Oh okay sure
Its an GT-I9305
CM 12.1 Unofficial (5.1.1)
Baseband is I9305AOBLL1
Kernel is 3.0.64-CM
I want Magisk to hide my Root status of course.. if i wouldnt need that i would just stay with what i have. I cant open some apps which check for Safenet and i fail oc
In our family we're using three i9305's and still with full satisfaction. For more than a year now, they are running on RR-N-v5.8.5-final with this Boeffla(mod)-kernel absolutely smoothly and really without any issues, and all with the baseband/modem XXUFOA1 (actually, never heard or seen the baseband you're on. I guess this baseband and your kernel are the inherent ones in your CM version). Root manager for all devices is Magisk v16.7 beta, and on all Xposed is installed. As I mentioned Xposed, with Xposed installed it's simply impossible to pass the SafetyNet check but we don't care at all as we don't use the devices for any banking or payment methods (and we don't play Pokemon Go etc.).
I'm afraid and a bit embarrased - and I apologise that I'm unable to assist you in getting past the SafetyNet check. More than a year ago, just for interest and pleasure I tried to get all greens in the check but completely unsuccessfully (even without Xposed installed). Already the basic integrity failed; maybe due to the kernel or the recognised unlocked bootloader but really now way.
I remember a few discussions and posts in these two threads, and if I correctly remember some members reported they had passed the SafetyNet check. Maybe you consider to serch the threads in that respect:
And as already stated, sorry for not being of any help.