":-1,"dns":27,"connect":266,"send":0,"wait":283,"receive":7,"ssl":801},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0a1ec85f52f324ca98f7e9af631aadc43.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.181Z","timestamp":1789120475181,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0a1ec85f52f324ca98f7e9af631aadc43.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 177710\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC23C0543539513BAD\r\nAccept-Ranges: bytes\r\nETag: \"6C74B01A03506E414F4F7BCF092133F5\"\r\nLast-Modified: Mon, 17 Mar 2025 12:54:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17403262481213564219\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=a1ec85f52f324ca98f7e9af631aadc43.png\r\nCache-Control: no-cache\r\nContent-MD5: bHSwGgNQbkFPT3vPCSEz9Q==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":177710,"size_decoded":178276,"mime_type":"image/png","magic":"PNG image data, 615 x 615, 8-bit/color RGBA, non-interlaced","md5":"6c74b01a03506e414f4f7bcf092133f5","sha1":"b34d08131374e90fba43714f92b9d9316cc573e0","sha256":"eb2a5d7804d1557bb66d678faeab6eb957b1f21d914d21b48a8e1f63693847f5","sha512":"72db7cde8f27114df83063abc212eb05518c7a2fa7f8f49a445ff6c49d428481fc90e4fb50e2c50f687dbfcb1b780cab19aa9158e9ac417b965c40600b58a976","ssdeep":"3072:1Ip0S96ICr8xnSKLTURLe11B0FTIphvtdeckaD6BQzG3QAb/CJfPQ5Z4A0TI/6u9:1x7r8oKLBcTIphb57z4qRGZ4pHAg2","tlshash":"0d041252d5a64bfde11a38066fce14198d6fb070c203eeae41fa69ee1356cc8c8752dd","first_seen":"2025-09-13T09:49:49.948418Z","last_seen":"2026-09-11T09:55:41.520521Z","times_seen":17,"resource_available":false,"data":null}},"time_used":2201,"timings":{"blocked":1364,"dns":0,"connect":0,"send":0,"wait":275,"receive":562,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/helpcenter/list","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.816Z","timestamp":1789120475816,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/helpcenter/list HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:36 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2FP8i6bzVJdkMJWUHg28SzS1r5C4Tb%2F%2BsQ6VWwxy%2FWUKgKKlIEV6CVtMj4S9UE61fin%2FbSEIBzBiPF4VVpnemB7dmX%2FXAA%2B2VowV7XfzZ73UW0HvjTNsoV24njTBRA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cabdda8f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2457,"size_decoded":1467,"mime_type":"application/json","magic":"JSON text data","md5":"c3c62cce9f445b2c7215b991de4bf2a8","sha1":"a85940e448b49bbd53c1b2ccaf319e3f01c192b9","sha256":"829f61175ba77b27f94a1985c5241f51a7f633c17cfa17e13d006ada11090413","sha512":"cd55df004245fdf56f572333984bb93fcef10886e5faa63f4fa08a63ae4b32aba1b1f952a014a796873831e2963900d5acf78a3c1401bc70017665d67b391313","ssdeep":"","tlshash":"af517c266775fdbdd63e84e300aeb548d18f162759e09d2cbccbcf0c86e1539091b296","first_seen":"2026-01-12T06:59:54.801343Z","last_seen":"2026-09-11T09:55:41.566562Z","times_seen":12,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-html2canvas-48421fba.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.690Z","timestamp":1789120472690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-html2canvas-48421fba.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEa2NIbsIXIXZ3EmtbmnyIO%2F368cvEOZKGcb1uFmUEubC8gpshhAsCVTmXJbBYMc35w%2FHjzhFcC2i5nzjALND6FS75GD5D3uvHztJiwdcs104VTZq4EwA6l%2F9GJu5Q%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-30735\"\r\nexpires: Fri, 11 Sep 2026 14:08:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa4c790daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198453,"size_decoded":47042,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"3a2f11dc19d860c02c69687b77c757b5","sha1":"23ef12c74f30f83e59916a8ccd2be8ea4a5e3da5","sha256":"bea97db64c99b63623128ceadbe7bf7c0419b3a82b6807c7aa5499f43df6d178","sha512":"2d880e04595d2f0ecbb9a5edd548462535069cfc65082732ca0b676c16b9974c33c6f9fdcd46f66f5573eae13942de127cb52e8a0cf1d91084009ac3c8e33aaf","ssdeep":"1536:3weKEs0+RipH52fREkQk3NS5pU9VjKgFA0oS9BlV7Rf+jJFpwwHiKGFdv+:3xtn+Ri65xr9pn7Rf2CtFE","tlshash":"091446b46ba72cde0b7eb49b001b3d438d981b67117fd1a8f24a6da22d70706ceb1574","first_seen":"2026-09-11T09:48:23.948628Z","last_seen":"2026-09-11T09:55:41.553746Z","times_seen":7,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-element-9776febe.css","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.698Z","timestamp":1789120472698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-element-9776febe.css HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GQhGOG3fm%2FXgsWzqaYwEGTqDQPVyPpPRg2uID2Jc7uukhMOs6nwAQOaSWyFPxVcN8CGAliFDAQUYKRTo5UySIeC1D%2FTm2JXUoEVMFwayGbKJiVAnFiOn2yVJOrxlXw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-57671\"\r\nexpires: Fri, 11 Sep 2026 10:33:41 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40851\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa5c830daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358001,"size_decoded":50012,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"61e374f1a46e8345a72644dade9a3858","sha1":"2d31c46099c6692bdb9489201600c0e3261cf645","sha256":"db823ac06120c2ab19c5d7200f4310b840ebc2839c644497f4bf34babe77572f","sha512":"16ddc9620d3c11aba8f3867e18711b0f426547a9df3375839ae4ee1b832f53728540dc63ef107b06d556c248c6ee04f3d236a5cf9519a911e1d712dfcfecf99e","ssdeep":"6144:N6xbnFSaBMa8R8S9kXQW3KjhfsDpNTTA2lwIuLi+54DcIxW/z7g3WagMXZyfTfuD:rhKXyl3oVd","tlshash":"9074d654fb23653b2817ea7c6ac0ea995f14cf91c92257b6fb40a00895c7de112e3d3e","first_seen":"2026-09-11T09:48:23.923138Z","last_seen":"2026-09-11T09:55:41.550194Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-8b17b1ad.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.680Z","timestamp":1789120472680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-8b17b1ad.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHCLhGZxUFEyHUqn298e0obw9YV2o3dACXHSKO9q5vh1Wd2C7Cn6eGkfVRmu%2FyEJUSZRMwxQKs90AOCzTSjptIjHvvXsLWa%2F6I8c1gODpsiKAH5v87zrz6fzLv1kwg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-5c850\"\r\nexpires: Fri, 11 Sep 2026 14:08:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa3c710daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":378960,"size_decoded":142039,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a90c3bb9218fa39c61e0ac6d0fa26dee","sha1":"bbada750b5f4d3fea6b015274492bda260294df7","sha256":"dd6762d8953c0c42df2aace97e2a2fba74350c5153e0dcc229f4c311b8254722","sha512":"abe59a77e5c87529133b8c33e2af0db6784b8c0b6cddc77f4d4b434d59f52e791fb4a87baacce2f1ad03b516a3ed82fb09b03f47b8c21b6cfa757cf70c56f620","ssdeep":"6144:mfdoSQtdewgc8ABGGe13cujrWDwzWSF7wVJu6o/ZaAFDBl7TA/V4MrCtHZgw0edl:mKKwf8GZ8zW/Vsztl7U94MrCkw0eDn","tlshash":"ed843ac93291b06543ab15f2007b0007f37aad69744d8464f2add8eb7db998a9277f3c","first_seen":"2026-09-11T09:48:23.976509Z","last_seen":"2026-09-11T09:55:41.558427Z","times_seen":7,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://safepae.xyz/ws/c7c53847-6884-4281-8083-12fe6041d045","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.997Z","timestamp":1789120472997,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /ws/c7c53847-6884-4281-8083-12fe6041d045 HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://safepae.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: kIb+M0cZkgQlJYxj1RQuog==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 11 Sep 2026 09:54:33 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://safepae.xyz\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: pH+TJ15XSF/2Yg6BI8VkbL09AC4=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxZl4ca8566GQJxKC1sEO02v1EDfAAq1Pe8J4YX9BAtFvUb%2BtbrZ%2FODuxPdAORmWqaMwHWRwAC2yD9Q0r6QdRX%2FzknnQiNBZ%2FVnarPnFhIgEwbIfF0lFw8EQkpAIDA%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a395caac7b237130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":876,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T14:24:35.064475Z","times_seen":18404274,"resource_available":true,"data":null}},"time_used":542,"timings":{"blocked":0,"dns":18,"connect":21,"send":0,"wait":491,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T09:54:32.031Z","timestamp":1789120472031,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oba0ENTjokgI6m2VIzZpumnUg%2F%2BfL4bHTB%2BwOxgqa7xifZVAVgJY4K%2BDpYGe%2FXy7UJi43d0vTs0xue6F4IyppYtuQbUAZdb8%2FLCNM6yakevusYlrUWIYEnPJG9MtBQ%3D%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a395caa66bf20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11268,"size_decoded":3849,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2209)","md5":"c12da69ceea46e3bcc6455b250e2114b","sha1":"ade2ba0cc30710dca8bdc136cfcb35e753c99a47","sha256":"8190960a9585dd098a80ec59ae7869433f054b53e9f9055b863fb258164520bd","sha512":"3af34a2834c4038944593e60abe6920bd552ad818da74de30769dab883dd304a9a9ae9fb8dc0ccc4d6fb0b902a6b3217a300f38d6877a0b3952f5e9290809c2c","ssdeep":"192:nPy6CQ4BdcxwX52C4JVFuwy9XwZCxfc2nfD3bTuB1ni7iJfw:nPgd9X52urCZCx02ci2Jo","tlshash":"8d3265636aa0c856137681159adbf008de13918bce299c54f1dd00ed5fd5fe08ae37be","first_seen":"2026-09-11T09:48:23.9741Z","last_seen":"2026-09-11T09:55:41.513014Z","times_seen":7,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":11,"connect":16,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/imtoken-early-detect.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.674Z","timestamp":1789120472674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /imtoken-early-detect.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=liJXXVZVNeD5WsdZdvDQrD0BZhfkkJGGl80LyWXQGAYKrQf1HA%2F%2BUpyiKye12bDIZu4%2FDvF1GDfFrRBuAg%2Bc1xPrjwz8OUAKjss%2FSU0jZ6bflwxUmDZa0%2FETUsx1Fw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b16-6c1\"\r\nexpires: Fri, 11 Sep 2026 10:33:41 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40851\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa3c6a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1729,"size_decoded":1530,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"bb1d9bd2e56f1eec2c68da7e0e3aa5cc","sha1":"e9002788eab7183ff408bd7ed2658f0a5a022538","sha256":"ad86db347b0a576fde6078c4645935933dd45bc82ef7da793711936e502baf1f","sha512":"deb9bcfad93f3e71ee25376b5c87fd3775b45419eb45b4a2a8c841c9d63296081f69f5a8f09deb701c9618c1fdcd42774b1495f10422d3a0048a7f1d5667f803","ssdeep":"","tlshash":"6d31cc5c6db781918713a37d83ab5a00b527902b5c0dce40b4ec49f45fb076b5727eac","first_seen":"2026-09-11T09:48:23.975407Z","last_seen":"2026-09-11T09:55:41.507666Z","times_seen":7,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/imtoken-optimize.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.675Z","timestamp":1789120472675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /imtoken-optimize.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVq4iIc3qBz0vn6lSb9S6Cf7pdeVVqCUSJO6buPPSiZaAOKd%2BPG5PNxK78zKo3rr7FQHr7Rsd8B7W6uUjolF7DYaO9o3YJYou7U3HufflenP1RsU%2F8m%2Fi%2Fsab%2BhSCQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b16-1cc5\"\r\nexpires: Fri, 11 Sep 2026 10:33:41 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40851\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa3c6b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7365,"size_decoded":2784,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b12816fb8813cda7044dbc67cd195a45","sha1":"da52d3feaede4c9f4093573a98ff75beb3cecb9b","sha256":"6c67c9545e8b426384447e8208e2e0c6926c31ffa82f00e8eb893119a0b3b6f9","sha512":"f6d9d3e9616362ae5bef3af6649def266960cdb79914653a2319c19005ed997ef769796a35d5291c4cd23aad67e7ff67d02366b97666ddc2ade6e7b90cfd48f9","ssdeep":"192:XCnGdutiZsHmibiZGHmS8YFyBB+2DWquC5:9uUyh2MiluG","tlshash":"70e1206f15f20130077320bd0bdb6645f523e25b6a1dee29b69c43981fe0a1756d32ee","first_seen":"2026-09-11T09:48:23.919886Z","last_seen":"2026-09-11T09:55:41.531924Z","times_seen":7,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0b08dbb888c1b42e5a859b6010539087d.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.173Z","timestamp":1789120475173,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b08dbb888c1b42e5a859b6010539087d.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 65000\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC7AB1893336F964FB\r\nAccept-Ranges: bytes\r\nETag: \"1FDB2BE7D275D08F83B3AC6BC65B916E\"\r\nLast-Modified: Mon, 17 Mar 2025 16:33:08 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5334343635132864268\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=b08dbb888c1b42e5a859b6010539087d.png\r\nCache-Control: no-cache\r\nContent-MD5: H9sr59J10I+Ds6xrxluRbg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":65000,"size_decoded":65564,"mime_type":"image/png","magic":"PNG image data, 618 x 615, 8-bit/color RGBA, non-interlaced","md5":"1fdb2be7d275d08f83b3ac6bc65b916e","sha1":"abe293534a51525a4ee55c38804652a4864d2bfb","sha256":"672534ad183f8a670f6ea316c1c2860d5bd796337172489870d07a03eb9d5fc5","sha512":"7ef85915f3209b5f087f354f3c633b313d88f9aec6ae12a47f45b0f872ff921e375f9bf8965acc30ae050849557d856d26a31557241e4a43ae3e66c63ba5641a","ssdeep":"1536:HA/qKDvL1sHT2HATx/rkWuTkhrAIcf7b/g0bOhmSbE0mnKXq:kVTOz2HAXSTbYlhm/gXq","tlshash":"2653025d38aeb676c541bf381be90c88e422867164d8716f64c17e4cab3f471ef2a90d","first_seen":"2025-09-13T09:49:49.925307Z","last_seen":"2026-09-11T09:55:41.511006Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1365,"timings":{"blocked":-1,"dns":20,"connect":268,"send":0,"wait":275,"receive":263,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.09646585f0aea4bf4bb3dcf376cc954b6.jpg?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.177Z","timestamp":1789120475177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.09646585f0aea4bf4bb3dcf376cc954b6.jpg?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 10965\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC829A1836373AE94D\r\nAccept-Ranges: bytes\r\nETag: \"327647608D0424763F3893F6AD655EB3\"\r\nLast-Modified: Fri, 09 Aug 2024 12:59:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10790596113790497685\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=9646585f0aea4bf4bb3dcf376cc954b6.jpg\r\nCache-Control: no-cache\r\nContent-MD5: MnZHYI0EJHY/OJP2rWVesw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":10965,"size_decoded":11530,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 526x310, components 3","md5":"327647608d0424763f3893f6ad655eb3","sha1":"8316a606efedb29bf60e70cf1167c2ec730df6d2","sha256":"53501f8bd3de06a3fb840b97946c08d0cdde89bdac92ee33a28e158b2277951f","sha512":"34cd2625b7ad284975ed4ae6cb3df8f173a525dd4eda65436607111feb5d2eb4397e7bff749a2dfe200d5c83c548e62eff366ba6168ef1902364cd25e339f43b","ssdeep":"192:RsvynUKUv/UCMrYNMtKwQvtM/jWpeivuTR00bxdxreFSlI:R6npvsCMrYNg7qtPgLeFuI","tlshash":"6b3270278b59ef43f525d3f4bf031ea9935ba714a5623aeb42201edb2f104019cca75e","first_seen":"2025-03-27T06:51:59.245266Z","last_seen":"2026-09-11T09:55:41.546653Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1625,"timings":{"blocked":1342,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getCoinList","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.995Z","timestamp":1789120472995,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=002cIK4oSFzbZq2NC2VKeI5iDwUdW9ph%2BNnQR3wqeiAjCjPjaqnSQhjsuFCtQbjz6CF98z3prg5McuhBG1NpUhQN02IO2FBzhPy2p1Ub7Qng9%2FKc%2FU7OkW7BBi6hTw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caac3d680daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63299,"size_decoded":6787,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (63283), with no line terminators","md5":"e78d19d9e724468979596ffedaa8b192","sha1":"9d614eae8aa8ba7f07f2ea599a23d20fed3e38dc","sha256":"8e18a6c8a99c0681a73063569b78c35164370fe634e70f66b77a151729ff761a","sha512":"325a78655d8033275ab8919a711b56f7b5c194e794011b59fcbfe98471b7c1e073c41d42f3e69dfcd9da17462176669d0f7e3472d96f5e4dd837ff51c964e18a","ssdeep":"192:VXf1Xi0fXW3XnKWXfDXkLSXXv0XKJEXXfgjCQLp8EqwcoMfogaIAtgWnWdNAidSS:MjHzQdi50sgyk49T9VRNw","tlshash":"2e53cd2aa294807dc16a84d20c6f7d23e1cd393ffdc94a1ad6da4995c8ede72510bf07","first_seen":"2026-09-11T09:55:16.850127Z","last_seen":"2026-09-11T09:55:16.850127Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1496,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1495,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/favicon-v2.ico","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:33.298Z","timestamp":1789120473298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /favicon-v2.ico HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:33 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xxKSuwxgbCq5z%2BATSyXgyqJspcuY0dna08wdp7iG9GO0uDFzSs1fLO%2BVludOa3Oo2HEjdSlNnkQhKiMZ3CIyWHC3VeQr%2Fm9ubN%2BKQCmu6oQI1AMtX%2BzZmoJo8u6JwQ%3D%3D\"}]}\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a881b16-175a5\"\r\nage: 5106\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a395caae1e5a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95653,"size_decoded":91411,"mime_type":"image/x-icon","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 384x384, components 3","md5":"1889637e405cc1b4c0e908fd94a8b049","sha1":"1a2629f01f18fc8a4d27526accae0448ebd3f78d","sha256":"5c4fb1b4c01a3c3ff81ce19fad97004f134997c8ecb2886f2588d18985ba19fd","sha512":"07dd7f0cdc8e3e49588eb2b0f66cfa5eb579cdb015ddd0efda2f3f617f2195e93ff23a56bc87de21485d848b2a6dd18be5ffe36434f3d3c989c78b0f3e2bad80","ssdeep":"1536:hkHRse9SMKc1seIjdhXE2ev+te2f4xOFxYyOD2hZnY/JuPaT+3AKqUVsq8i+vJ:OxsSSSatEV+EoaD2hKJWAKTcRJ","tlshash":"e993f1b5b7e7f785130bea2d1abc2d22575027c16cc49653319fae24eb8db3109a3036","first_seen":"2026-09-11T09:48:23.908315Z","last_seen":"2026-09-11T09:55:41.502563Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/fa-solid-900-aa759986.woff2","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.940Z","timestamp":1789120474940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/fa-solid-900-aa759986.woff2 HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepae.xyz/assets/vendor-fa-67efed7e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\npriority: u=3,i=?0\r\netag: \"6a881b5a-26a0c\"\r\naccept-ranges: bytes\r\nage: 320\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKRE9PzR1qmCdtPNG6%2Fv2jGIb7t0cmvoVNAUSK7TzXbWTJ29B9AA6OjkRqIblTfMpHnD2n8j21%2FWbZdebJeW33DWSD0zShbo434S5kSmqo99gVfWTLVZkpeb8HlX4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab859b50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 158220\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158220,"size_decoded":158920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158220, version 775.1280","md5":"4a6591ab5460ae5cbff1ecbd6e52193a","sha1":"7cd8afd6501962fda35d66f0e4c3b8815ac471d8","sha256":"aa75998623a391e61c6901794ace832e3ecdd288b56d608f21bea0411acc0b8e","sha512":"96c5d3283b71613b595b6b0420333bef5d64451af05c59dde27ec5b3e7cfe6e9549c604cddfbcb79cbc0fd4cd6f2e22a130c9a220b1b7ef933ac9df8c8e695d6","ssdeep":"3072:RauSB5FANIRLpsBaBrJGNG3ECNQztRvHHqkqLrlF:guSqN6ptrJGo3POh9KT9F","tlshash":"0ef312a710c6b95684a3a51b336adeb52c3ed363fcb6cd73be340114689da9c2e4d190","first_seen":"2024-12-19T10:41:23.153533Z","last_seen":"2026-09-11T13:42:19.450091Z","times_seen":35946,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0adaa377b44144ca680337c2c5f19ef1b.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.176Z","timestamp":1789120475176,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0adaa377b44144ca680337c2c5f19ef1b.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 72557\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC55EA06383959968D\r\nAccept-Ranges: bytes\r\nETag: \"76810544597D9AEC321A8EDF7DDE427A\"\r\nLast-Modified: Mon, 17 Mar 2025 12:55:04 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16528432458784396012\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=adaa377b44144ca680337c2c5f19ef1b.png\r\nCache-Control: no-cache\r\nContent-MD5: doEFRFl9muwyGo7ffd5Ceg==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":72557,"size_decoded":73122,"mime_type":"image/png","magic":"PNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced","md5":"76810544597d9aec321a8edf7dde427a","sha1":"929cb18c84495549d0b82d132f9670185554e364","sha256":"95bc0bc20182a680acbbe883c3a99d84394e00a64a0327d7247a3e9f117b6f58","sha512":"5c818ac44d26d2d92ff2f71fb4c8ccf284840756165eff8e0ecf5a56164332d4f89d8a9147869ce76ea5681e187e64ca1c1386a07b74c1c443d43b4ce16fcc5e","ssdeep":"1536:Zv6XRVimk6gv72NHRGhafmzY++sTu4yeT0nv+iaVznd/r6TXZYVL7:J6XRVhkVD2NohafmzvlTuiT0Gia3/+Ta","tlshash":"ea631202bf5598f1a8fc5dad6c8452b5cad59503eb0652fccb900691250e82cbbe7be3","first_seen":"2025-09-13T09:49:49.994323Z","last_seen":"2026-09-11T09:55:41.537289Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1646,"timings":{"blocked":1103,"dns":0,"connect":0,"send":0,"wait":282,"receive":261,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.01b5d52e77b984c1582c5e6d357027788.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.182Z","timestamp":1789120475182,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.01b5d52e77b984c1582c5e6d357027788.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 51487\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC829A18363709EB4D\r\nAccept-Ranges: bytes\r\nETag: \"75292C064DF52B22550F1510C40D725F\"\r\nLast-Modified: Mon, 17 Mar 2025 12:55:29 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16056638951013891537\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=1b5d52e77b984c1582c5e6d357027788.png\r\nCache-Control: no-cache\r\nContent-MD5: dSksBk31KyJVDxUQxA1yXw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":51487,"size_decoded":52052,"mime_type":"image/png","magic":"PNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced","md5":"75292c064df52b22550f1510c40d725f","sha1":"d9b106d551435f324a94ff8f3757fdc84fb3c50c","sha256":"4f607f213dcf0244743e2a1d80e348d3eed9021189c848b163f34d47a804b25d","sha512":"43fc2fd887c4aff5aac32d66b0dee77e8455c7de5910ddb85ec4553e29a71b00cc72edece3a83081664a51c9312ead0767fdc74a4a9f839b04bb3a3668085e61","ssdeep":"768:da2f8AuiJprGsKMhEDJGrTugTNK7APom7T3Og15xkX3gd6ui96QZyRSmNdxUh+9:dFf/ut4EDsT5Ph/3OpXwdxUG3qC","tlshash":"5d33012ff94f46fbe3d78c4b91da91485e2284039467f5c80f83c2ca35549b6ba64637","first_seen":"2025-09-13T09:49:50.009841Z","last_seen":"2026-09-11T09:55:41.518066Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1947,"timings":{"blocked":1624,"dns":0,"connect":0,"send":0,"wait":290,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0ac9ebacba6d54f1386c416d93be5ed52.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.184Z","timestamp":1789120475184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ac9ebacba6d54f1386c416d93be5ed52.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 45187\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC7AB1893336176AFB\r\nAccept-Ranges: bytes\r\nETag: \"C5B918AC7A843A55DDEF3215A49817EF\"\r\nLast-Modified: Mon, 17 Mar 2025 12:55:42 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2948587673896117930\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=ac9ebacba6d54f1386c416d93be5ed52.png\r\nCache-Control: no-cache\r\nContent-MD5: xbkYrHqEOlXd7zIVpJgX7w==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":45187,"size_decoded":45751,"mime_type":"image/png","magic":"PNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced","md5":"c5b918ac7a843a55ddef3215a49817ef","sha1":"fba48d3ffa1b630bf4059dbb9de0af46f2e4188d","sha256":"eab878a5754e7920e8fc81a8e75543ea2db10cb7acbf0cb602d30aa4c1be0718","sha512":"07c937a9f75df34879ceb2ee382365c1be972ec0d57e0fa7c150957da8b134932efb3ff835c2edc0ecb00037c8d09509525bc0785c37053471f9a70fcf2fee84","ssdeep":"768:ozo9wYNLVa0dueiUGmsNIYai6t1nlPK2eCLhugO+rfQv61l+dAanD+UDS/:o09wqcqhiOsKPicxtXhugtrc610yanDM","tlshash":"b713f1a53ec60af179699307f1cb2b09025f25b53f015e8a9d6fcc9b8f01055eb3aa74","first_seen":"2025-09-13T09:49:49.911773Z","last_seen":"2026-09-11T09:55:41.541707Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1945,"timings":{"blocked":1637,"dns":0,"connect":0,"send":0,"wait":281,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/index-65cf50bc.css","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.699Z","timestamp":1789120472699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/index-65cf50bc.css HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXvhNkTJrrVJCd1n%2FI5TKQOW64z1zDS590aVZuYAm6fL7O%2F1LAGBhALCcv1NcRXjW%2Bnkf%2BZZLJMv3HggIWA2X1kV7eikDhisQnIZwP8ztxEVIQtj2bNcPKEi2ynyww%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-8d05\"\r\nexpires: Fri, 11 Sep 2026 10:33:41 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40851\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa5c840daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36101,"size_decoded":8074,"mime_type":"text/css","magic":"ASCII text, with very long lines (36100)","md5":"b7b368b6473dfd455bf57de7fd0a5777","sha1":"ac76b05f3bb8fb53648ebf1cbda8aa435b4ada8c","sha256":"65cf50bc4e30251962e198065e0095cb57f4532876d7880ce5c844ed545b6582","sha512":"efd62d9fc6cae3e1e6f8e378df94934105c058090c3b55c7d30394347b02d8ef58967f9a01277bb92b0b2c686c2645d7cd75cc019cee027e03bbda8fb169b5f0","ssdeep":"384:nOVmp4gxS+yznPMCL6YBGV69nnv+1aJmg1WioUzPxf4EQQac:nOVmp4f+ywGGVS+1a51WioUzPxf4EQNc","tlshash":"04f2b324f214143ba637cc5d3cc4b648c625f6a1c6026bd4f9ca55a8aadfe811eb437f","first_seen":"2026-09-11T09:48:23.941857Z","last_seen":"2026-09-11T09:55:41.556957Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getMt5Amount?coin=lead","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.522Z","timestamp":1789120474522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=lead HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGBiwp5UwlfPOioeIdGL4l2KmpBegsBROnn3hW1RlYSQmnjj2V0cRSCcHeX10tFAG6CTOX8Iw1K%2FgdSn7J6F6ss2prEh7mn%2F0ts8UNDD95HIt68rJM4FGNP2UQAXXw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab5c93d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":896,"mime_type":"application/json","magic":"JSON text data","md5":"ac494568c5b335038046e6ab86ab53cd","sha1":"d572e19600cf6f709ebea35eb1b2138756e2d441","sha256":"568bd792e8c705971d73101e9b4ee2f562c04a2f4b97114ae5ca87f2fdf04c03","sha512":"88e49255041904a9dddc762f5e50bf5aa5144ab6d7868c51d0b5b11dac6730ed045ee6fafe1f9ccf0288bb398aa1c155adb09a9d3a247472d7a4eaf978eb7963","ssdeep":"","tlshash":"6d9002552c188243a88300a5d5061304012432603625d348cc6d513580981632040d58","first_seen":"2026-09-11T09:55:16.858951Z","last_seen":"2026-09-11T09:55:16.858951Z","times_seen":1,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getMt5Amount?coin=nickel","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.525Z","timestamp":1789120474525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=nickel HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbbMTqDjUVSVLrOx5KdjeQXFe90Cd8lOtI5whNhL%2FQzHYNE0ZROCOxJ7Y2vzIyBfj87EjyBw%2FtGIVJpKpsdMtP9xIkIKXCyeAsUdlwUn9f%2F%2BM0%2F1w7BHiOqFtc1mhw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab5c9400daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":902,"mime_type":"application/json","magic":"JSON text data","md5":"00a2d1237215e3b54b97c13bd3937c17","sha1":"0887954052502e1117c2e73d8c017832048f3bc9","sha256":"593f7c1986fe74ea96ffc82824c91e7b59536401566a0b9aceb273ed26b416e2","sha512":"b1ae93c2f94ea3c84437e051692ca4d780ed9688a75f968b0b96977f6b4a17ad82b755b331e191285470167f0d00fcc2ed75d824d9ab05e26475ee7865f4e3bb","ssdeep":"","tlshash":"bb9002952d188242b88300b995071204002435643625d258cc99523580882a220408a8","first_seen":"2026-09-11T09:55:16.862793Z","last_seen":"2026-09-11T09:55:16.862793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/resource/svg/dark/gou-yuyanno.svg?2.0.1787304794119","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.168Z","timestamp":1789120475168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /resource/svg/dark/gou-yuyanno.svg?2.0.1787304794119 HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:35 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FEFZvHbWzBaAyFEj9MOcAVJz7jRtUnaUeVcWvetL1Zgdj3dler7ExWZ5FZBMGS2%2Bqygw0A%2BFyQcuWZJ0vXh7qjvN4tYDvECPgZxJt%2FV000n1WcE6hHMmCUMRuSabOA%3D%3D\"}]}\r\nlast-modified: Fri, 21 Aug 2026 09:32:07 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a881b17-ee\"\r\nage: 5555\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a395cab9c9fa0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238,"size_decoded":885,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc9f76c55946145ecd77d8f82dc47cd8","sha1":"7f1c86989996b8cc3379600c26eebe52e68244ad","sha256":"5e0b88fd6d9492a4df3462ac77aa1ef6f8187a4a8134585e3778ce863f509d20","sha512":"f62ec8f97ea00f4b66d23aef1b97db693033d831c4e48b8664356ee05eb3a551fb2ae46217df11243e8819811631138b2e04c6fe8574202c0fff4f9dd2717288","ssdeep":"","tlshash":"0bd0972e646c80080088ca002ae47c84019df0dc27c202eeb5416446c02208634aac5c","first_seen":"2025-04-25T08:37:00.552061Z","last_seen":"2026-09-11T09:55:41.565684Z","times_seen":94,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0789afc5021e94d70980b9be5428acfc9.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.170Z","timestamp":1789120475170,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0789afc5021e94d70980b9be5428acfc9.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 8763\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC23C0543539B537AD\r\nAccept-Ranges: bytes\r\nETag: \"955C77D1B75E882FD817D2DAA9BF3510\"\r\nLast-Modified: Wed, 25 Dec 2024 07:15:41 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8653684933170171035\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=789afc5021e94d70980b9be5428acfc9.png\r\nCache-Control: no-cache\r\nContent-MD5: lVx30bdeiC/YF9Laqb81EA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":8763,"size_decoded":9326,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"955c77d1b75e882fd817d2daa9bf3510","sha1":"84d52c0542a4a053289a7067722b1a1d75f6b6d5","sha256":"db34976089ba1ff54b519082e7bcf59345e4cf4754f950130a2270e814f800f7","sha512":"3ac8c65e0c95edd0cc0840d488057156df615f4c06ac356970a016c71a8729ed97cece07b71c733df4674b9cd1a46d3ef196956c372447d0b815224e624472d5","ssdeep":"192:QfZuDTDVztOYX+T5QEY4j23UQt8nHRndW4gXSTDR:QKHtkK+qI2UA8nxnYPqR","tlshash":"5602c0d89302a1e8d95eb8eede30e072401d554bc7cee94092e5e5790c592b8f5bb1f4","first_seen":"2025-03-27T06:51:59.223327Z","last_seen":"2026-09-11T09:55:41.545289Z","times_seen":84,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":-1,"dns":23,"connect":264,"send":0,"wait":268,"receive":0,"ssl":533},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-vue-652c4c09.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.681Z","timestamp":1789120472681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-vue-652c4c09.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ti2QOn6PhZsP%2FIHhbWAnrLziatGLYypnul8529ZuCMcECrTu3yAiE74oGmZdFRguXTKJuHf%2BswKt1VAEDbi%2Bx098DMjfBhrYbmmjSRMVCM6aDHj3fgDe%2BE4%2Bi2%2FLrg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-1f7ac\"\r\nexpires: Fri, 11 Sep 2026 14:08:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa4c720daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128940,"size_decoded":48998,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0ec2d556e8326b430340d0d1674f40ae","sha1":"38a294e16182004597d59758c07919b02e661c9e","sha256":"67d3f9714818fdc4aa4e6258a360092c1fd3601f293c11ac34cea45e0cdfb7b1","sha512":"fb15acd744251e42a88583c5b1405dd7ed81966a16c70b2e544bee16e46153b5025949d14d72266dcec7c51a9dc60d7998a2d90242ada69e542a7e65f350cb51","ssdeep":"1536:XbjlFKTYsg6AkAK88LLgEOXSBKLc6HptntXAZE8ldPJJA7WaTC9/E:rMg6AkAK8AgEFBKPHptpAZL5A7WEC1E","tlshash":"24c308e93282b46163fa19e600770111f3392959380ed4d4f16daddb3d3789a91fbe2d","first_seen":"2026-09-11T09:48:23.905268Z","last_seen":"2026-09-11T09:55:41.539256Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getMt5Amount?coin=copper","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.519Z","timestamp":1789120474519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=copper HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZHi5CEA8xAZa1U17Q2XW5R8og1dpb2B4XB6FH371v8FimYDaiJkdnGoq7J8uwHhOoTUWI46LH2NXNZvnqAYhvjTrZZX%2BSLKlv%2BN%2BjDGSl51W7RrcfGlVZB3IOJw7Vg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab5b93b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":898,"mime_type":"application/json","magic":"JSON text data","md5":"359616773508a7a78ee43c84d9810e37","sha1":"6cc82bd9b9b9f6d0c84df8ea2c8d6c8d23470062","sha256":"36001ac07185e4a28c5ad7786cb27de92b84aae64b6bbe0be2fb9b46104b4ddb","sha512":"8b3ef988562c42912bf3af62108a4d506f93d16db45e57866c222230dd7dac8d9b2d51dff9fc5b694fdc63bf59b1cd75999680a91e495e78a749b910189625c3","ssdeep":"","tlshash":"cd9002952c18c242ac9300a699461204002431602625d248cc5a522591c81662040858","first_seen":"2026-09-11T09:55:16.868072Z","last_seen":"2026-09-11T09:55:16.868072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getMt5Amount?coin=aluminum","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.527Z","timestamp":1789120474527,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=aluminum HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PJ0yl%2FoFb9Lr3tlxwDqDhABMoa0P0WlNIGIPfhQWQQ0cnvqjTX%2BjaeYG0NejJB9NMDHHxPgyTxYM0FdBbnFGsRkUdJYk94m1w%2F8shoq58G1xvyTF8X%2BxTs5coHxGmQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab5c9410daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":900,"mime_type":"application/json","magic":"JSON text data","md5":"5fbaea6e6ef76d7bd6ef98b5926d7dc2","sha1":"b48a1fed55b72cfb6276f984130242728cd9b06c","sha256":"5ba651b2c4918586fa294abc981cc23a64c4315df541978920efacfd5ebe6d99","sha512":"71e69494b93204f799c87a4fedde2a30404f115c2de089606f91984e12ddf8d2ec1afd5c19da1547c44eaf0d20a120b97f35214ded7e389be3fae9675fc8aeb9","ssdeep":"","tlshash":"bc9002552c188242ac8304a5990a12440064317026269348cc5e5125848c1672140858","first_seen":"2026-09-11T09:55:16.870124Z","last_seen":"2026-09-11T09:55:16.870124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0cfc948157ce44f538a6aeadeed2c7ea4.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.176Z","timestamp":1789120475176,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0cfc948157ce44f538a6aeadeed2c7ea4.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 184574\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDCEB4F4B3234891443\r\nAccept-Ranges: bytes\r\nETag: \"F7126EEA8DB336AAFA1B10DD2C32E690\"\r\nLast-Modified: Mon, 17 Mar 2025 16:33:31 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1166810706192653567\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=cfc948157ce44f538a6aeadeed2c7ea4.png\r\nCache-Control: no-cache\r\nContent-MD5: 9xJu6o2zNqr6GxDdLDLmkA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":184574,"size_decoded":185139,"mime_type":"image/png","magic":"PNG image data, 615 x 615, 8-bit/color RGBA, non-interlaced","md5":"f7126eea8db336aafa1b10dd2c32e690","sha1":"1d80f400ac3555bd897f88bef49b8d6866604a17","sha256":"e2378c56eacb12fd2ad199d129f580ddb3e9dfb737d3a2588e5b3f1339d5c12d","sha512":"9015001f580d69832847d29436233df1e8b2f8b79fd1a5f5ab2f5f0fd5f43709006a05532b63a9693edd2d59b238379e955e531c508f1c2b5dc779be07f233cd","ssdeep":"3072:aTlpVVxo1WBkGJ8AMYiTaTqp4ikAG/o77v/TkvMS4hK//axmbjimZ:epfa1mkRAMPWqp4i9Gu3AvxcK/SxsjlZ","tlshash":"680412500fc9945c37fb881a05812a49f73eb59551bac1c6def490bed4a3ba224db3f0","first_seen":"2025-09-13T09:49:50.015639Z","last_seen":"2026-09-11T09:55:41.525606Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1967,"timings":{"blocked":1102,"dns":0,"connect":0,"send":0,"wait":283,"receive":582,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/index-862a306c.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.678Z","timestamp":1789120472678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/index-862a306c.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rMMVOn7yPlceJwRgavMiy8Wnu8My9JhkTh6sLJS%2Bsa4JWbpc3DF9D2%2Bgn3L7gcvVQmElmWPllwG7DZ05C4v1Fz79FQwbyGdoM%2Fe%2BdRy4wZvazQj%2F3IrAdIjoykyIAA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-4ca8\"\r\nexpires: Fri, 11 Sep 2026 12:23:57 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34234\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa3c6d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19624,"size_decoded":7701,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19568), with no line terminators","md5":"a2ff67743d550067413bc3b7cf4c2074","sha1":"495611432092d3f83dc1360d0e8a28e21080b3b9","sha256":"2de24957065516cf761b6086c92500a1ded2636a4ad9f6d790a9ca0012f26184","sha512":"3d94883837fe04eb8c58f70fb2a2b223fe4458c509661938f962bfb74125baf8b8a8af1db49bd8526c89f1f93dff8a71c9430eae3d7650653a9dd63a285e1d74","ssdeep":"384:IwEpqX65Q+r+54KENftdTWeubJMF1/Pnri1C/hhvLW2KI5zBcx+AWDR+jl1phfw2:98qX65+jgTWeubJO1/ji1s5NBcbWDR+/","tlshash":"27920a15b40a9934e2f39595642e0640f1182fdee05394b37afcaf1227e8ca5a35a73e","first_seen":"2026-09-11T09:48:23.947455Z","last_seen":"2026-09-11T09:55:41.54598Z","times_seen":7,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-web3-be73c185.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.685Z","timestamp":1789120472685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-web3-be73c185.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qJ5iqVoYl7eSGdIHbrwu8vFJBzLq3Xdm2yEmsVxryq8LpljLm8VM23%2BIEbptD52V40ZL4d9OVBshEaMC%2Be5UTkqPIS48f18ol3d7kfHEvIP9WyQcEvfMCM8Bl1M%2FPQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-4609f\"\r\nexpires: Fri, 11 Sep 2026 14:08:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa4c750daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":286879,"size_decoded":70703,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c9a595bcc015bc8dbcc388332b1f836a","sha1":"969f8f6e7b7fb0d926b2f69e3a4d9b40d31dc9f0","sha256":"3400a7db1b1f812e1b1c9de83085b3af33212044d5f8a234ce036ad96195a3d8","sha512":"17e9d51a359ba4e5a7a159755922479f5ae697424bba64a12f3d494830b70731f48432d13ae97fcf10b2bfb55897e66f5bc5a95a93d33f203bf2d3beb2c6e70d","ssdeep":"3072:ydkJu93WuKIfml5iKmAFh+MuFvmMpatfCs:yKJuWuTAXHuFuMpah","tlshash":"bc54f985b592f1600a8a50e0d4f71203f338bd59705bc0a4f6b998eb79bde89d177b38","first_seen":"2026-09-11T09:48:23.964018Z","last_seen":"2026-09-11T09:55:41.553061Z","times_seen":7,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getMt5Amount?coin=xau","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.513Z","timestamp":1789120474513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xau HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NkEY0smc1J893AIe9hWTjq%2BP3xBiHTI33Gs4aLQlPRubS0Ujv40MLXnMp1mU5tB5lAF%2FYNOHCpNsO6OmFx4ZUsOJP76dkwo7WbG0h7OuPkLVLrnc8YYaHxxqaX9Bdw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab5b9390daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":896,"mime_type":"application/json","magic":"JSON text data","md5":"7bdeada17dec36c5fe45ae8685f95e1d","sha1":"2376c3815b73cc4952fcb343391315dc4ce9f31d","sha256":"240761925b7db72f19d3e986ceded8d012cab5fef6b4f1b74ee46e72e33ff2e9","sha512":"8b53ce38f897f6e3c0fa5c253cfab11a7d7021a5a52993cadbd8b0ed7bd796b3d39e2e4512e07f451a4f43c2e6121ace6ace3b8277fe54cb9d0bf365511ddb4d","ssdeep":"","tlshash":"f99002952c188282a88340a595065204002432602629a348cc5d512584a81722440858","first_seen":"2026-09-11T09:55:16.874431Z","last_seen":"2026-09-11T09:55:16.874431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/views-731a7d5f.css","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.697Z","timestamp":1789120472697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/views-731a7d5f.css HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2BY%2FZAIwiMTvdnnQoIgeiEtRpxLXeE3yqncNlYsUxotfQBtdad%2FxaA80QKvZ2uOcfbFRD4mS439hKGTHds33bmMrW0ql0Qk%2FYjbtmCFIurI89ovR8G4xq%2FAf%2FNkfmw%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-5cc98\"\r\nexpires: Fri, 11 Sep 2026 10:33:41 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40851\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa5c810daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":380056,"size_decoded":52040,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9f4a4a6a8327418a1765218294d985a9","sha1":"c757d0204b102cf9f347f62f7e5564bd5ae41ab7","sha256":"731a7d5fda6524290e39769cc39fb8a0fedbddc4c7db52e9a1631db1aa3d0757","sha512":"9fa99d1bcbe5f6e477e9212c07696ebc91a6746f38c9fc10d25a52dccbce1de834001a870eaefbc5ea8b363f3b7753a3b40757eaf626aded8e026afb36b45289","ssdeep":"6144:vCXtzt4r/19Q5qEhSP4tDX8AsxDnCytn08DR8Tfe+gYcnxFp5:ag8TfexFn","tlshash":"a184c7a9b35c1539bc7bd59a3da4e68cd014be52e0439ee4e61756260ccbbe33b2070d","first_seen":"2026-09-11T09:48:23.921905Z","last_seen":"2026-09-11T09:55:41.518907Z","times_seen":7,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/charting_library/charting_library.min.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.677Z","timestamp":1789120472677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pvbs9Ty2W3x1mMAe1Eg8nfnZ45O06C%2BRKf9nIh3gIH4f4gOX%2FuU5BUvRIPgoghhXbCDW8ICeu%2Bz0yKN%2FdHB5LaYH0Hwj7hb0r2IQpCpYrWLQ1SbUxHhwwJuD2tezIQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b16-2a6a\"\r\nexpires: Fri, 11 Sep 2026 10:33:42 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40850\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa3c6c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":3934,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-09-11T10:05:44.627817Z","times_seen":1430,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-vant-5032c3e5.css","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.695Z","timestamp":1789120472695,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-vant-5032c3e5.css HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yiInnk4r96U%2BKx4aZoDp1PT5snoxkgrxGlrONrnV0QLld48tcup3EklRUMoxXT%2FC2qCWgf4K%2BXYBa0vps9qO9Qf%2FkIC499tUdKxD%2BcRkD7mFa6PbT0WVBRwabKQ7dQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-39122\"\r\nexpires: Fri, 11 Sep 2026 10:33:41 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40851\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa5c7e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233762,"size_decoded":80295,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"18980102b6833b61f136a4c4be10f013","sha1":"cff35410b7a69158395a91fe5355885935e31205","sha256":"5032c3e5716b18eb91ab679f388ae5ccb073ea50623b0aa1bcd11970b089b77d","sha512":"1a1960ad5af1ab98a8ce62cd35923bbe945ffcca7fe9e698b5b1621af6afbbd980d7abc14976fa1b14ed6876e1ab5ec6e86be1451ef6484cb89f2b5c5f2448d7","ssdeep":"1536:+CwsBlDOFIxuVoxHtIyNBi3MFYaQj7FCwsBlDOFIxuVoxieT/BiFVmV6L71Ah5aG:+ClDsIxuVSHnNIClDsIxuVSR+835","tlshash":"dc34d795e69091bcaf2bf175ab8b56dcf23cf570ed01daa4f10091580ec7bf50623a1a","first_seen":"2026-09-11T09:48:23.97977Z","last_seen":"2026-09-11T09:55:41.54942Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getMt5Amount?coin=platinum","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.530Z","timestamp":1789120474530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=platinum HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7vEKBrLKRFAg9WD6bcPBXsRcbf2dCcear34zUOSACTu%2BJ9kxE%2BexsNGnciiFmIZhVoUq3EbjJ8o9rME0ab8jAR8GHny2UAB8HKjSXXpEhMXvQgdH2gVRAXkMJN1lEw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab5c9440daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":896,"mime_type":"application/json","magic":"JSON text data","md5":"9ebf289b857e8354191c3a33093669cf","sha1":"b228ea611b349919c3c39f079fcd278f9dbae69f","sha256":"04ae7935223e71fdb1b0f7945e6253559cb9bc52a2923aab6e3cfe51d1c57c78","sha512":"9f3725da95139456fc685184839eb85139e518a40a4d8a8e455e13f3486f1f7679d33f8ddcfd81237cd38fbb741e566785d86de26eef7f1079b4b07245044626","ssdeep":"","tlshash":"ac9002952c188242a88301a5a60652040024316026259388cc6d512580881622440c58","first_seen":"2026-09-11T09:55:16.877229Z","last_seen":"2026-09-11T09:55:16.877229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/resource/svg/dark/gou-yuyan.svg?2.0.1787304794119","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.185Z","timestamp":1789120475185,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /resource/svg/dark/gou-yuyan.svg?2.0.1787304794119 HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:35 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EAgKPc2F7hcL8%2FCU7cbyearq8nMfIDIapaUrzJpyYDrvYibLKmJkkCEBtjGC9cYNUAbHBoYqMRXxnyGVe%2FXCdRLmPGrDI3dccMy4lbIoOPtoNJS3%2FJ9rHDxwI5cFXw%3D%3D\"}]}\r\nlast-modified: Fri, 21 Aug 2026 09:32:07 GMT\r\npriority: u=5,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a881b17-105\"\r\nage: 5554\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a395cab9ea000daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":261,"size_decoded":903,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9be08682406830b20d26c7d6ea6497a9","sha1":"726e8e49fcef32c83adf41278a0b0d81d64cedc9","sha256":"6f1072b132109de71d9ceb899c1b0d2e5af12901cfc5e79d048301f455ed9ad3","sha512":"3d78093203c31f9573becde02ec2c29e819e33b8be59adbf2562561e14da84f201fd93198aeba1dfbd73ee4a0ecd5c3a8e3efbe4faa3e58fef610cb34b70a3e2","ssdeep":"","tlshash":"53d0951fe85f400c605bcd5009e03d44916ef05557d605fdf9d258bbc1224513479d58","first_seen":"2025-04-25T08:37:00.52435Z","last_seen":"2026-09-11T09:55:41.517197Z","times_seen":107,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-element-634158bf.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.692Z","timestamp":1789120472692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-element-634158bf.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UO%2Bqz%2BtIEIH5mUc3dArnii5ZnPXBVGHIGJ4VZIVPCZ912xHqfEZoU33EKv1h8KqDawOxri%2FQ5Pa9p4cNheq1TULRyWDlb7P8GaV76mlU9an9eKklX8HWofJttmHoAA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-c2052\"\r\nexpires: Fri, 11 Sep 2026 14:08:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa5c7c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":794706,"size_decoded":242320,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"212f26699824fbeacf6d480320066d2a","sha1":"0ff1b83b9666d520f197501e2669b879a51327c8","sha256":"01037f79cccd6be630d2ed9bb10ccd0fc02d2363a8193262b0f91201b6f7bbbc","sha512":"c7480c42a9cf44f1393ffffdbdfb7cfec65adcb41dbdee68068c0a252d6314d4666c7047f4f75a20c78c55410b30f12fe3ff805b7f4aa51733c0889ff9b6898f","ssdeep":"12288:wglOOmshG4unXAZFM1LRbTvbFZE4s1fqEmM4a6:wglOOvhG4uXAZmhR/bFZE4sVqEmq6","tlshash":"baf44b95b855f436dbfa94c980990500b72d174db028c8f1f5bf8d2a229fd50b2afb39","first_seen":"2026-09-11T09:48:23.926287Z","last_seen":"2026-09-11T09:55:41.548726Z","times_seen":7,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.07ddc6e3d7eab4fbe9e222f6c8c2d6c28.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.174Z","timestamp":1789120475174,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.07ddc6e3d7eab4fbe9e222f6c8c2d6c28.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 21548\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC55EA06383929948D\r\nAccept-Ranges: bytes\r\nETag: \"639A47EA6A31FE26285F5049327ADB50\"\r\nLast-Modified: Wed, 25 Dec 2024 07:16:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10454958790141642359\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=7ddc6e3d7eab4fbe9e222f6c8c2d6c28.png\r\nCache-Control: no-cache\r\nContent-MD5: Y5pH6mox/iYoX1BJMnrbUA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":21548,"size_decoded":22113,"mime_type":"image/png","magic":"PNG image data, 308 x 308, 8-bit/color RGBA, non-interlaced","md5":"639a47ea6a31fe26285f5049327adb50","sha1":"2da11d21169d23092e66b45e8c0ec670f2395687","sha256":"40eb4529da9bda72a54499c1d25c92cc255995ac1f5b4c832cf13c39432749ff","sha512":"c29363480661629fb25eb0736d7e4926b4a82f4a3a5d2b8ad7e75114fb8c30c9eb7c18f51991488aa8b047004f75404e206d9597daff9f60671f7027d08f0512","ssdeep":"384:c4UIzEU8WE5GmcfxFsHJ1skpxnJOUFiWMO1bs8rBH+UbV94KaVlQB4hiB:J7eWE5sfzahpxnJJiW5Q294KqG0W","tlshash":"5ca2d1491b2757d4a73c3f038c4c3d690537ec758aa5f248beaaeca25c21520feb9243","first_seen":"2025-03-27T06:51:59.248956Z","last_seen":"2026-09-11T09:55:41.540644Z","times_seen":76,"resource_available":false,"data":null}},"time_used":1118,"timings":{"blocked":-1,"dns":19,"connect":269,"send":0,"wait":279,"receive":7,"ssl":544},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-lodash-28d24e41.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.684Z","timestamp":1789120472684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-lodash-28d24e41.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=utPycY8OI6IB9dhDOC1c7Ojl6qrm7ZIr3p2xnr7XAzy8QegBv6WFWhn9wGdNshsVPqKba%2BntAkMF6f2lA58gWC%2BI5pKF5K8ersJc05yH6uQ0DpovhMJrFad2Lb2kcA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-17bef\"\r\nexpires: Fri, 11 Sep 2026 14:08:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa4c740daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97263,"size_decoded":34615,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65340), with no line terminators","md5":"775961b61fe54f3cd7cb34ace73df330","sha1":"374b22f53109e697104f8d19dbdd15ecd5c860fe","sha256":"2143787f24eca88a15ec431ae6aebf29ec70a5c95eac5b4523bdfb5ade10bd3e","sha512":"438129baa041f8d12d425e71d83027a487f22e7e24ca3b3468205d01f1ceefb1ebf98a3c336c47189958b6dfbedf3e76f689f796a68ed51ab8ffdbd183aca233","ssdeep":"1536:H8LyadU0JIMfObIq5oe7HQ8K3sUt3W1DCpxVpJycTqDZbQFFKouA2BX:oauy2e7ItGD8xQ8+BX","tlshash":"92935fc83ad2f05a87a370b5007f088bf13e6ea4a89ca504d1a1f4ed7db954ed537e19","first_seen":"2026-09-11T09:48:23.935659Z","last_seen":"2026-09-11T09:55:41.567393Z","times_seen":7,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.08806df71d3394f95858ddbea3a50ae7d.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.167Z","timestamp":1789120475167,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.08806df71d3394f95858ddbea3a50ae7d.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 4741\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC829A18363711E64D\r\nAccept-Ranges: bytes\r\nETag: \"0D3CC761EBF53DFD01A767973B166C3F\"\r\nLast-Modified: Wed, 25 Dec 2024 07:22:46 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10212476019059771858\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=8806df71d3394f95858ddbea3a50ae7d.png\r\nCache-Control: no-cache\r\nContent-MD5: DTzHYev1Pf0Bp2eXOxZsPw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":4741,"size_decoded":5305,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0d3cc761ebf53dfd01a767973b166c3f","sha1":"ea63beee2c5d24534147b351a9b631aaa8c8a4ce","sha256":"854dce1a493d669fef9179d178af206dd2bdd9c7863a0bd18d0777d24b135527","sha512":"4642936fb3a4794952bd4086b452a2f1366f50278de0764fd0f1f2f486d67ce10b51783df9eb1394ae871a30b7031fb9a59ac7419293ae0622e94e0d1198740b","ssdeep":"96:HwoMkyqrtz9MoMFXQhJlR/RQSmvTik24XsKe3JI+abyX5vpwdy8NypD:HwoMk7hugrLRQSmvJ2qI3y+5XJpwdygG","tlshash":"62a16cd1ce007bf9b4addc53e1cf928441ea6c4a8926c25d2b95d63c6e6283391d2ccd","first_seen":"2023-07-05T14:45:43Z","last_seen":"2026-09-11T09:55:41.536559Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":-1,"dns":25,"connect":274,"send":0,"wait":274,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-i18n-86676d52.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.686Z","timestamp":1789120472686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-i18n-86676d52.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kt%2BmoW%2FqkPNcJtve%2BZbpmVRQnv7fpv8nwv8a6KEe%2BptgzjcGB2LjmR0I6TQAJZSN7fIjKTgEk%2Fu%2FTxQMbVFi%2FUdDBQY8fx1zq%2BcAHevh%2FXPhVKVKn0PhdTpiTE8YXQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-ec74\"\r\nexpires: Fri, 11 Sep 2026 14:08:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa4c760daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60532,"size_decoded":19806,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (60528), with no line terminators","md5":"fbbf3355be1aee426259cbdfc05615a2","sha1":"1450c3c015a99313abded6937d964975c52a264e","sha256":"34c11e6ded74b53477fad0899ef7d91132c3ca3bf3c097e8924b1a7b77e8748a","sha512":"1f4f9784c83ac3e27d8b0a5180619da44f47eda4459abda693ab3104dbf2fac808d12893e17391a18e4d82f48ba8debda6e841f52e377e5f210f094981047df2","ssdeep":"768:xMPpyGrecKPUVO8pYJtRmUqdIVojB0TZXM/oM5lqz4WUpjc6gWoamZw9SV1FqEhU:jsCVw0TZXBwl5FG6gWf4xSzdgo","tlshash":"a043e7d635d7b016977a56e620b31101ab3e1b59380e9884f1bdda873e33c5a83b7f18","first_seen":"2026-09-11T09:48:23.91623Z","last_seen":"2026-09-11T09:55:41.539883Z","times_seen":7,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/resource/fonts/Arial.ttf","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.825Z","timestamp":1789120472825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepae.xyz/assets/index-65cf50bc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\npriority: u=3,i=?0\r\netag: \"6a881b16-ff9e4\"\r\naccept-ranges: bytes\r\nage: 319\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lp3E9In8%2FvThah1kbTsciKAJ%2FDV255Q%2BNq7GoK%2FxfkCjXadGZzd85zdBg%2B9vqKlrl87lyfq4FXkjrGVDl%2BoITrdSZzqcgFlU2CsxU5p6NwhYwBiLYZrQHwZ%2BDS5ArQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caab2cd90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1047012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1047012,"size_decoded":1047737,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-09-11T10:07:28.331701Z","times_seen":2390,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getMt5Amount?coin=palladium","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.529Z","timestamp":1789120474529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=palladium HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lggx0%2Bh7%2BrXn4Oer0SECLlZHlFuLikyrNLiKoMBqEC4dYAP4m83RDArLAoKQNqKKegscWOAvqG6H2nI%2FX1NVT7zI7rKwjBhgPn5LoKYr8sTTRi18xZtN4Rw%2FmqXBdw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab5c9430daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":900,"mime_type":"application/json","magic":"JSON text data","md5":"b441aaa5bf362bd166810d97c25f231c","sha1":"7ad458468931139d2a2573bcd605187fd0eb1566","sha256":"fe2b582fb09f0c4a2820bc9deb95a3133e39d5e3cb000db723cd30d0991c84ce","sha512":"5f18827202de5ea926217be52b9055ec366c7efbd15237f027057df01b8496dcf80b6e62a50d99d04ff74edeb0557e6762d7d0c136b99cab1daf56494e1085ab","ssdeep":"","tlshash":"ce9002552c188252a8c300a5d5061614006431602625d348dc9e5125c0881622050958","first_seen":"2026-09-11T09:55:16.882219Z","last_seen":"2026-09-11T09:55:16.882219Z","times_seen":1,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":437,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/type/defi_activity_type","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.162Z","timestamp":1789120475162,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlanguage: tw\r\nlang: tw\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:35 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdNR5YDqgUI3%2Fbx%2BaJqVFQ2EU4Pq2xul%2BtEpfFdYaotCzZCoUq6Js2qTRL1d9Qw9YHIqyZ5hJ5L%2FN25XEdCCTiDR3%2BZarmDMyh19WmYve3p9olxlMzmNEDvKJyaccA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab9c9f90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":1107,"mime_type":"application/json","magic":"JSON text data","md5":"7a423e3451e474878191a0a7f1d323b9","sha1":"13312f533f380295131f6a1540f425d0c98a16ba","sha256":"49c938e0bb3a834cab9319575489cf6c1694cace3f1ceb9671570024328e2a35","sha512":"0522e47fc06c4329cee21e354b264c90ae4b0725941d75cf63af54bee4a307fbe91e7078a412bd9750f3856657159ffe5efff139a652ec0443368f7c146bfdbf","ssdeep":"","tlshash":"5af028143d3dcebf098f65e745ec7818399c152794a0fca058ab0f3c5ae4171088921c","first_seen":"2025-04-07T11:28:26.961944Z","last_seen":"2026-09-11T09:55:41.557732Z","times_seen":862,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0aed821d9d40f4452991d4c6a8e6fa3a3.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.171Z","timestamp":1789120475171,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0aed821d9d40f4452991d4c6a8e6fa3a3.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 12556\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDCEB4F4B3234CE1243\r\nAccept-Ranges: bytes\r\nETag: \"14B415ED0A3655B62E78EC234990BC12\"\r\nLast-Modified: Wed, 25 Dec 2024 07:15:54 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12852473166245111393\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=aed821d9d40f4452991d4c6a8e6fa3a3.png\r\nCache-Control: no-cache\r\nContent-MD5: FLQV7Qo2VbYueOwjSZC8Eg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12556,"size_decoded":13121,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"14b415ed0a3655b62e78ec234990bc12","sha1":"b0a80be4c4f8e4c9f9d00711fcf8656fb020cc85","sha256":"0beea878c1ea5844b65a4686696654fe5adba210beea0489c45b40ab5b652499","sha512":"61a935ea01c21844355ebc98bf23d65c35cdb3c7c9759c6ad80883d184244813396cb8c6d98bcc58e3504642cc490610560faf8f0eac81039eace1f3cc6a8434","ssdeep":"192:3b9K1tLI4BayVPpEgg9/+Ufcn+wA4DRsf/eLs8j1lLgr2Jlk9eLk8htD281++UFa:rc1t5YmGc1AeI8ux8Lk8ht91+/Fa","tlshash":"8c42c0abb48f4c2a90adc0719d4974abe3f21cd41d64e2291ed0bf1c7114663299678b","first_seen":"2025-03-27T06:51:59.252862Z","last_seen":"2026-09-11T09:55:41.524802Z","times_seen":84,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":-1,"dns":22,"connect":274,"send":0,"wait":278,"receive":0,"ssl":546},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-echarts-ac6706e5.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.688Z","timestamp":1789120472688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-echarts-ac6706e5.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hEFqL35%2BfXreDqTpQPy5nTSs4fJuDE3af72UgM%2FcqHZnVrk%2FoB4yx9Tdthpa7FA6m%2BFKZ5cta6eZJNFfzh%2BiPF%2Bkp9cTvjJbeTa3oCMROTA6YFjKRh5tE5WksNc3tw%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-f9d51\"\r\nexpires: Fri, 11 Sep 2026 14:08:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa4c780daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1023313,"size_decoded":336240,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d0f68316ae5d0bb7ce326fc86f3322ab","sha1":"a8f671dc104753a02466b8101b29bc0d825b1471","sha256":"47f7e12f4386fb530d2d22d8b8f45c9be73c593130c359cd62c067f8e2d15ea7","sha512":"aa7f12a99dad5208015a905190545d7abcfd2128e0c8200e558ce280cb7ab6bc9139e84288925829402dfd73e4298c4ce519f97281c7b3ad4c579ace3ce07b8f","ssdeep":"12288:kFHycAbfS+3O4urBgaBjgLDfhQWBIqr3s96v16xLxsWw8ilNH9G2uIgd8Q:iWf8BcDf1BFr3sLbsL8ilNH02uIgdX","tlshash":"1025099cb654743543a73174066f050f933a680db50b86a8fb69e4ea6cbd44f223bf78","first_seen":"2026-09-11T09:48:23.917363Z","last_seen":"2026-09-11T09:55:41.510064Z","times_seen":7,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/favicon-v2.ico","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:33.296Z","timestamp":1789120473296,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /favicon-v2.ico HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:33 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iib0irFKz9XV3xA18HfH34uBHySEEblF5tx861f39ogvX%2BN8HkBX2iEs3sYAMRo9YfAEiKXCgSuNFRfeB0swmBRqVf9pMgQi3OoEdw0ln0zjCsqNI8BgXYK3yR%2BqCw%3D%3D\"}]}\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a881b16-175a5\"\r\nage: 5106\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a395caae1e590daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95653,"size_decoded":91405,"mime_type":"image/x-icon","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 384x384, components 3","md5":"1889637e405cc1b4c0e908fd94a8b049","sha1":"1a2629f01f18fc8a4d27526accae0448ebd3f78d","sha256":"5c4fb1b4c01a3c3ff81ce19fad97004f134997c8ecb2886f2588d18985ba19fd","sha512":"07dd7f0cdc8e3e49588eb2b0f66cfa5eb579cdb015ddd0efda2f3f617f2195e93ff23a56bc87de21485d848b2a6dd18be5ffe36434f3d3c989c78b0f3e2bad80","ssdeep":"1536:hkHRse9SMKc1seIjdhXE2ev+te2f4xOFxYyOD2hZnY/JuPaT+3AKqUVsq8i+vJ:OxsSSSatEV+EoaD2hKJWAKTcRJ","tlshash":"e993f1b5b7e7f785130bea2d1abc2d22575027c16cc49653319fae24eb8db3109a3036","first_seen":"2026-09-11T09:48:23.908315Z","last_seen":"2026-09-11T09:55:41.502563Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.081bf9bb101254f56bb0a9a5cb796522c.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.175Z","timestamp":1789120475175,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.081bf9bb101254f56bb0a9a5cb796522c.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5509\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC23C0543539A139AD\r\nAccept-Ranges: bytes\r\nETag: \"49BB8806BB89E59DAD478A199103D401\"\r\nLast-Modified: Wed, 25 Dec 2024 07:16:50 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 278986811476547567\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=81bf9bb101254f56bb0a9a5cb796522c.png\r\nCache-Control: no-cache\r\nContent-MD5: SbuIBruJ5Z2tR4oZkQPUAQ==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5509,"size_decoded":6071,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"49bb8806bb89e59dad478a199103d401","sha1":"7c7e04c23ecacd45cd9597384f454520b46372c3","sha256":"d4a994da74aff6dd29824839619894faff7dac1d1efa4678c40db74d8b886462","sha512":"f470c807c20ffd6b29d2c5cf48337af618a4dd82a18f6e86ab41d514ea25c8db4766bc1eda49059681f7f02d150ee391bc8ea1a59c6449b57fc5fa8c736348fe","ssdeep":"96:DxjC1uhQMQvUW79i7SSK0QBJe2+q/Scnu3t+89gy3MjBKTbWdl7RvUtONQZe:12BMkd5iGF04JRz9OtGccAsPce","tlshash":"b8b18d1db8418b30c3fcc2add48d96a0a3276c8f1a212c145f9ad3126dc999ce19f8e5","first_seen":"2025-03-27T06:51:59.173807Z","last_seen":"2026-09-11T09:55:41.504908Z","times_seen":64,"resource_available":false,"data":null}},"time_used":1364,"timings":{"blocked":1097,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-vant-3e081598.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.682Z","timestamp":1789120472682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-vant-3e081598.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5xSHQr%2B1P6r9d3%2BY0UysDYnuNI8aCXiIZq7OdQf8kVQFOpNAambvoGwZa30mHuKqFdDitdvHS1%2B%2B6qlFgnIXkb0s0Ck%2BQ9NwuzvkIcdSZgWJiR%2F7tGye7aFVoVSzQ%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-1e50f\"\r\nexpires: Fri, 11 Sep 2026 14:08:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa4c730daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124175,"size_decoded":43930,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65244), with no line terminators","md5":"774e6400289e3742a2c92b8724a6adcb","sha1":"3fe8d0fce34c7be04022a500ad279ab6dcfcda12","sha256":"4c229efb866afd0869a54bcd6b76f69411fb18922100efe6969a05bf8380a2dd","sha512":"0ab52fab5ef8f13b792d659b43ceedf53ab65716f2880ad8457e96f290cfc27087198aca0bd153c30bfc32eeb44d5cece592c802ec875a087230542347e19560","ssdeep":"3072:V3MW8Js2EAhRfDtZngW6OzJJT4wWhEf2JPsLZJLz6bm7QqVwUyE6BWqZoVYhN:V34EAhRfbzT4wWiDV7VwUkZo+T","tlshash":"76c32ad1b8c6f538977b94e5406b0510b6391b48b009c5e0f07ead8a2f69dd4b2bbf2d","first_seen":"2026-09-11T09:48:23.958638Z","last_seen":"2026-09-11T09:55:41.50904Z","times_seen":7,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-fa-67efed7e.css","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.701Z","timestamp":1789120472701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-fa-67efed7e.css HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vmvm8XNPCQARpGIpkTZuV6dn5iZWnP9MLk0quRQ4nVTcIdUzU9x6N9cckLnIt8Xt7UnsO7KG1UxTYm1oWwkDFYyYWW7yMhf7nWnuthp7v4shuSg2XL9nj8wg9s5iYQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-11b41\"\r\nexpires: Fri, 11 Sep 2026 10:33:41 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40851\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa6c850daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72513,"size_decoded":23115,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (61941)","md5":"75a70d108a98a6d2fc02ea23d4684fdc","sha1":"40c45536f02f27bbdbabda2dc3f2699f61e53140","sha256":"67efed7e1c238439780e3699bd926674415afc6cf3bab1adacc41632706a3cee","sha512":"ed85fc0cedd6eb09816d57d9971ea34fc092bf7e6e4752434e97a66dc5d70166c1fc313446fd99cc503e382c7b4aed4c6107f561cc8e21f7df9aba3d75af29f2","ssdeep":"1536:/WMnMOMgMwMtMFMHQ19O48KR5AgBtGZeoE9dH2kn9ZO:hN8KPpGZePx2kn9o","tlshash":"7e632cd590b0016bb1a6cd7f75a4bd34a632ebe4bd9d5486e1314ec0bd829ad324f332","first_seen":"2026-09-11T09:48:23.960215Z","last_seen":"2026-09-11T09:55:41.514085Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0b4a7d1d25b004d4fa34d7d9c33ebd66b.jpg?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.179Z","timestamp":1789120475179,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b4a7d1d25b004d4fa34d7d9c33ebd66b.jpg?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 21348\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDC7AB18933366168FB\r\nAccept-Ranges: bytes\r\nETag: \"F9D607ADCC57A8457AEEEB513275A9E9\"\r\nLast-Modified: Fri, 09 Aug 2024 13:01:53 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7654332070385894571\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=b4a7d1d25b004d4fa34d7d9c33ebd66b.jpg\r\nCache-Control: no-cache\r\nContent-MD5: +dYHrcxXqEV67utRMnWp6Q==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":21348,"size_decoded":21912,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 534x352, components 3","md5":"f9d607adcc57a8457aeeeb513275a9e9","sha1":"1ad026a013b978aba6b0ca3a53ebfaea03b7f51d","sha256":"351c23b49140e41d9ce8262afad9f36219c0f2293fb1d4fd205707951f06b802","sha512":"aa9950337f11db2b7d53fca4bb58782eb8e48a6198ea0dab101d1daeeb983b514fca169316eb97f8c1efc3c802f7e408820b459cb4753ee7833a26c14dfb627a","ssdeep":"384:P6npvsCMrYNg7800vwP8JmPg7hX5YseE0iJcf9BtUb7K+G/ZPyIfrDf0:wpEbYyA0CeE5lcBf9Ba3XOI3","tlshash":"e7a219239a59eb93f02587f0be031e995b2ba32ce58135ed10571e9f1e507318dcd26e","first_seen":"2025-03-27T06:51:59.193814Z","last_seen":"2026-09-11T09:55:41.538524Z","times_seen":60,"resource_available":false,"data":null}},"time_used":1637,"timings":{"blocked":1348,"dns":0,"connect":0,"send":0,"wait":282,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"h2703.oss-cn-hongkong.aliyuncs.com/echo2.0c6585e6f9b184811b02fcd64531780d0.png?2.0.1787304794119","fqdn":"h2703.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.65.170","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.179Z","timestamp":1789120475179,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0c6585e6f9b184811b02fcd64531780d0.png?2.0.1787304794119 HTTP/1.1\r\nHost: h2703.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Fri, 11 Sep 2026 09:54:36 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 101468\r\nConnection: keep-alive\r\nx-oss-request-id: 6AA3CFDCD14BBC36313E7C27\r\nAccept-Ranges: bytes\r\nETag: \"DC27ADB9DAAC87CD6BE8BBE99F037C5F\"\r\nLast-Modified: Mon, 17 Mar 2025 12:54:15 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6812464773390086848\r\nx-oss-storage-class: Standard\r\nContent-Disposition: inline;filename=c6585e6f9b184811b02fcd64531780d0.png\r\nCache-Control: no-cache\r\nContent-MD5: 3Cetudqsh81r6LvpnwN8Xw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":101468,"size_decoded":102033,"mime_type":"image/png","magic":"PNG image data, 615 x 615, 8-bit/color RGBA, non-interlaced","md5":"dc27adb9daac87cd6be8bbe99f037c5f","sha1":"50097e44ced6105a3573b0b311d3c26d3c86f621","sha256":"b68d7021c6c4601a665d054c50831b782f4706b5a0665b40a48a2e0123d52d31","sha512":"424d6505b442eea1bbc35dcd29027e0b5731aa7d8311379f5a6967d11bf4b4a76c4056032ded273ad054241cb40044d0ef75a137b636177bbb2f0b8dfb15fbd4","ssdeep":"1536:3SBiwz3bh6g2OtjrB7a8fjvypyOOC/QnhUJIvWgnMBBbNa4C6lf/cr7q8GKvvmnw:CBv9I8fjvygvC/Qhg8MbLF/ldwuj0","tlshash":"45a302a704e61abf03d3c68e99c898c81543040adb799c7ee478d8d6ce8b5c6d841b2f","first_seen":"2025-09-13T09:49:49.917363Z","last_seen":"2026-09-11T09:55:41.531148Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1915,"timings":{"blocked":1360,"dns":0,"connect":0,"send":0,"wait":280,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/vendor-2d4c25b0.css","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.694Z","timestamp":1789120472694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/vendor-2d4c25b0.css HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAWsVVM7NuQ6Ae2svPsKz%2FeuYQo79vT7LPXpuLZX7E2nxDpNFczMqp33soc4hm7tLlK2x4up1K7fBU7SBJcYqyvHN0EEmr7fXDoLnTaIoMA3zqbuIlNatibQve4svQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-11eef\"\r\nexpires: Fri, 11 Sep 2026 10:33:41 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 40851\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa5c7d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73455,"size_decoded":6329,"mime_type":"text/css","magic":"ASCII text, with very long lines (65353)","md5":"b58107efd258752756eb13c3cb8e1f4d","sha1":"d1bcf46e3101d4ddff77070824c560007d3af2c0","sha256":"2d4c25b06c681d0ba8cef2c4bc42a9ed6a2646af4b35baa63e3cf8f9a4de966a","sha512":"e92eb3901e5bd238d5094fefb8aa42deb51ca9e9c89f22fa41f7c16e06eb6100d52f297629f3a9ce46a67f0c2db89c9f9fac485411ec1df3852f84279a1cbc18","ssdeep":"1536:v6uNQ3fdPwwanleMf72yMzkZUPhw71ZACkFDS3vyf58rBeV05Ta:4kZ8w71ZACkFDS3vyf58rBeV05Ta","tlshash":"e97338ae4891128991274f6287cd4ea84a3dc6b315621cde33552c4b8f87fee33de617","first_seen":"2023-11-12T16:46:43Z","last_seen":"2026-09-11T09:55:41.55448Z","times_seen":281,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getAllSetting","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.994Z","timestamp":1789120472994,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iTzWOLde2z7ZjGm3bFcmhu3Ih76oOr6W5xMIhAgiQGPQEMac41e4xlb5XROUB8uHURbo%2BfXEpPRM%2FRxBASTDZi1i6M0ViqW15rQ6XS2wdJRZpTvyt4cFgsZ%2BnEocMQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caac3d660daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30340,"size_decoded":6755,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (29816), with no line terminators","md5":"40a44620465ddc50e51fb9e0b9c8c9de","sha1":"883886686846642319f50d84b444934109560db8","sha256":"529fa672d28ef8372ba4e46aa00ff2f7d7b25d481a9fb63c1178434e546ed428","sha512":"78e8c4361fb1a2b9c1e8760fbfb257aeb9da95c393337e6f7ab841f9fa081edb009fa7936c833452a378416da5bd3c0dc9f2ae1af8e9e5d4600db11f81b991a7","ssdeep":"384:Re9gViwJzLMnYE2hBlXcAMU9rgk3jMbSrO:Re9gViAUYEIQbz","tlshash":"fcd22f5776c9c87956f20cc9c47b6d4ef9cc386faa80888df896ad4cd059df7884b04a","first_seen":"2026-09-11T09:48:23.943476Z","last_seen":"2026-09-11T09:55:41.519707Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1750,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1324,"receive":426,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getMt5Amount?coin=zinc","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.520Z","timestamp":1789120474520,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=zinc HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0ae0nLUF9F6e0tp%2FbpaLhPQlCnd0b1XIPXZnOgEwXrSx3RTFGVMAGtxQn9nhy8MAZsZ2dgcq3vqseyM0%2FvG%2FavLFoB1i8I4N117lCzlHBIY%2Bxd75%2FuwpwX9OretD6A%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab5c93c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":902,"mime_type":"application/json","magic":"JSON text data","md5":"deea93845221eef3e74f80bc03e2eb30","sha1":"db075b8f0521cc5374ff58242a637cc265bad493","sha256":"3fb6b19a622de5d6d16466d6155d7793d0708c61093cc733365b9f135dd7ca24","sha512":"3de575f38c2c544dcdbe76ccb1c0153a21b189c8a8772da40107ac60e1fd5b857cf876d6731177f0ce3767c4bbb2b8b10d24ad519bec3fbc51591235c6be12cb","ssdeep":"","tlshash":"c79002552c188342a88310a5d5061304002831602625978ccc5d612580881626050858","first_seen":"2026-09-11T09:55:16.889237Z","last_seen":"2026-09-11T09:55:16.889237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/resource/fonts/UrdTypeb.ttf","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.938Z","timestamp":1789120474938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /resource/fonts/UrdTypeb.ttf HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://safepae.xyz/assets/index-65cf50bc.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/octet-stream\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\npriority: u=3,i=?0\r\netag: \"6a881b16-2aeb4\"\r\naccept-ranges: bytes\r\nage: 4580\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UlyO8yOOA%2FWWopeqMJlQTI1tJa%2B5oumjVT2hEne2MZRk7jdrFRW8oDBvhljio5s4w%2FvLDJr%2FYGmULiKpdiBLXRp841vB595ar10nl4HkhvWsKVmMzY7Q%2BcE8J3f%2Fdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab859b40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 175796\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175796,"size_decoded":176519,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 16 tables, 1st \"DSIG\", 74 names, Macintosh, � 2013 Microsoft Corporation. All Rights Reserved.Urdu Typesetting BoldVersion 6.00UrduTypesetti","md5":"1f8883a41e786677a14066f72deaa43e","sha1":"ef035042a1dfd3d33ceedbd7e8dd7af526050e49","sha256":"f4c9e3ccea34ae0e80f64f596e2cb255e5285ce1372791a4fd1e1ec33d66c5b1","sha512":"18d860d142434848549e2558ffb7df4c1215b4295dc1567eaa802dd648ba5fa1a0c59db2535546ed414501802601963656fb46a4b93fb7773ed60bea905c7df4","ssdeep":"3072:89ILhRSZznkc5Csm6+R1tWDPBghCkpCNM/5VJSi7OrfKNgMUKAPTNTT7wI8aYrPq:VNYZznkcgsm6+R1tWDPBgh7pCNM/5VJY","tlshash":"da048e25d30eaf2ee932feb08c25531138bae831e665d30b69376419f471ed48c9978d","first_seen":"2025-07-27T10:32:18.228842Z","last_seen":"2026-09-11T09:55:41.563994Z","times_seen":27,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/platform/yongzhe/logo.png?2.0.1787304794119","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:35.189Z","timestamp":1789120475189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /platform/yongzhe/logo.png?2.0.1787304794119 HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vYiIQf6iZRYOtf2MIPHd94x3ilrZ8d%2FkE5gh5lPN9QplXlQj0uyHTLU4jxq3%2Fpaem0SUlFnAN8PVUS6nsWgPFCEwe83zbt25iHdDeq6vdHXzAo%2BazhvJdzICiwDkaQ%3D%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6a881b16-be37\"\r\nexpires: Sat, 10 Oct 2026 10:30:02 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 84273\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab9ea020daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48695,"size_decoded":49168,"mime_type":"image/png","magic":"PNG image data, 157 x 191, 8-bit/color RGBA, non-interlaced","md5":"817c35aeb6dc54aa67038959ae22bd0d","sha1":"28f7beab938e080e75c9d42aa005099a7f5512a5","sha256":"5f153f71d00bf571b7955e25e9de6c9fff2cef5d51e57a622df136c644e827bb","sha512":"655014d0f22686237f29793ffa8930a11ed36e2f91bbbe7a4701d0c29c4cb3262e9c7d806712861dcdaff30f2d5dc725bcbd09b9ef6074b0f7e1cca7fc1a47ee","ssdeep":"768:wVYvt1U+btsGQY7Ns/V2moMGxjBLkU7stRR0pZlGrEb8JiQgsq8CZh:wVAo+JHQ0NkVpOxkUqaZlG4b0gs6b","tlshash":"db23f1a968eee832cf40eda1559208107f8d10f3d6c7018ecb55a6e7ad6c105563faee","first_seen":"2026-01-12T06:59:54.775123Z","last_seen":"2026-09-11T09:55:41.52138Z","times_seen":12,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/assets/views-9ebe03f4.js","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.691Z","timestamp":1789120472691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /assets/views-9ebe03f4.js HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Aug 2026 09:33:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UdAf7r0%2Bjm6RqC0hM2nwgTEks8tFf8r3lD44p%2BypNRlHoo8YH57ELwux44mUzAESxheSTlVbBTLrkJLswGlqa6Xq5PR2a9jFjZETRAJDax2478YlyA%2BL2wpxG8MErg%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding\r\netag: \"6a881b5a-aa800\"\r\nexpires: Fri, 11 Sep 2026 14:08:11 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 27981\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395caaa5c7b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":698368,"size_decoded":175810,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65482), with no line terminators","md5":"0d34481cd41bc0f6546fd7c9a309d21a","sha1":"2502ac888f029cc01707a04b0618bc069bb0b04f","sha256":"2a5b3cd7de6c311eb63956f51a3c655b2a07432f2b0680ed1d9f21a363fb67a8","sha512":"efbba1a7ba90c2c61cfd05201308a2edf89191a16fdd0ea3dc001125fef8ffd92c8e57d3e13bc96f9974687a6e33415ba1ee7dfea27a998dfc6b6065e4604fb8","ssdeep":"12288:AA2vu/UO3j3XBdtLdzk23NMMCx0M8VXlPjDycrM:Jx/Ui3XntLdz93NMMg/8tYcrM","tlshash":"72e40884f94478b6eab794d0954912c032486fcfd00988a0b5fd5d6a2fffcb5736ab24","first_seen":"2026-09-11T09:48:23.978167Z","last_seen":"2026-09-11T09:55:41.547987Z","times_seen":7,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/platform/yongzhe/config.js?1789120472987","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:32.992Z","timestamp":1789120472992,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"GET /platform/yongzhe/config.js?1789120472987 HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:33 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tibVL2JjsjAZg2lZWiADJU5O0sprc%2FthsxwL%2FqupLmq9IVrycep%2Ftmgn6mWW2H3ZxbJPYlm41EYhRWsXn2zaq%2Br2glJaFlaipW8s9f6Mkb9OTQKgQfeBqlR61xf4A%3D%3D\"}]}\r\nlast-modified: Fri, 21 Aug 2026 09:32:06 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Fri, 11 Sep 2026 21:54:33 GMT\r\ncache-control: max-age=43200\r\netag: W/\"6a881b16-186\"\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a395caac3d650daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390,"size_decoded":1005,"mime_type":"application/javascript","magic":"ASCII text","md5":"4757f08507b67b8b1ca59675a34d216a","sha1":"45892d0b26e6e81a819f1e3cd275a7b8a64a976b","sha256":"aac662f5951e95c1a5e270699c08d900c25fcddc2f35b0598a237a950e8ab5a4","sha512":"0d0bc6963bcfab8dfb1577b26f19943f7c07ffdc11e470bcd219f3aa300f21d2e794a2eac0b56eeee9edb0f817c39b09567f4bbb5e80227f4da837bc45446d54","ssdeep":"","tlshash":"cfe061f9a9e650d61e9189aa2fed5535d0051b73881c3c2d2c453112bfdf9153634e21","first_seen":"2026-01-12T06:59:54.726149Z","last_seen":"2026-09-11T09:55:41.543282Z","times_seen":12,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"safepae.xyz/api/common/getMt5Amount?coin=xag","fqdn":"safepae.xyz","domain":"safepae.xyz","tld":"xyz"},"ip":{"addr":"104.21.79.215","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://safepae.xyz/","date":"2026-09-11T09:54:34.517Z","timestamp":1789120474517,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"safepae.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Sep 2026 09:31:12 GMT","end":"Wed, 09 Dec 2026 09:31:11 GMT"},"fingerprint":{"sha1":"A1:7F:F9:32:67:A0:24:F9:3B:1E:F3:53:60:6E:73:B2:06:D0:79:30","sha256":"E6:80:94:96:13:B8:D6:03:92:0B:0C:85:7F:0B:51:38:86:67:0B:29:00:B5:79:E7:71:B6:B9:CF:3C:F3:DB:10"}}},"request":{"raw":"POST /api/common/getMt5Amount?coin=xag HTTP/1.1\r\nHost: safepae.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nlang: en-US\r\nOrigin: https://safepae.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 11 Sep 2026 09:54:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mje5WAvrukPBglKElVlodbcox4HVuG6o0Hv7TwI90Nho3aYmwD28uRGUleqhN5SlgC7ZMvWUtETyzrwdj%2FpkQIanYOb9RktlpM8bRqppsZIaPFpXa5c%2FjIB78xB3Gw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://safepae.xyz\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395cab5b93a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":896,"mime_type":"application/json","magic":"JSON text data","md5":"f7973eab8a697f671a21242d692408a3","sha1":"1687f37573ebf01973c8d932ffea6a8fe8ce095d","sha256":"24e2ba744bd9966e47188db3b20da7a6f1ffdc96252c4a920a4d9149a1fd0b32","sha512":"77aec5e60f78f1ef1b3011f44ecbfb215675c956d9decf09f6e4d6775e8072d1e4cf58c72d27e7b912a759b8a4fcb7e501a65f9e03846f30ef958e4d0d1e1955","ssdeep":"","tlshash":"899002552c189252a88341a595061214106431602a259348dc5d5125d08c1622040858","first_seen":"2026-09-11T09:55:16.892799Z","last_seen":"2026-09-11T09:55:16.892799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"safepae.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}