{"report_id":"4f35f582-36bd-41b1-b580-f112fbcc9e8f","version":6,"status":"done","tags":[],"date":"2026-04-03T12:09:11Z","url":{"schema":"http","addr":"t2.asalenx.icu/trs","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":0,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"title":"Blockchain Payout Notification","dom":{"size":31476,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13955)","md5":"c153935af401303bdbf59b7d460ed860","sha1":"e0012ffbb65318741dcc10954f4878ff896d317e","sha256":"32a28adc1e5ee57029abb324c5f076d5e6b5565dbb2e3522dadd6cfec7c5f72e","sha512":"91de0f066caaf5c7595f6e34d768ee0a2765c016346a879138423fca3a6821866625aaef0e0f77f89c69925c53c165cfaf63a8840f01654e3980a9004d9bbc87","ssdeep":"384:H47lhL7Xl9Cr/e/zzR9mzhjEfrHGCuURt/biDiyihi8cViuiPiliKi7iV:Y7lhnnR9ahw7MCt2mbhifE/KUzeV","tlshash":"0fe2d51966b1013b6c5340faf7eb7509ba25a087ef1bd6a4bd8d81406fc2ef648a7344","dom_hash":"domhash804e285b305fd14ccfbe554d907a79d2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"t2.asalenx.icu/trs","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":0,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-08T12:09:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-03T12:08:50Z","timestamp":1775218130,"ip_dst":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"ip_src":{"addr":"Client IP","port":59456,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-04-03T12:08:50.172682+0000\",\"flow_id\":1779755759301414,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":59456,\"dest_ip\":\"217.60.36.24\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"t2.asalenx.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":3,\"bytes_toserver\":1372,\"bytes_toclient\":1654,\"start\":\"2026-04-03T12:08:49.848678+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"t2.asalenx.icu","ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-03-23","domain_rank":0,"first_seen":"2026-04-03T12:09:12.010233Z","last_seen":"2026-04-03T12:09:12.010233Z","alert_count":13,"request_count":13,"received_data":223913,"sent_data":5925,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-03-30T05:39:45.566461Z","alert_count":0,"request_count":2,"received_data":815985,"sent_data":820,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-29T22:35:00.993215Z","alert_count":0,"request_count":2,"received_data":191942,"sent_data":1024,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/js/DVXkO3ZUFUSAW.js","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e54c3950a96e0e80947dfad304ef29e4","sha1":"3b987b1c0b87892a8e086f1cbe2b415c78b4aeb9","sha256":"e10e29724f8df3d01bebd5c5d3df5ba2f19ab34514a7d57e0a117a595b2a5999","sha512":"954fe882b61896035e20fb64dc5abdb311aa7b993b1b492bf1cd7e66e666f99507500034e0e3b531f58110ea7a29c463df9fef304b8eee3ec4eedbc292e3f42c","ssdeep":"","tlshash":"c7419eb581a30992092660dfcbcf130525583c27fd1ee1c3756c47157feac7893aa7aa","size":2073,"data":"","first_seen":"2025-07-10T14:03:23.629846Z","last_seen":"2026-07-14T22:34:24.796549Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"6d02f646d1b2b3d3bf8f6aa782cf25b0","sha1":"2dc44d787481911ffd90849f7a791fe94f9cfbe0","sha256":"223cd48b2d0e8516049cb2d08620546f0d1c5d430d23bc364fcb85704700be84","sha512":"a21cb5a62580384882089b0919744b5743d0c223c860caeb474bfebc9151ddccba332ec9d688d73f86c5a4d273ceb3c914580cd783cc87bbb4827dccacd23dec","ssdeep":"","tlshash":"1d7000008e328008380a2830e32820000e802c022202e800280ca0800c80082003a0cb","size":24,"data":"","first_seen":"2023-03-14T05:34:30Z","last_seen":"2026-06-06T08:56:38.544859Z","times_seen":489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3654719e9227a9f7ba87d05afc36825","sha1":"2352ba0b6d841a0576ea20101faf144120a7c965","sha256":"a8bfe3e2aaf855b2db575286d1aa766f6a4fad707763b7f63fd9190bb29ba31f","sha512":"d69b0b59518068e4830561f8c470aefe5072c50472bdcee4ab4341249b9d872ad0a8d03657f72a1c34417e12b7de57eabad36c563f70a10b4c6ee541ba292702","ssdeep":"","tlshash":"d1e02354957e0f3003aef356eb9b674170721027350489053c9ccfb16f56e7670745d9","size":426,"data":"","first_seen":"2025-06-20T10:12:24.130942Z","last_seen":"2026-04-28T05:25:55.527121Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/js/Z0PudYsk5kehKF0yb.js","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3de5fdb1931d54218a8549b3f726a068","sha1":"4baafa7a3d0e8b81037646c87e363f505646bd4a","sha256":"e8d1a3201e2fb1b44262fea170866e6ec17ce5d640440abbd3685d49f4f83397","sha512":"229d7e0fd1329ed9b1a28fbb892dd1af2e1506a2a3b114a97429256e9f96d880a8c9ee530df5f6131a4984d019c0e1052e0757aa3fcaf0bae7f0b2c3eb06366d","ssdeep":"","tlshash":"96416b8c60fb9008221a2cb87c4f441569718027299cee947b8cc3d42f7d96fb6b699f","size":2383,"data":"","first_seen":"2025-07-10T14:03:23.634261Z","last_seen":"2026-07-14T22:34:24.794601Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ec6c92ffea3cb30602e9e16ea9019a1","sha1":"6ec5b91f3a6db43725db5c12c7bb12c8c852bf6d","sha256":"96008b5f2a240bc12e87f32572f6190386bb7acabdf7d842b4cc2906e7d8bc04","sha512":"b1a90125e5d4041569ae267a380dd63d90008db0fa4bd464b0d9bffd3ec84e9c617d748433a8915ce420656ad3ebbe958f21406c782ac938458465c94787b891","ssdeep":"192:fi8ZaTn+doPdRiuiseiliKi7ika5wZEwEadn:fi8cViuiPiliKi7i6","tlshash":"5602211a59b3062c8967517a77ef30413d21501b3203e9a0be1cdee12fa59ec96bdbd8","size":8496,"data":"","first_seen":"2025-06-20T10:12:24.132084Z","last_seen":"2026-04-07T09:51:11.580405Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-24T06:58:37.784728Z","times_seen":46062,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/img/HzYmPcsKRwxCQZ.jpg","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"101bas.xeal.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 05:56:12 GMT","end":"Fri, 29 May 2026 05:56:11 GMT"},"fingerprint":{"sha1":"14:80:32:3C:A1:2B:9A:56:93:A0:6A:E8:2C:A8:43:3E:0D:D6:64:E2","sha256":"C5:A5:DC:74:0B:A8:3C:C7:33:E5:56:D5:1B:90:FB:CD:98:79:56:4A:26:76:34:8F:55:E8:15:16:75:C1:DA:F5"}}},"request":{"raw":"GET /trs/img/HzYmPcsKRwxCQZ.jpg HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t2.asalenx.icu/trs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 03 Apr 2026 12:08:52 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3254\r\nLast-Modified: Sat, 28 Feb 2026 06:54:40 GMT\r\nConnection: keep-alive\r\nETag: \"69a29130-cb6\"\r\nExpires: Sat, 04 Apr 2026 12:08:52 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3254,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 245x45, components 3","md5":"5e1f1de3eaa072f2f2f165d2677161b8","sha1":"1b700d795a4f50386b73b5be73d6243f799dc69f","sha256":"35161097de7a97e6516ee1b8aa1fa9d6daa16195abef518242144c2c99e9a94f","sha512":"b3368f3c460632379cc43a9dc10bfde82b5924047218f1c8c304dc823b3be8324ed126ad821083603fafbf6c56abc393cc6dd95f0d04655ddbb3d0cdc206230e","ssdeep":"","tlshash":"fc612b5d2e419f27fad2de76b2ff40666356a4035d630bcd28b269845d21d2ebc9033c","first_seen":"2025-02-11T17:08:01.745332Z","last_seen":"2026-07-14T22:34:24.797825Z","times_seen":75,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":167,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/img/IK7Yh6LdzFgTal.png","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"101bas.xeal.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 05:56:12 GMT","end":"Fri, 29 May 2026 05:56:11 GMT"},"fingerprint":{"sha1":"14:80:32:3C:A1:2B:9A:56:93:A0:6A:E8:2C:A8:43:3E:0D:D6:64:E2","sha256":"C5:A5:DC:74:0B:A8:3C:C7:33:E5:56:D5:1B:90:FB:CD:98:79:56:4A:26:76:34:8F:55:E8:15:16:75:C1:DA:F5"}}},"request":{"raw":"GET /trs/img/IK7Yh6LdzFgTal.png HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t2.asalenx.icu/trs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 03 Apr 2026 12:08:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 3280\r\nLast-Modified: Sat, 28 Feb 2026 06:54:41 GMT\r\nConnection: keep-alive\r\nETag: \"69a29131-cd0\"\r\nExpires: Sat, 04 Apr 2026 12:08:52 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"5fb938d08ae4478c3d3d0f0230d0723a","sha1":"94b179486196172be6f069efd55bec371d11015f","sha256":"bb2cfc74a00c219baceef436f3c08f80ad3d414b38a9cb9d6c86f4bea511b385","sha512":"1a3937f88129974f9f5ba9cbc685fc41afd72f2ffeaab2810f59221de1977802c147c5d45b88b28820fcd933555dc17118083d6897a2bb23ca97e0150ed2a338","ssdeep":"","tlshash":"58612b01fc238e85d5639e423cd652659364c940dfe4f098628be45e2c748fa4a7d6cb","first_seen":"2024-10-14T16:49:20.308062Z","last_seen":"2026-07-14T22:34:24.788943Z","times_seen":98,"resource_available":false,"data":null}},"time_used":386,"timings":{"blocked":164,"dns":3,"connect":35,"send":0,"wait":46,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/img/icons8-blockchain-48.png","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"101bas.xeal.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 05:56:12 GMT","end":"Fri, 29 May 2026 05:56:11 GMT"},"fingerprint":{"sha1":"14:80:32:3C:A1:2B:9A:56:93:A0:6A:E8:2C:A8:43:3E:0D:D6:64:E2","sha256":"C5:A5:DC:74:0B:A8:3C:C7:33:E5:56:D5:1B:90:FB:CD:98:79:56:4A:26:76:34:8F:55:E8:15:16:75:C1:DA:F5"}}},"request":{"raw":"GET /trs/img/icons8-blockchain-48.png HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t2.asalenx.icu/trs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 03 Apr 2026 12:08:52 GMT\r\nContent-Type: image/png\r\nContent-Length: 1070\r\nLast-Modified: Sat, 28 Feb 2026 06:54:41 GMT\r\nConnection: keep-alive\r\nETag: \"69a29131-42e\"\r\nExpires: Sat, 04 Apr 2026 12:08:52 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ece2c0d147f30732e2d96fdafd995de8","sha1":"5c619e2f0297c613ed4f7e75403e4d2eeb1c09e8","sha256":"decf31924ae91aeaa79e8481aee94d5faca44f60c60c72719e7be67b85a506eb","sha512":"6e0bd8f197242d48daf65eeb95b84a3b14f8c98bbc0f529c3b77e2709dfa06a725f26a32d79522f5d4f0107fae0dba97b6416514a9b7d300baa9c8c423be46c4","ssdeep":"","tlshash":"7b11b9ed0a431b9e44ebc73a495694d4ab19a5ee15476108623d1f3c0f81c7673235f5","first_seen":"2025-06-20T10:12:24.119316Z","last_seen":"2026-07-14T22:34:24.799729Z","times_seen":40,"resource_available":false,"data":null}},"time_used":380,"timings":{"blocked":163,"dns":0,"connect":35,"send":0,"wait":44,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://t2.asalenx.icu/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 12:08:52 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::rhz55-1772419043268-7fdcc195e7a4\r\nlast-modified: Mon, 02 Mar 2026 02:37:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2799088\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dOXPLWFUYlLboA2%2BY4AfV9S2vE4tA24C%2BFxsNf5Ve3OLExWeYwjdufZDLWI28ngtU4v8oKeL6kG7kHhfKSPGIle6z48OX19506PTx9us%2FrH4XXD0LJVObT%2FQkiA4z1Ju4DCK5x0%3D\"}]}\r\ncf-ray: 9e67f60d4ffeb50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-24T06:58:37.784728Z","times_seen":46062,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/img/fold-blue.png","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"101bas.xeal.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 05:56:12 GMT","end":"Fri, 29 May 2026 05:56:11 GMT"},"fingerprint":{"sha1":"14:80:32:3C:A1:2B:9A:56:93:A0:6A:E8:2C:A8:43:3E:0D:D6:64:E2","sha256":"C5:A5:DC:74:0B:A8:3C:C7:33:E5:56:D5:1B:90:FB:CD:98:79:56:4A:26:76:34:8F:55:E8:15:16:75:C1:DA:F5"}}},"request":{"raw":"GET /img/fold-blue.png HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t2.asalenx.icu/trs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Fri, 03 Apr 2026 12:08:52 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":276,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"9d580f0cdef81a9e57c576a6ca7705db","sha1":"75063d6af9dc9cdcdcc2369c556e3a6ce8b50a44","sha256":"52f199cb67864fa4d65a4358c79ec1979beae6cd7da5869d29365802ae95684b","sha512":"2e408fe254883d7a08974a8da113a6edb2a3e2a1a7b70cb6c762e3bbd570bf7258ec220768d3ed9b6c7a686bef679f89af894e279f528fc2646011940d200978","ssdeep":"","tlshash":"c1d02b9f509362874813146039c515d2275c13f6a43a41a82d87e487529857ecd9aa99","first_seen":"2026-04-03T12:09:15.291722Z","last_seen":"2026-04-04T09:25:02.297431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-03T12:08:49.605Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /trs HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T06:50:53.849796Z","times_seen":17495407,"resource_available":true,"data":null}},"time_used":570,"timings":{"blocked":0,"dns":244,"connect":31,"send":0,"wait":0,"receive":0,"ssl":293},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-03T12:08:51.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"101bas.xeal.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 05:56:12 GMT","end":"Fri, 29 May 2026 05:56:11 GMT"},"fingerprint":{"sha1":"14:80:32:3C:A1:2B:9A:56:93:A0:6A:E8:2C:A8:43:3E:0D:D6:64:E2","sha256":"C5:A5:DC:74:0B:A8:3C:C7:33:E5:56:D5:1B:90:FB:CD:98:79:56:4A:26:76:34:8F:55:E8:15:16:75:C1:DA:F5"}}},"request":{"raw":"GET /trs HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Fri, 03 Apr 2026 12:08:51 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 314\r\nConnection: keep-alive\r\nLocation: http://t2.asalenx.icu/trs/\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17679,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T06:50:53.849796Z","times_seen":17495407,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":91,"dns":1,"connect":32,"send":0,"wait":46,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-03T12:08:51.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"101bas.xeal.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 05:56:12 GMT","end":"Fri, 29 May 2026 05:56:11 GMT"},"fingerprint":{"sha1":"14:80:32:3C:A1:2B:9A:56:93:A0:6A:E8:2C:A8:43:3E:0D:D6:64:E2","sha256":"C5:A5:DC:74:0B:A8:3C:C7:33:E5:56:D5:1B:90:FB:CD:98:79:56:4A:26:76:34:8F:55:E8:15:16:75:C1:DA:F5"}}},"request":{"raw":"GET /trs/ HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 03 Apr 2026 12:08:51 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 4811\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17679,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"7b879f76ed9af9742cd591096d3897ab","sha1":"db5cee93bc0d1f6122864a228c88fbf3ae1ad769","sha256":"2c60f4a5e44f0c0d0ef5c0023201f38d3334f7b3f73bbdc4178060f4a41cf20f","sha512":"e4903cc1c868554e485bcb4bb98253655856337f3c8edcab8393266efb3cbe169a9da040f5b4e1e319d5e3594dac09af30f580304f4bf0e10fb9f53f12789627","ssdeep":"384:P27egfr0GCuURteeiPicici8cViuiPiliKi7iaM:+7bAMCtaKRcifE/KUzex","tlshash":"ee82b6195af3063e80a340b6b7ef3545bd60801ba307d554be6cc6d11fd2ce98aae7d8","first_seen":"2025-07-10T14:03:23.632532Z","last_seen":"2026-07-14T22:34:24.785895Z","times_seen":35,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free/css/all.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fortawesome/fontawesome-free/css/all.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t2.asalenx.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 7.2.0\r\nx-jsd-version-type: version\r\netag: W/\"127d8-LXBewBq9FdTgiSRMGdk1QhWWfAA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 12:08:52 GMT\r\nage: 26440\r\nx-served-by: cache-fra-eddf8230037-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21297\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75736,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50617)","md5":"07a04d43d67adc55c158f590a82769b8","sha1":"2d705ec01abd15d4e089244c19d9354215967c00","sha256":"315a2999dc82dad613889f30964b5fd2e874bf83604febcd7725457a98bb4347","sha512":"9cc26342e75be9130caf4f2863a6127cd9445a5d65f175aea0ec0dbed597aeb815b3c30247c019041d6d1003bea20888f77817b46d573e683e6c03f90e872148","ssdeep":"1536:dBM1MvMaMfM0teX0pEbpNG2eLZy8lkv/erkh7:yteXoEfGc8mWrk9","tlshash":"a2730d02ad84019bb4568d7f3885bf34a6f2eb28aad14595e4344d847ef28fd314fb72","first_seen":"2026-02-11T07:20:24.324566Z","last_seen":"2026-07-23T17:59:20.261223Z","times_seen":1003,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":135,"dns":1,"connect":26,"send":0,"wait":29,"receive":5,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/js/DVXkO3ZUFUSAW.js","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"101bas.xeal.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 05:56:12 GMT","end":"Fri, 29 May 2026 05:56:11 GMT"},"fingerprint":{"sha1":"14:80:32:3C:A1:2B:9A:56:93:A0:6A:E8:2C:A8:43:3E:0D:D6:64:E2","sha256":"C5:A5:DC:74:0B:A8:3C:C7:33:E5:56:D5:1B:90:FB:CD:98:79:56:4A:26:76:34:8F:55:E8:15:16:75:C1:DA:F5"}}},"request":{"raw":"GET /trs/js/DVXkO3ZUFUSAW.js HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t2.asalenx.icu/trs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 03 Apr 2026 12:08:52 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Sat, 28 Feb 2026 06:54:41 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a29131-81c\"\r\nExpires: Sat, 04 Apr 2026 12:08:52 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2076,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e54c3950a96e0e80947dfad304ef29e4","sha1":"3b987b1c0b87892a8e086f1cbe2b415c78b4aeb9","sha256":"e10e29724f8df3d01bebd5c5d3df5ba2f19ab34514a7d57e0a117a595b2a5999","sha512":"954fe882b61896035e20fb64dc5abdb311aa7b993b1b492bf1cd7e66e666f99507500034e0e3b531f58110ea7a29c463df9fef304b8eee3ec4eedbc292e3f42c","ssdeep":"","tlshash":"c7419eb581a30992092660dfcbcf130525583c27fd1ee1c3756c47157feac7893aa7aa","first_seen":"2025-07-10T14:03:23.629846Z","last_seen":"2026-07-14T22:34:24.796549Z","times_seen":39,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":76,"dns":1,"connect":32,"send":0,"wait":44,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"t2.asalenx.icu/trs","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":80,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-03T12:08:50.190Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /trs HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nserver: nginx\r\ndate: Fri, 03 Apr 2026 12:08:50 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://t2.asalenx.icu:443/trs\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T06:50:53.849796Z","times_seen":17495407,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":143,"dns":113,"connect":32,"send":0,"wait":56,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-03T12:08:50.395Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /trs HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T06:50:53.849796Z","times_seen":17495407,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":92,"dns":0,"connect":32,"send":0,"wait":0,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/img/672719e79c8a~mv2.gif","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"101bas.xeal.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 05:56:12 GMT","end":"Fri, 29 May 2026 05:56:11 GMT"},"fingerprint":{"sha1":"14:80:32:3C:A1:2B:9A:56:93:A0:6A:E8:2C:A8:43:3E:0D:D6:64:E2","sha256":"C5:A5:DC:74:0B:A8:3C:C7:33:E5:56:D5:1B:90:FB:CD:98:79:56:4A:26:76:34:8F:55:E8:15:16:75:C1:DA:F5"}}},"request":{"raw":"GET /trs/img/672719e79c8a~mv2.gif HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t2.asalenx.icu/trs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 03 Apr 2026 12:08:52 GMT\r\nContent-Type: image/gif\r\nContent-Length: 163614\r\nLast-Modified: Sat, 28 Feb 2026 06:54:40 GMT\r\nConnection: keep-alive\r\nETag: \"69a29130-27f1e\"\r\nExpires: Sat, 04 Apr 2026 12:08:52 GMT\r\nCache-Control: max-age=86400\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163614,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 512 x 512","md5":"6ccff0e8fbc8d4b2a1a1a4ca6f683b83","sha1":"d03c1495d1b485359dd2a021eb3d0de249715577","sha256":"5ea52f7fee5da358e95941d43c1de002c3a2ed118c2e5ead9a9141ed86e31cfd","sha512":"2265472f0c1262f16cad79a8f9116f7dea9e13007a07275db288f27f6f59e9a35df65afdf8475ebf289036cc5301c7bb299e5823f74daf366b9a00811676b493","ssdeep":"3072:zXXjUKaZ1Zu3E9HnTRa6MLIW35ur+HhpWno1F6O3TTu/fCnCZHJII9tqWHh:z491Z+tzIWxbIsF6O3TTu/fCnCZHJIIb","tlshash":"3df3be3f9065c13ee50e2ef0710740c41c6ee2896b69de635829bfa2728436dd9acf57","first_seen":"2025-02-03T14:47:58.880332Z","last_seen":"2026-07-14T22:34:24.798798Z","times_seen":55,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":166,"dns":0,"connect":0,"send":0,"wait":55,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/js/Z0PudYsk5kehKF0yb.js","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"101bas.xeal.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 05:56:12 GMT","end":"Fri, 29 May 2026 05:56:11 GMT"},"fingerprint":{"sha1":"14:80:32:3C:A1:2B:9A:56:93:A0:6A:E8:2C:A8:43:3E:0D:D6:64:E2","sha256":"C5:A5:DC:74:0B:A8:3C:C7:33:E5:56:D5:1B:90:FB:CD:98:79:56:4A:26:76:34:8F:55:E8:15:16:75:C1:DA:F5"}}},"request":{"raw":"GET /trs/js/Z0PudYsk5kehKF0yb.js HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t2.asalenx.icu/trs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 03 Apr 2026 12:08:52 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nLast-Modified: Sat, 28 Feb 2026 06:54:41 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"69a29131-952\"\r\nExpires: Sat, 04 Apr 2026 12:08:52 GMT\r\nCache-Control: max-age=86400\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2386,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"3de5fdb1931d54218a8549b3f726a068","sha1":"4baafa7a3d0e8b81037646c87e363f505646bd4a","sha256":"e8d1a3201e2fb1b44262fea170866e6ec17ce5d640440abbd3685d49f4f83397","sha512":"229d7e0fd1329ed9b1a28fbb892dd1af2e1506a2a3b114a97429256e9f96d880a8c9ee530df5f6131a4984d019c0e1052e0757aa3fcaf0bae7f0b2c3eb06366d","ssdeep":"","tlshash":"96416b8c60fb9008221a2cb87c4f441569718027299cee947b8cc3d42f7d96fb6b699f","first_seen":"2025-07-10T14:03:23.634261Z","last_seen":"2026-07-14T22:34:24.794601Z","times_seen":40,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t2.asalenx.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 03 Apr 2026 12:08:52 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::gl7gl-1775217957045-55e88f4a5410\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 174\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E7DHDx92Rqm2xtNN6bgv2WSUYfGn5NygSE4T0IaD9PKlwTGXYsbf7ujHJtqBLIzZRVdL3rNd71r4AhAmANS5IM6sSiO4NH1BN7iAE%2FgW5bYeCLRiminLgHsaB08R3ncRxHzMRe8%3D\"}]}\r\ncf-ray: 9e67f60d3fe7b50b-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T06:50:53.849796Z","times_seen":17495407,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":13,"dns":4,"connect":1,"send":0,"wait":5,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fortawesome/fontawesome-free/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://t2.asalenx.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 114740\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 7.2.0\r\nx-jsd-version-type: version\r\netag: W/\"1c034-efKkiP2cHh8BlDoZb1q/U4IeBNc\"\r\naccept-ranges: bytes\r\ndate: Fri, 03 Apr 2026 12:08:52 GMT\r\nage: 12078\r\nx-served-by: cache-fra-etou8220073-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114740,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 114740, version 898.256","md5":"0a74987bb59fa4a5a8e2eea68608d6f9","sha1":"79f2a488fd9c1e1f01943a196f5abf53821e04d7","sha256":"ff58a6b0a01dbce082458f6e5a58719df4e80e0c2b50f744bb5871e21eca6878","sha512":"ec8014a9438540096e4bdece6ced4d48e848516b23a2c518c34c691cb607761c92441e7ae73f5fa6a6085030a0e84d5ad809cbb1cf709b4ec94982bcdc2e1f38","ssdeep":"1536:vVz7d5z5vXXHkt13bkksuapy48cgRDEixUsH+bu9w7D/FzbmQOr+rqZa4ZHKCL8u:Nv1vXHggQDTGsxqDdmQXrEa4ZHKCLWsX","tlshash":"b6b31226718ea701c81e47c7f2ed96cfd3a6420b1897198f345e3d0237aa81a933d9d7","first_seen":"2026-02-11T07:20:24.326567Z","last_seen":"2026-07-24T03:15:14.626605Z","times_seen":949,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":35,"dns":1,"connect":0,"send":0,"wait":28,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"t2.asalenx.icu/trs/ND174Uy3j.ico","fqdn":"t2.asalenx.icu","domain":"asalenx.icu","tld":"icu"},"ip":{"addr":"217.60.36.24","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://t2.asalenx.icu/trs/","date":"2026-04-03T12:08:52.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"101bas.xeal.click","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 05:56:12 GMT","end":"Fri, 29 May 2026 05:56:11 GMT"},"fingerprint":{"sha1":"14:80:32:3C:A1:2B:9A:56:93:A0:6A:E8:2C:A8:43:3E:0D:D6:64:E2","sha256":"C5:A5:DC:74:0B:A8:3C:C7:33:E5:56:D5:1B:90:FB:CD:98:79:56:4A:26:76:34:8F:55:E8:15:16:75:C1:DA:F5"}}},"request":{"raw":"GET /trs/ND174Uy3j.ico HTTP/1.1\r\nHost: t2.asalenx.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://t2.asalenx.icu/trs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 03 Apr 2026 12:08:52 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 9662\r\nConnection: keep-alive\r\nLast-Modified: Sat, 28 Feb 2026 06:54:40 GMT\r\nETag: \"25be-64bdcd3f1b673\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9662,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"62f73885181b37b8b3a5321a1acb6994","sha1":"8c0aff34504b2f0b94055c56437dd62490cfaa08","sha256":"637ce20f86f025fcd5fc46d66d116ee20f639f4adb1f70fe0b31944cc997576f","sha512":"9836668fe2da669abf6a2f1314e53b55d44647612cfc191a42f65987c66c2546fd43c95d56811eac9e70702761dd89be8e5136ccec91888f09c6374f6f165756","ssdeep":"96:9F6MvBmHU6sn9maVlgqQ7jYQARZMxxJIW/0nKNcn:L6Mv8HU6sn9maA7jYQATMxTcn","tlshash":"4412f91e3521fd8de7454830db438ab12d149e39dd264d4af3aebacfa7cee388591424","first_seen":"2024-06-04T09:42:01Z","last_seen":"2026-07-14T22:34:24.793686Z","times_seen":87,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"t2.asalenx.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}