{"report_id":"4f76430e-1d8b-4b5d-b589-bec06dbcc8b5","version":0,"status":"done","tags":[],"date":"2026-09-03T14:21:37Z","url":{"schema":"http","addr":"baseinves.cc/","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":0,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"baseinves.cc/#/","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"title":"BASEINV","dom":{"size":424739,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62480)","md5":"6be6ef7b24f0edc4d11d7bb7f6262b12","sha1":"6a9a8d61bb22e31e2633717f8cb4f3a6741c0124","sha256":"56cb5702a2ac533d402bb28ca9ed912260af7a468b962592555bfa7b060743c2","sha512":"e6ccac8131621d48af7ba90671c727822900bd70b36be955b8ded660dbb8a231717393416d1c910de76d8a66e8fec367ceb7c7e8f4a99bb022a22a2af804a488","ssdeep":"3072:7yx6CAhxZx+4JoItqg7wa6rfQL9AefD4Lnr3zoe1TvTYN+KadGgvXUk0MvXUk0q+:x7wKD4Lnr3zoe9XCcXC1","tlshash":"b0943ca4d32452fc480f47d9ee357968360f10feb5d2ca68a26c8fa067d39e4dd49c86","dom_hash":"domhash11b001f7715e8b3f9bac896eeb4a85ea","first_seen":"2026-09-03T14:21:48.059005Z","last_seen":"2026-09-03T14:21:48.059005Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"baseinves.cc/","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":0,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T14:21:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"admin.baseinves.cc","ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"domain_registered":"2026-08-01","domain_rank":0,"first_seen":"2026-09-03T14:05:48.491761Z","last_seen":"2026-09-03T14:05:48.491761Z","alert_count":0,"request_count":21,"received_data":634543,"sent_data":11317,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"baseinves.cc","ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"domain_registered":"2026-08-01","domain_rank":0,"first_seen":"2026-09-03T14:05:48.507938Z","last_seen":"2026-09-03T14:05:48.507938Z","alert_count":0,"request_count":47,"received_data":3198864,"sent_data":23240,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"baseinves.cc/","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4112e2fc122657640040085d27cf822","sha1":"626959b00ae2afd7486cc74ed78d7291fbf8618e","sha256":"701461e2b9080f2cc2611df52def3ec9bf4654a23f9a30ea9cdc2168adc3eb75","sha512":"612e0bb6a423ba0923fe399e7de88fcae7a6bdd4c2983778fe4f41533427c6f237d4c981b1ad4ae8a5c7611673755e7c1f11cc1ed6a3eaf27ab0acff672ecd90","ssdeep":"","tlshash":"1031ca3e9bb610b1c55370a956efb140a530911b7089de807c7c072a6fe0a11c6d67ad","size":1663,"data":"","first_seen":"2026-09-03T14:05:57.657717Z","last_seen":"2026-09-03T14:21:48.136233Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0c018705ba2f35944a235d8e93f4d8bb","sha1":"ea5ec349a8108478d8083f7bef54c2f7b6d1bc46","sha256":"9d6360f475ebcafa1ed65c572c1a19445b7fdead05998c913c8d2e99f9f69e4f","sha512":"c802ce6a7f1fa14890343e121f5f4bf0d56e32ed3f6eda5c9673525845fd2df4ca2732e4a897718f6284836e47cb765a4595ea701082748d3e07e843e6c06ea2","ssdeep":"","tlshash":"13f0821026f858758460f1329d8f627656332e1f1c4bb324750c03406f9fb1ea1f2afa","size":652,"data":"","first_seen":"2025-03-04T01:55:58.02057Z","last_seen":"2026-09-03T14:21:48.136906Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/chunk-vendors.b00212d3.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"021fef071a52417274d833aaf025aff1","sha1":"0e5dd82cb32ecee3423deda4806fd964ed619bce","sha256":"65ae330d90dc60a219879bb19cc6ded2c3e46158c169ae7e937521852cb3f525","sha512":"2bfc25898502725be60ddf67ce39acd84b140baee3a8b7bb80ebdd3515af6d90cb7a5a8c43bd41e63656bb6e765e8f49818615bf18c8d7d3333ab100793bc6dd","ssdeep":"12288:OT/PUGhErNJzcf/+tsJkwc0DVMv44fXnwQt5Z:G/PUbrNJzcH+qkw6XwyL","tlshash":"4315f7cd72d5b06207e361f1502f100bf33b6969a80d8098f675e4e9acb994d922bf7d","size":940191,"data":"","first_seen":"2026-09-03T14:05:57.606835Z","last_seen":"2026-09-03T14:21:48.090619Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/page-homeContent.f49cc116.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"519027ec1d20a6a841e96f586fed0784","sha1":"c56878712105469237c7efcc5667c70ded1a8695","sha256":"b1f09f998ce0e63eb5a3585502314a9adfbff254a465153cf7ee3f0ceb1618cb","sha512":"fe6abb8ed40965cd2950e4338e6008d10c1e13921a3eaa2cf9e5c30c6072ce1fefd9b5b584e139c856870e0e0d680990ee55ee18e0dec90962f51769aae60329","ssdeep":"3072:A7k0roPVMUujsGaL3YvXKnd2egT8TzpIpLbFY:6kil2LgXKdb0by","tlshash":"2ec37d2aa183a16e8d676062102b3534f4351fa59114d183f73ccee5e9e8c6e772f9bc","size":124307,"data":"","first_seen":"2026-09-03T14:05:57.594392Z","last_seen":"2026-09-03T14:21:48.074065Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/app.6ad66b5d.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"11038a2af1dd9fef9e44f32466157475","sha1":"60944a1191819b8d0fb974e4995cfe73de05b054","sha256":"fdc33229ae4cd1d8b8b9908e262cae111bd230042c85466fe98d3ea1cac961fc","sha512":"684651d87644b351d8e9b04b7359cb6d53b7908d9a049a04d5e2a0ba03bf3fe64237cfd4339ebec3625666f9037454fd4ab92550ccd7b4019453352df4499c37","ssdeep":"12288:xunTvguemXdmT/PzFhfU9iLL109MIKXEK2z:xuT38LLL109QXEKE","tlshash":"d7948e872a5815b90e974b8b71cb3f3c91ba2dd2c349c3c44cd6893d12d79b1a26be74","size":417515,"data":"","first_seen":"2026-09-03T14:05:57.612022Z","last_seen":"2026-09-03T14:21:48.104551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/jquery.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9087a9859288a8b9e5275a823c2ace1e","sha1":"f2c621911b387b2a6399c08d05c7027653a9e072","sha256":"730fa28a30b20e876e67b0ceacc14ef814ade02fc3504d91435675f5e847f287","sha512":"e46f3420f05a12c3063df19a03689b6029d479230d03fddb5d2adc4abf655c795c3c1b3777fc3d6fc7a3cfbfee089ef19d5fdc925be73d5dbdc64524a1a253ab","ssdeep":"1536:GP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:Z+41hJiz6fhdlTqya98HrA","tlshash":"5f83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84342,"data":"","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-09-03T14:21:48.133476Z","times_seen":258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/chunk-1dbbf397.4fe91c8b.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b71978ce92da6ee4623b49cdb8a5dc15","sha1":"ed171a48efd02021341fb318c973068a2151f4b0","sha256":"8eae34f7d1d43b64089a02882936e37e7c3a12e3697cc4f044334a7eb5022438","sha512":"6d2af4bce39c5f1d5d8fe0a885a6802276cbc1bfbff7fa49030b53b82d4fe3916dde0a487d78bbd76752a6b53b5d4051a0b727265915c24f5f48cf7948b5583f","ssdeep":"3072:sGhW+1xjVoKZbzmY+nw53AQkc1OKBPVypuvt:sGhW+zVoKZbSYcw53AQkc1OKBPVy0vt","tlshash":"96e31949731075a282f7268b53a8c610a3b64855b80ad5e871bd4c6b6d7e85c03feffc","size":146066,"data":"","first_seen":"2026-09-03T14:05:57.581496Z","last_seen":"2026-09-03T14:21:48.115802Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/asset-echarts~home-chartBox~page-borrowMoney~page-fiatAccount~page-iepnList~page-marketQuotaion.429ad556.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"83fef373fc7ea2b2d64400bb32986e96","sha1":"03de0c573c8856dd6277e4581baf2a7cfc9f1962","sha256":"1d235a9522b9867870c2aaff6f6747caa66996b0c8c8597945278bc2746b347c","sha512":"942c2c729b9cd64916a53fcc4be611c0f5df7eae95106e789ba8bd067b3ad3d41300b6f218f8cd68dfa4c7196e02f94c5746b8c9ceecced7e66247929a191aaa","ssdeep":"192:u7Lwga54D2/v3NvH94QHD3XtmOudzLq/MOH6z1V3OwLmwb1H9bUMY0Xy:u7LwJ//PNV4qD3XodzWEOaRZOwCshry","tlshash":"0062118db991f4e91a9361e4811faa0bf1e72a78f40d94e1cab2c1d1ec74c4f4177e29","size":14848,"data":"","first_seen":"2026-09-03T14:05:57.584895Z","last_seen":"2026-09-03T14:21:48.130034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/asset-echarts~asset-echarts-runtime~home-chartBox~page-fiatAccount~page-iepnList~page-marketQuotaion.8aebfe3f.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d05ac7fbc3a9f5f55bde14ba0754749d","sha1":"b9e8b1389185bf038cce9b4fe0dadb93c2b140cf","sha256":"8167ad6d883949613b1a93b041c9ab4bd118e3ac67e6c4d4b73ef1c860b7b5ff","sha512":"cc4569584ae13c94aff0b38f7c48678ddda6d03ad3c81b85ab4e16778a2fb73f0d6a3f4e6ca1ec4d7da397052844e996f01f8f5579829b501bd129bf16eca4ab","ssdeep":"3072:1Uxjcp29MIRaY99jVUz0kLTxM1x4871PzPvlvNghiKF+Ge3ecmJ:Dp2SYwXLTxmxJ71r3lFghhFi3ecmJ","tlshash":"68541adc7284b42552e721b454bf250b92367809780fc998f629e5cabcbc55e227bf3c","size":292696,"data":"","first_seen":"2026-09-03T14:05:57.582834Z","last_seen":"2026-09-03T14:21:48.116425Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/home-chartBox.e0871112.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08cb24fc9a42bcbbf5d895d53f096db9","sha1":"57a7c948fdcc4b19dc7f55a06827dcdf5868d64e","sha256":"9be75890cf4498bbe1853ed2cc8d6d7f3d0b898bd29404ec3e3dfe8c8f787276","sha512":"85eb463a2258c9bc0f9819b8c4e189badf1e2aa0cd739f6fec88112a123fbb2eea7b1b4f617aa3f2139ac667e56cc3ffcbf9d0741da37972107950ed499a5a97","ssdeep":"96:xPxGBQSEQTnrs2ntG1519H1O9pdjlIcINjr6Xc62aXV6E2pD2y4s:xZ1inpn8Xvk9pdJs3Sc62aXVfcD2yb","tlshash":"4281a665e1945c0f1dabc64fa53bc306e248390d5c46c17dbfbaa4e21a4ac40323cbb4","size":4191,"data":"","first_seen":"2026-09-03T14:05:57.595431Z","last_seen":"2026-09-03T14:21:48.113921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/home-chartBox~page-fiatAccount~page-iepnList.634ebaff.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"43588fb6d606bbb9261593df81b4ec03","sha1":"b98ed0f1a472a23ce2de68657d96f8d52c1573a1","sha256":"6bf02e4dbd5ab030183f077bb8bebb707fb5855b1d853e0641ca8649f3eb69f8","sha512":"3650f94858ed5caf7e14e66d7ce0ee22dfe262996cbe872dda1a75ed84867ad2d858188f70e680a7043f5d0ec8a3c25b57f0355442cdee6132af614f75e2f3a5","ssdeep":"1536:oW+n6mRvS9IPwvFRGLP3DBLDcoa2hW1V+2aNfHLWj2eSp7c:W6TqfDybEWD+2VjlSp7c","tlshash":"59b32aee3284702746a77275147f280742321509984aca28be6ed5d9adbd59f333bf3c","size":116998,"data":"","first_seen":"2026-09-03T14:05:57.590206Z","last_seen":"2026-09-03T14:21:48.11743Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-03T17:15:56.719699Z","times_seen":198415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/page-home.da69aae2.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f485fe14013de56ce7b5e1ab2e1df54a","sha1":"e3bfd3fa1a18ac3375d3ccb1aa0cebd63a8711a0","sha256":"f9f93abf5b7262a1a5397e0bad6337437dc714ac813f0ba5296633e790db4e81","sha512":"8ebc303546ee877d7c2f0a676fe0ea54b04df52a000eb3904341d41773e9a8e13f7cf64b0e4621dedacc95b709bb0489d21024f4ab1bb4378aaf1af08e807966","ssdeep":"","tlshash":"3cf0c07df0476c6c05bdb1e855566a47a8160c8e1e5e4df079a084ad226319a872a342","size":511,"data":"","first_seen":"2026-09-03T14:05:57.643882Z","last_seen":"2026-09-03T14:21:48.127531Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/page-Pledge~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~page-agreement~p~60d95afb.86325bdc.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c5bf7ca66d2ed552a4b6f6e7917d8a8","sha1":"7b15ade055d772ded38b9d4be672b963c52633ec","sha256":"a848d721715c03dda870ea2e42b90f114f2aa195f1c581147170d69a9ecbb956","sha512":"247a0ad0e2f73183208b637255f44414d2f30b386400d315cab3dc7be095b7ce55e2a78bf06c9467f91a881a125aafa18566523f78d64fddca847bac84f2bc41","ssdeep":"192:J4gEGkxOUdHbmmTOcH4p8tEkR1z0GYu29itfJzEpMIP6UnzWIjHvK79Lci3pYryn:xwdV7/3yT5u9LtVtiJ8","tlshash":"9582975771c7e47d8d679110902a2930f12a0fe8b116d156b77cceb0b4c6d78eb2e6ac","size":17870,"data":"","first_seen":"2026-09-03T14:05:57.624281Z","last_seen":"2026-09-03T14:21:48.131627Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/page-Pledge~page-account~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~pag~9f49e32b.36154f66.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e469af6f2e290028f7224d92ac3adaa5","sha1":"65f4453b0f740478613b2b23138d02e19851f19c","sha256":"acb9744650a6a5eb10e049af6b7edce5173690bcb21b2db4789a85e366d2e162","sha512":"c3d71c22f94270547caa18bc84666674fca89557ab93f5153f971c56441564460baaf3dde707a4359e7300fdac5488b52ac6336ae16f52a1d15d558ee288cd33","ssdeep":"1536:iZ6NjHcIaMDcHWcM9YgnYVNts1zd7myCtzAgaPfl:iOHcCYgnYEzetkHl","tlshash":"fdb32aff63c6a1f4985bc7b0d02b1421b12b1dfdb62ac6859378cde0b5944688a4ed7c","size":115895,"data":"","first_seen":"2026-09-03T14:05:57.626974Z","last_seen":"2026-09-03T14:21:48.109501Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/layer/layer.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","size":22105,"data":"","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-09-03T15:35:46.880721Z","times_seen":1295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/iconfont/font_2302506_w05z3emunp.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba06a70435b4f1c32cedd7ac37243aef","sha1":"d3e80efd23a5db7c9a850f198e9b0666ebb9d1f7","sha256":"13b4a03145b92e09d39ff35b0df6592567a9a1e67526521ef09833637e6cbb9b","sha512":"1522691e752567e9f6f8f336f0444d25004598bac59bdae09bf6825d00ecf0dec980a91838b3f1b94d1bcc2d654977cb18b6f5073eff5460241426de2714f429","ssdeep":"3072:V2L6CAhxHXW4JowHa0rk2AbxuLloWvD4Lnr3zoeqW:/rkQD4Lnr3zoeqW","tlshash":"8854d7e5e36892fc5c0e43ddae39b474360f10fe35d1ce688168ce60a653ad9d94dc8a","size":290139,"data":"","first_seen":"2023-03-07T15:53:09Z","last_seen":"2026-09-03T14:21:48.126917Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"hlTypeUSD","filename":"https://baseinves.cc/js/page-Pledge~page-account~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~pag~9f49e32b.36154f66.js","line_number":1,"column_number":86253},{"level":"log","text":"组件挂载完成，用户账号:","filename":"https://baseinves.cc/js/page-Pledge~page-account~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~pag~9f49e32b.36154f66.js","line_number":1,"column_number":87295}]},"http":[{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/20260721120805849526.jpg","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.944Z","timestamp":1788445256944,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/20260721120805849526.jpg HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 21 Jul 2026 16:08:05 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f9965-b9df\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47583,"size_decoded":40774,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1272x537, components 3","md5":"922dd397213354be47834416cf0a88ab","sha1":"03e4270888828ebb6e23ccd36607251172a74c0d","sha256":"3e1dcf6ea2446889efb7d910938ee867458c63630302d6b85ddb5ad6a1a287ba","sha512":"a341b8963f301fed9dd4e47188f494e2dcdb13c7112be08e116953ad565d1378ba5d932084cb059fb40160137a0c0b93cbf62f0e9476f15c458c8bce7e1310a6","ssdeep":"768:FxQXpFci4+oSBYXbXweA1WYh6RuSX/j4ZjH8U0ZHBc6mkbaQ/hsje:FArci4+oSBYLXwkYw4SPjicU0ZHBnmkH","tlshash":"3723b0e51d717a39e82b49f05725326d9e284fe098cb391f8def84b367427001a994ef","first_seen":"2026-09-03T14:05:57.618204Z","last_seen":"2026-09-03T14:21:48.065263Z","times_seen":2,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":-1,"dns":0,"connect":186,"send":0,"wait":355,"receive":188,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/iconfont/font_2302506_w05z3emunp.css","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:49.493Z","timestamp":1788445249493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /iconfont/font_2302506_w05z3emunp.css HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 1671\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-687\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8686,"size_decoded":2074,"mime_type":"text/css","magic":"ASCII text","md5":"e273eeb1701a33cf88c4dfa17c96cdb5","sha1":"ad36f017bb4ec0d9bffe327be0d69e374609ee8d","sha256":"1bfd01ee168fe280ce9697b52dd5e7cb0393f961f568fcbb07ad2ed0cd111843","sha512":"7e999365a86cf44be0c40f863fa558f971a31adca8e7808da77089fc78bbd97b6856db4320821e68c8c2de9836e45c2ed9e0695e01dd790a4fbc4e21dd6cb888","ssdeep":"96:jYxAHerw1mgmH0XqWVF8LF1oAySJi2/HIPj:jYKtmbV8F8DBkIG","tlshash":"6302c0e089bd2cb45358e4d02357e614ef19a3a99e4b5c1ff2a77d9c67e33049082adc","first_seen":"2026-09-03T14:05:57.645636Z","last_seen":"2026-09-03T14:21:48.067398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1984,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1984,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/page-homeContent.f49cc116.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:55.220Z","timestamp":1788445255220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/page-homeContent.f49cc116.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 64003\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-fa03\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124307,"size_decoded":64422,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"519027ec1d20a6a841e96f586fed0784","sha1":"c56878712105469237c7efcc5667c70ded1a8695","sha256":"b1f09f998ce0e63eb5a3585502314a9adfbff254a465153cf7ee3f0ceb1618cb","sha512":"fe6abb8ed40965cd2950e4338e6008d10c1e13921a3eaa2cf9e5c30c6072ce1fefd9b5b584e139c856870e0e0d680990ee55ee18e0dec90962f51769aae60329","ssdeep":"3072:A7k0roPVMUujsGaL3YvXKnd2egT8TzpIpLbFY:6kil2LgXKdb0by","tlshash":"2ec37d2aa183a16e8d676062102b3534f4351fa59114d183f73ccee5e9e8c6e772f9bc","first_seen":"2026-09-03T14:05:57.594392Z","last_seen":"2026-09-03T14:21:48.074065Z","times_seen":2,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/xau-float-3.4f56eed8.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.091Z","timestamp":1788445256091,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/xau-float-3.4f56eed8.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 714\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-2ca\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2218,"size_decoded":1121,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f56eed8f619447d5fdaa5a1cd6e5e85","sha1":"7492c3a35f30935d4cf246b13c4bf9cc222cc54f","sha256":"1f372583e72f910681e6a73ed4ed1c1ed9532afcbf2ddf0a3264628d2231582d","sha512":"b15a1a1491cf1254c03c18188db7c518a3855bc1e288567557bcfa297f7cf6fa1da3f0df20fd282c1263b923738f2d035a9b96e72a6bb60530e34d59fe04a120","ssdeep":"","tlshash":"57416b29d3a9882ef22a4218db057035391d51d38749a340745eab7d1f2858f6e7f6f8","first_seen":"2026-09-03T14:05:57.628276Z","last_seen":"2026-09-03T14:21:48.08112Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/xau-float-4.6701f543.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.093Z","timestamp":1788445256093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/xau-float-4.6701f543.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 700\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-2bc\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1993,"size_decoded":1107,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6701f543e90ec121bbf918fe106d445e","sha1":"ce0e4114da89b637a934e166d3ab900547abbae7","sha256":"f0b7127ced2cc749fe142ed4d49cbb34fcfce846c139e3e9395c35713bdf81b4","sha512":"233d7079e654ed3b328edacc8b81ec42fd21a11188fc1e165dc2eb979ebce1c5abc17083fc6d2cbc1ce0f95a0fe91b7f13b8266a5236cdb1cef1c306bcb7c8dd","ssdeep":"","tlshash":"93415928d3ad993af1298218ef117039791d90d79a459341705aaf391f3898f7a3f2f8","first_seen":"2026-09-03T14:05:57.597602Z","last_seen":"2026-09-03T14:21:48.083322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/api/currency/quotation_huang?is_class=2\u0026_timespan=1788445256900\u0026lang=en","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.904Z","timestamp":1788445256904,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"OPTIONS /api/currency/quotation_huang?is_class=2\u0026_timespan=1788445256900\u0026lang=en HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://baseinves.cc/\r\nOrigin: https://baseinves.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-cache, private\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-Baseinvest-Token, X-XSRF-TOKEN,lang,1min\r\nAccess-Control-Expose-Headers: Authorization, authenticated,lang,1min\r\nAccess-Control-Allow-Methods: GET, POST, PATCH, PUT, OPTIONS\r\nAccess-Control-Allow-Credentials: false\r\nSet-Cookie: baseinvest_session=eyJpdiI6Im9CTVczZlJvcFo5bzBqYXgraGg4WkE9PSIsInZhbHVlIjoiUmllVENOZUVRbjd4NXJmblRnY25zTFRNZnZaZjYrRk85bk1XNTh0MzJpa1VvaEl4cDl2STJ4YTh1bG12QzVXWEg2VHNBaXpoMlFlNHU2SHErYUo1bTVSK0hcL0syeE9DUk1JTXFlRTRTZU41WHVsaStZRG5MY1JHUDJnd2ZEXC9sXC8iLCJtYWMiOiJlZjVkZjZlM2JiNGMzN2QyYjBlYjc3Yjk2N2RjNDc2MDAwODJlMDc2MzM3ZjVlOWE3OTcwY2M0ODA4Y2IwMDI4In0%3D; expires=Fri, 04-Sep-2026 14:20:57 GMT; Max-Age=86400; path=/; httponly\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"baseinvest_session","value":"eyJpdiI6Im9CTVczZlJvcFo5bzBqYXgraGg4WkE9PSIsInZhbHVlIjoiUmllVENOZUVRbjd4NXJmblRnY25zTFRNZnZaZjYrRk85bk1XNTh0MzJpa1VvaEl4cDl2STJ4YTh1bG12QzVXWEg2VHNBaXpoMlFlNHU2SHErYUo1bTVSK0hcL0syeE9DUk1JTXFlRTRTZU41WHVsaStZRG5MY1JHUDJnd2ZEXC9sXC8iLCJtYWMiOiJlZjVkZjZlM2JiNGMzN2QyYjBlYjc3Yjk2N2RjNDc2MDAwODJlMDc2MzM3ZjVlOWE3OTcwY2M0ODA4Y2IwMDI4In0%3D","quoted":false,"path":"/","expires":"2026-09-04T14:20:57Z","raw_expires":"Fri, 04-Sep-2026 14:20:57 GMT","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"baseinvest_session=eyJpdiI6Im9CTVczZlJvcFo5bzBqYXgraGg4WkE9PSIsInZhbHVlIjoiUmllVENOZUVRbjd4NXJmblRnY25zTFRNZnZaZjYrRk85bk1XNTh0MzJpa1VvaEl4cDl2STJ4YTh1bG12QzVXWEg2VHNBaXpoMlFlNHU2SHErYUo1bTVSK0hcL0syeE9DUk1JTXFlRTRTZU41WHVsaStZRG5MY1JHUDJnd2ZEXC9sXC8iLCJtYWMiOiJlZjVkZjZlM2JiNGMzN2QyYjBlYjc3Yjk2N2RjNDc2MDAwODJlMDc2MzM3ZjVlOWE3OTcwY2M0ODA4Y2IwMDI4In0%3D; expires=Fri, 04-Sep-2026 14:20:57 GMT; Max-Age=86400; path=/; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15232,"size_decoded":3135,"mime_type":"application/json","magic":"JSON text data","md5":"55e37ef099c32d034cbc7d129b2b71c2","sha1":"9c7660561218ee43f362209f7c3e3079449ffe31","sha256":"eaadd82e1d72339f339e39cadb23bdcca8af99860b826786efdfd326ffcf7b12","sha512":"847f26bac4be01645c7cb5214db02a8c9ef2cd5feadaf134f1f290faeb948afda3aabf5d3131ef3134484c35a20be5b070dd06f0cd836aa3dc29c214b6fad8af","ssdeep":"192:nyDSIOMpbJRoVWp00oGBwpzB960pG+nfzmwezsKkqw4+NhRtpqGn6EXYp++LAPtL:yETuIb9I+PgCey5/xFKCH3DgsZLC9Ba","tlshash":"3262f35d661d8eb8d6b7adc2deee32ab71407407dec28f81d3ed5f8c4288967a107502","first_seen":"2026-09-03T14:21:48.085469Z","last_seen":"2026-09-03T14:21:48.085469Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/20260721120755625896.jpg","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.956Z","timestamp":1788445256956,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/20260721120755625896.jpg HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:58 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 21 Jul 2026 16:07:55 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f995b-d8bb\"\r\nExpires: Sat, 03 Oct 2026 14:20:58 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55483,"size_decoded":44733,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1269x659, components 3","md5":"eb2da752cf4b7e4ad20d02c2fe86f0f6","sha1":"9031bb6623161b522dc0c83b7e491ea8634f876e","sha256":"25b6d69b043f823d5efbdf544789c865fe5a0b44ce7356db21001dbaec1ecd74","sha512":"40a51b55961b734ff30a15b5e19fd853c1898d6658363d0b87986c591558b165d079cf106ea77e3fa55f8090ead835a5e8a6ebbba372ce9ff885ff316f5d1fee","ssdeep":"1536:hLX28/6tKwOliofLq3vtFtMMO5+a8nKX/C2Lu:gG0niLIMMGvXnu","tlshash":"af439e3528db25c0ca0ddbbb3f91ae9ad062dccba6c2e42be950b45175cd6780c59cd3","first_seen":"2026-09-03T14:05:57.614603Z","last_seen":"2026-09-03T14:21:48.089301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1472,"timings":{"blocked":1092,"dns":0,"connect":0,"send":0,"wait":193,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/chunk-vendors.b00212d3.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:49.499Z","timestamp":1788445249499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/chunk-vendors.b00212d3.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 255176\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-3e4c8\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":940191,"size_decoded":255597,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64520)","md5":"021fef071a52417274d833aaf025aff1","sha1":"0e5dd82cb32ecee3423deda4806fd964ed619bce","sha256":"65ae330d90dc60a219879bb19cc6ded2c3e46158c169ae7e937521852cb3f525","sha512":"2bfc25898502725be60ddf67ce39acd84b140baee3a8b7bb80ebdd3515af6d90cb7a5a8c43bd41e63656bb6e765e8f49818615bf18c8d7d3333ab100793bc6dd","ssdeep":"12288:OT/PUGhErNJzcf/+tsJkwc0DVMv44fXnwQt5Z:G/PUbrNJzcH+qkw6XwyL","tlshash":"4315f7cd72d5b06207e361f1502f100bf33b6969a80d8098f675e4e9acb994d922bf7d","first_seen":"2026-09-03T14:05:57.606835Z","last_seen":"2026-09-03T14:21:48.090619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1977,"receive":3506,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/tabbar02.560b125d.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.106Z","timestamp":1788445256106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/tabbar02.560b125d.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 6844\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-1abc\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20124,"size_decoded":7253,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"560b125d9347a727181a3d13c9cf503e","sha1":"18292ec13d8ef17ba5e93abeb681340f89ab9c63","sha256":"c04b1f52580720a10d70242748156bb61b8dc13be28702955f034670898f337f","sha512":"28b83a267f90e160c950774c55fe418f086f9323f45ad854fcd005c7003181d4afd64b1f11447fc0c94e4c39fc43cbcfe31355c0eb75aa3cfd4370493838e491","ssdeep":"384:buhuI/AH3rd0m70vQIACFgxRtR5ISO6Hd8F5Mnp645ft8C7y8n/MG:l3rWvHFgBUF5MYqft8d8nH","tlshash":"249201faf3d4e1f49446dff0a71269a5762b3db92ea6824409e78c90da3105ec43f9c4","first_seen":"2026-01-21T08:58:28.516197Z","last_seen":"2026-09-03T14:21:48.091996Z","times_seen":20,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/0.ea5cfde7.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.158Z","timestamp":1788445256158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/0.ea5cfde7.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-167a\"\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5754,"size_decoded":6145,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"ea5cfde7eda80bb746f67a40c31f4b3d","sha1":"c6b9f722a5d3d83302e92b12ee9945b7c8aaf074","sha256":"ee800495ef41a86b2e81fb14200b1d0b1afb99c01d3d9f090980df81d6189f39","sha512":"ad701821c8f849c4ac1a18e2b357f7faf9cd4cbb4e71fbfc024fb81837f8ec78007e14370f770ad8048e6e3a6b27385ca6f1d9f5192d908feae27dbcaba52780","ssdeep":"96:p+ZMKP70VXjUmNJrbMPFanxb+GzVlp/46f6se2MoOyyTuCqvIPL3zE1:4uKjyfT8MxaWr46fK2OyyTHqvq3y","tlshash":"16c17d23d9ec0af649410830b13bc4f38126755e5511f77993db17ee0deb9a8cb45d89","first_seen":"2024-11-16T11:30:56.638444Z","last_seen":"2026-09-03T14:21:48.093009Z","times_seen":8,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/10.223ad077.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:21:04.010Z","timestamp":1788445264010,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/10.223ad077.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:21:04 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-138f\"\r\nexpires: Sat, 03 Oct 2026 14:21:04 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5007,"size_decoded":5398,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"223ad07762cc207f5fe00b484ff7fa18","sha1":"946a3b47ee53778c55da54344d88b2da73082b73","sha256":"322e5b9ed1f51c3d4e86c242e17f2f07847fbe80827b6ba133270da43315c953","sha512":"48925e6695092f8f404c7896640be36f9e98ac46f5c243033b63df2a350243efd178a4e2c8fe105ccbb90ae21acdbe89338c5c61b06adcfb808417b8d9b147a5","ssdeep":"96:Oq6u9jNj8RoBfc7r3I7CxhWE1rgaIh5DUCK92OkIqW5a1WnlvO:Oq6AwR0uSwD1I5/JxW50WnlvO","tlshash":"2aa1a07d40ba384717e4014cc22a15e5f7a999ac27d06bdc45f5907d4c13750abccbb7","first_seen":"2024-11-16T11:30:56.642674Z","last_seen":"2026-09-03T14:21:48.094074Z","times_seen":8,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/css/chunk-vendors.6b92dc4c.css","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:49.495Z","timestamp":1788445249495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /css/chunk-vendors.6b92dc4c.css HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 34399\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-865f\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":211155,"size_decoded":34804,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e1ec7b3d258707dfa59963f29e6f8e75","sha1":"4f5bc4f0fe61f591e28ee36aeb7225face58fdcd","sha256":"dd1f9346550174f9e13cf5bde56e170cf73b9b703a46f0335435471104a3aba0","sha512":"2c4dc449a988f588060850b8d9cdd6eb28c00c26e0b17d938f9904f7331979d66f74b806a5f457dc13d5a3593ca04bdac41699603e3c412e241b82ea715aed14","ssdeep":"1536:w28Y7SrW3YeWXA1u9w4HCe/l4JrgW9cMERw4B78O6iZkJgYu8e210kSDDvIc/ehB:JtKw/27eDLL6of","tlshash":"0824a710db17247b622bd66db4c0ba896f24c363d8725b3bfd95741cc6e64891223e1f","first_seen":"2023-10-20T10:33:29Z","last_seen":"2026-09-03T14:21:48.094824Z","times_seen":114,"resource_available":false,"data":null}},"time_used":2466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1981,"receive":485,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/api/currency/bclass?lang=en","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.108Z","timestamp":1788445256108,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"OPTIONS /api/currency/bclass?lang=en HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://baseinves.cc/\r\nOrigin: https://baseinves.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-cache, private\r\nDate: Thu, 03 Sep 2026 14:20:56 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-Baseinvest-Token, X-XSRF-TOKEN,lang,1min\r\nAccess-Control-Expose-Headers: Authorization, authenticated,lang,1min\r\nAccess-Control-Allow-Methods: GET, POST, PATCH, PUT, OPTIONS\r\nAccess-Control-Allow-Credentials: false\r\nSet-Cookie: baseinvest_session=eyJpdiI6IkNRRjhFcEJiK0puNFJhRWI5YnVFeEE9PSIsInZhbHVlIjoiOEtkS1wvNElkS2E0ZGVVYjdEOWc3eitcL2tuSjRoOEJLaW9jaXVqYXJjbjNNVGlubVFOcjBia0R4VzBYaWFOeE9HUWpFbU14RVkzQTJzXC81QjlVNVM3Y3RcL2NqTUlRN1E5aHBBZ1NOVzg3SzNwQVwva29KbGxTS1NKZlBzY1hYOUJKaiIsIm1hYyI6IjRjYzBlNDUzZjEwZGQ3NTBmN2QzYmYzYmQwN2VkMzM1YjgyMjE1MTUyZjg0Y2IzM2Y3NGFhZjFjZjM1NWQ0YzcifQ%3D%3D; expires=Fri, 04-Sep-2026 14:20:56 GMT; Max-Age=86400; path=/; httponly\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"baseinvest_session","value":"eyJpdiI6IkNRRjhFcEJiK0puNFJhRWI5YnVFeEE9PSIsInZhbHVlIjoiOEtkS1wvNElkS2E0ZGVVYjdEOWc3eitcL2tuSjRoOEJLaW9jaXVqYXJjbjNNVGlubVFOcjBia0R4VzBYaWFOeE9HUWpFbU14RVkzQTJzXC81QjlVNVM3Y3RcL2NqTUlRN1E5aHBBZ1NOVzg3SzNwQVwva29KbGxTS1NKZlBzY1hYOUJKaiIsIm1hYyI6IjRjYzBlNDUzZjEwZGQ3NTBmN2QzYmYzYmQwN2VkMzM1YjgyMjE1MTUyZjg0Y2IzM2Y3NGFhZjFjZjM1NWQ0YzcifQ%3D%3D","quoted":false,"path":"/","expires":"2026-09-04T14:20:56Z","raw_expires":"Fri, 04-Sep-2026 14:20:56 GMT","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"baseinvest_session=eyJpdiI6IkNRRjhFcEJiK0puNFJhRWI5YnVFeEE9PSIsInZhbHVlIjoiOEtkS1wvNElkS2E0ZGVVYjdEOWc3eitcL2tuSjRoOEJLaW9jaXVqYXJjbjNNVGlubVFOcjBia0R4VzBYaWFOeE9HUWpFbU14RVkzQTJzXC81QjlVNVM3Y3RcL2NqTUlRN1E5aHBBZ1NOVzg3SzNwQVwva29KbGxTS1NKZlBzY1hYOUJKaiIsIm1hYyI6IjRjYzBlNDUzZjEwZGQ3NTBmN2QzYmYzYmQwN2VkMzM1YjgyMjE1MTUyZjg0Y2IzM2Y3NGFhZjFjZjM1NWQ0YzcifQ%3D%3D; expires=Fri, 04-Sep-2026 14:20:56 GMT; Max-Age=86400; path=/; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":515,"size_decoded":1287,"mime_type":"application/json","magic":"JSON text data","md5":"e8fd9d2a44561c9e001f90e9b95c311d","sha1":"b136b59271ebbeae24461e2e34c8b742bb4b6849","sha256":"b2eff47aa9de78384d14ce682613f76695f4da12e67f217d3d0c268e1543e5e8","sha512":"edbf505b00cd3ee604b787990cf144abe37a47456fa7c9b1fcc293bf49ca7d5f537a6b98927e9e51a685121344ec8aa8e804e8bf26cb042fd899f5e43c41761e","ssdeep":"","tlshash":"b5f09aa872e2645c6462f480887fbb93bc8e30d49e45d705ebd92dad0b20f130e2b0a5","first_seen":"2026-09-03T14:05:57.631467Z","last_seen":"2026-09-03T14:21:48.095636Z","times_seen":2,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":-1,"dns":0,"connect":177,"send":0,"wait":208,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/1.aa7a7c4d.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.159Z","timestamp":1788445256159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/1.aa7a7c4d.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-2127\"\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8487,"size_decoded":8862,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"aa7a7c4dcf69500b31e332e91742c6ca","sha1":"faff0ecb734db0f5154ad280d56bf53203ffcc2a","sha256":"17e327dadfadc5bbd41f1b41e2f5a085e5cad34f8e51b3ed67a5102b9aa13fef","sha512":"61b054c93486fdef7f610c0ea3af39820067b547d9878d4830701521d19ba4262143fc5a23e16a01eb4bdf642d089083ec94529054926665121704cf346f3a40","ssdeep":"192:r6WjDjahw96+ceSrJR5zZPaptBzjRRrGeLVp9rYQWFeD:rffjIJJR5zZO9meLVp6QAeD","tlshash":"2402bfc0d7ad5e07e3396b752908361d18da92751d29199cf38932ee30fe5cb11e4ec2","first_seen":"2024-11-16T11:30:56.673988Z","last_seen":"2026-09-03T14:21:48.096568Z","times_seen":11,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/6.d48f6b26.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.164Z","timestamp":1788445256164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/6.d48f6b26.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-1729\"\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5929,"size_decoded":6314,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"d48f6b26fa61c6ec3a04aae652a11f03","sha1":"84fc8d4ccbb73da06c9f25c33525249f5b80c73a","sha256":"4ada722de3b62387b5d707e7f4221fbf163766bc97bf097eecc2d8f7a5bad4d2","sha512":"5e2c2c0f19c56b1ee1f1c4ed790e509fc85e31b1dc134fd7b3423f316310dee80f3fc1210c9d6eba553d273aceb73d4a68c0c1b11129a631a4577ed110ff808c","ssdeep":"96:UhARye4eyatMK5Zt08nhT4HXVcDiAljXalQb6AQ9hcRuB6r2vhUo6Psbtiqlb7:ke4neLZt0COXaHjX8Qb6AKNU2euEM","tlshash":"10c17dc26c2459a145a8ad14d14490dfe9b6b070c3e8c08493b0fdea5efb5eee7413c3","first_seen":"2024-11-16T11:30:56.684467Z","last_seen":"2026-09-03T14:21:48.097524Z","times_seen":8,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/1716518600817853.png","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.496Z","timestamp":1788445257496,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/1716518600817853.png HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:58 GMT\r\nContent-Type: image/png\r\nLast-Modified: Fri, 24 May 2024 02:43:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"664ffec8-16c1\"\r\nExpires: Sat, 03 Oct 2026 14:20:58 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5825,"size_decoded":6252,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit gray+alpha, non-interlaced","md5":"05c5da73fa07c3f4d5ab9ee6c664a3f0","sha1":"1c5814677535f7d589bdde3867283419c5b04411","sha256":"d81886def1f84eded87d0f056c2b03e82fc00303ec03bdcb4cac4cbf36f33c10","sha512":"be1153356b037f9d8d179a0b59a3fe190f87c945c88227fd18df7dc8ed2204a287e2f2e6122a8c52512c84a45b81a3bf1fa4d4115d30179741b20adca818ebf0","ssdeep":"96:+4tvvbh+OQsk0L+ylKiT/aD2Aq4CnhowWyapZp3gZ/h4UYG5dXZ6dXvOmsVniX:+Sbh+i+ylKibaKAubNa6p4A2xvOhna","tlshash":"37c1bf7ad38fd5d7c6a06f5e8da25f82f4285201687e90a282ce594c03d3e113464cde","first_seen":"2024-08-19T20:27:04.699698Z","last_seen":"2026-09-03T14:21:48.098495Z","times_seen":4,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":389,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/css/page-Pledge~page-account~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~pag~9f49e32b.37a4479c.css","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:55.204Z","timestamp":1788445255204,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /css/page-Pledge~page-account~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~pag~9f49e32b.37a4479c.css HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 4766\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-129e\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19279,"size_decoded":5170,"mime_type":"text/css","magic":"ASCII text, with very long lines (19279), with no line terminators","md5":"77b63ddfea9757da988a29e449b15a1e","sha1":"83306c6c39c3885dd386a0a29d6981b427c7acd6","sha256":"197c83ba0c100731c83bb6ae70b27b58a46b31e65bdd5fd8c774ddd1a8e76ce7","sha512":"b5413f5db21e2ca3c2db4b06e05e301041592c152f9e673fe2bc043e22ff65d5da695f81122d4c508596e1a3c3c2fa8e9e1b6655647a5decbd71107b204a2ee8","ssdeep":"192:W8RqsGGfaacOth4viq6Gr+JomjM6FifhEoidOUrVCXUbBlywhvXtabxpBmd:MfGigKqq6k76FE1iMU9bBlywtXt+md","tlshash":"1a82a8a2e66d353cb823f466e59067de3018f006d32307daea52763dc5c6be72a71748","first_seen":"2026-09-03T14:05:57.596467Z","last_seen":"2026-09-03T14:21:48.09916Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/css/page-homeContent.fce9cdfb.css","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:55.219Z","timestamp":1788445255219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /css/page-homeContent.fce9cdfb.css HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 10774\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-2a16\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66591,"size_decoded":11179,"mime_type":"text/css","magic":"ASCII text, with very long lines (65384), with CRLF, LF line terminators","md5":"784309b1998225b46ec9e9e7737923cc","sha1":"877419dfd6b3995c1a52ea18f5450a39c7e77b58","sha256":"ac3cd341fb434682cc480e7ff9160a674333e0bbba02e204c0ce864be7f4e863","sha512":"8ead8b211e6ec7a6e997b9d53cfe61765f0c745e9ecca8b7d31995e1f3155da7983d78401590bc6ca9db1af84cfb9c8d1265c1341e703d1770f7ee624d6dfb60","ssdeep":"768:h6L0j9IvLYz3i6PSXhTctw0c/toZos8v6jOJBiKJM3fiBwQ/qWF8cTe:h/evLYz3i6PSXhgQO","tlshash":"c8539410ae24105cd07fc1b3dcca4bcc7155f72b9b2796dda783aa4a8ed36e23621356","first_seen":"2026-09-03T14:05:57.620301Z","last_seen":"2026-09-03T14:21:48.101309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":614,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/tabbar01.421dbd7e.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.105Z","timestamp":1788445256105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/tabbar01.421dbd7e.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 225\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\netag: \"6a97cd8e-e1\"\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225,"size_decoded":584,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"421dbd7e296e348f0501de541be1dce6","sha1":"e6f8518748e479dfcc592f2deb9bb4a116a2ef48","sha256":"6e119732e6ce66cbb3f896063ede5c96a2b2437b8ac2ff96a66c870a5b0a8367","sha512":"f5e06ec4152add9f5968fad722a388d36a786b1c337d2add5d69e682a3af8099f3480d4e9e909c295ee2f30321fccd09ee5833f7e5d233bbc423c177cd5d3c85","ssdeep":"","tlshash":"f4d023fc67180c1ef1194530eb5431354177608355481594c9333032205b54d7c7beec","first_seen":"2025-07-05T16:50:24.089292Z","last_seen":"2026-09-03T14:21:48.101993Z","times_seen":22,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/20260720101621249131.png","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.939Z","timestamp":1788445256939,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/20260720101621249131.png HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 20 Jul 2026 14:16:21 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5e2db5-48a1\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18593,"size_decoded":18152,"mime_type":"image/png","magic":"PNG image data, 428 x 428, 8-bit/color RGBA, non-interlaced","md5":"2b4e1629b4e631ac7c1e9ab872c8a5b1","sha1":"c428efe292176690e166be67b4a88ea60d6d48d7","sha256":"8be440d8bade805fbdce39b1098d57657d8a866cf2a0e474d6eb00eb791713ad","sha512":"1e622b71a0cd5b9210561924cd0124ee943b4e36fed233344729032e9f5ad153e4daf998f9bf5a9da50b050d8652d97c928b987819d6733c949cc2fbd26c98ec","ssdeep":"384:mHsn4g8DKPWzHgR7MRbCac4xxDYynm1rptHgihAccflSq79ko34DO+:mM4VKPWzAR7MRbCExx0hrptHRhAccdpK","tlshash":"7c82dfddda2c29b815640a44e8ec218e8a36fcc0e7d1a0416ae4ae27ba500f574bdf57","first_seen":"2026-09-03T14:05:57.586227Z","last_seen":"2026-09-03T14:21:48.102677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":745,"timings":{"blocked":-1,"dns":0,"connect":184,"send":0,"wait":373,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/1716518612238931.png","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.498Z","timestamp":1788445257498,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/1716518612238931.png HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:58 GMT\r\nContent-Type: image/png\r\nLast-Modified: Fri, 24 May 2024 02:43:32 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"664ffed4-26ba\"\r\nExpires: Sat, 03 Oct 2026 14:20:58 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9914,"size_decoded":10341,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f22226a8fd84a065eb683dfe18b85aae","sha1":"5644e90e73da4acc6919a30c775b951e76889fe0","sha256":"444a5df71eb146dcdb605e4ff56b10811f27c31dce28cbf5dee37858f6e577ad","sha512":"6f8dc37bdee1acd02e7b7876e19fe72cd1234067d5e4c8ea12257a7f1ff693b49f3fcbf2801fb78ddab8563e5e9b046c349470492a5c87659666bac31b0efe29","ssdeep":"192:o8Yp2lXz2Jiqnm3gnaIhnbMTjNXkcYxAD6pQsxpxwRQ:QpAIaAbMTjacutQypOG","tlshash":"1512c1f7e180a82aa2313fd9f5ea918501957ef7c194fc233db656192e0df2d312c052","first_seen":"2023-10-25T22:23:16Z","last_seen":"2026-09-03T14:21:48.103571Z","times_seen":104,"resource_available":false,"data":null}},"time_used":742,"timings":{"blocked":550,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/9.42b223e5.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:21:01.341Z","timestamp":1788445261341,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/9.42b223e5.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:21:01 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-1a52\"\r\nexpires: Sat, 03 Oct 2026 14:21:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6738,"size_decoded":7129,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"42b223e59a18a6ea553716d4e37b602f","sha1":"0e86d7478603e075a335820cf39a0d3fe3cbbbf0","sha256":"612182d77d4002e6cd4ad3adff688255bbf7a5e884572214dcd23cadab241e79","sha512":"329504d58caa880841a0ef1daa26464ea4cf990d5ec59ded45238975c3d5e1b2569ea723552ffe05fe4c6038b0fd7f6c5ec7e6091bde0d5ea82e553ccba1685e","ssdeep":"96:Y2lN9gUZJluCemqp3hK12J5381rcQKHrWo2Nlq2WBODuoTIwpKf7XG8DJ8VIP:BC8emqpvcrcQKHd+8hOKofpKf73DJ8qP","tlshash":"7bd19e62bda4003dbd5b0cd7a1d2b4c7af14b20ca818b5b4a1bcdfc6716e798842578e","first_seen":"2024-11-16T11:30:56.653806Z","last_seen":"2026-09-03T14:21:48.10407Z","times_seen":8,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/app.6ad66b5d.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:49.496Z","timestamp":1788445249496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/app.6ad66b5d.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 142893\r\nlast-modified: Thu, 03 Sep 2026 09:45:03 GMT\r\nvary: Accept-Encoding\r\netag: \"6a99419f-22e2d\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":417515,"size_decoded":143314,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"11038a2af1dd9fef9e44f32466157475","sha1":"60944a1191819b8d0fb974e4995cfe73de05b054","sha256":"fdc33229ae4cd1d8b8b9908e262cae111bd230042c85466fe98d3ea1cac961fc","sha512":"684651d87644b351d8e9b04b7359cb6d53b7908d9a049a04d5e2a0ba03bf3fe64237cfd4339ebec3625666f9037454fd4ab92550ccd7b4019453352df4499c37","ssdeep":"12288:xunTvguemXdmT/PzFhfU9iLL109MIKXEK2z:xuT38LLL109QXEKE","tlshash":"d7948e872a5815b90e974b8b71cb3f3c91ba2dd2c349c3c44cd6893d12d79b1a26be74","first_seen":"2026-09-03T14:05:57.612022Z","last_seen":"2026-09-03T14:21:48.104551Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1979,"receive":2635,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/tabbar10.264b0cdc.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.103Z","timestamp":1788445256103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/tabbar10.264b0cdc.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 843\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-34b\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1784,"size_decoded":1250,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"264b0cdc5b84bb918c5abd699882583e","sha1":"17b78d8af72fcdb06d9509b63794cfa510da4f6e","sha256":"e1f98b5ea3a13a40b23e60c5065bd11558bba8bfff9639f34e157028fca439c0","sha512":"61bd679b0a6adef482775fc2a67bd35661821a9bc542242feecf66f0f99646999d4c874cda92f96ed4d96909e4d176b69723d6bb54deb065a9145698ea550705","ssdeep":"","tlshash":"973165f506ce95dae589977c4d7a697625ab30ef3fb1c140cbc4688563900bf18edc80","first_seen":"2026-03-17T15:22:01.188934Z","last_seen":"2026-09-03T14:21:48.105918Z","times_seen":12,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/4.bc33b023.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.162Z","timestamp":1788445256162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/4.bc33b023.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-2376\"\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9078,"size_decoded":9469,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"bc33b0237084fa18b353fd24ef84f44b","sha1":"c034897639ad98c149b303d2fdfa2a6a70d39a80","sha256":"62a26c4cb1b43e4ca597c6e0012c231ba741d9b6c51c25a0ea63641278e55e02","sha512":"46f4563ab018e288a51454a6cf2c0bd6ebef1cc1240749d43d9acb5884bc1e5948923418758cee9140c4a42bfe9e7dc3d29caa8c4af002c841a6f6e36779230f","ssdeep":"192:5gcbG3Hs/f0dJ5firsQ9Mjl0fyj5f0OBsqo01K:5gQG8/ZrsQof5f0wpoOK","tlshash":"8312bfc2f5c79008b97d8ef4e1581c99124ef200b41a6234874ce7679e3852f52796ef","first_seen":"2023-11-27T22:12:55Z","last_seen":"2026-09-03T14:21:48.106486Z","times_seen":14,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/20260721120758833723.jpg","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.957Z","timestamp":1788445256957,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/20260721120758833723.jpg HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:58 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 21 Jul 2026 16:07:58 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f995e-1031f\"\r\nExpires: Sat, 03 Oct 2026 14:20:58 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66335,"size_decoded":64628,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1273x574, components 3","md5":"a504a5f16386f624b6299192f253d244","sha1":"a093105ca708cd7afb55e1bb7dca9e951541ea1b","sha256":"b5671bd35a2d32fdf6a50defeed97bd715b5a873877d396ef4df3d1d8fe6a3f8","sha512":"20554b77204095d0f00dd06b9eb645e95b583fcd2df5eaadf0888ca065c5a1ffef79a1eed31d161f1929c0912d5317a13ae8cd202c98f8b7eb14b272d6bb77e9","ssdeep":"1536:msvu5gnNSqE7dY53Z6Vj4AIlDBJ6v7ISLUnNN68apRh9fLy7i:msvuqNSxa53Z6tjIlDUcSurXeh","tlshash":"f953f12eed78ae0af29c2d38b728465cba0805154fcc275d9eb660ff41e5c89054eeb4","first_seen":"2026-09-03T14:05:57.602824Z","last_seen":"2026-09-03T14:21:48.107016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1489,"timings":{"blocked":1105,"dns":0,"connect":0,"send":0,"wait":194,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/5.bccc2689.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.163Z","timestamp":1788445256163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/5.bccc2689.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-145d\"\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5213,"size_decoded":5604,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"bccc26894d49cdfc9adbf4fb8ba30853","sha1":"a0c146b41a758594d6da49671fd5d6dbc43b9819","sha256":"d2e4a64f828277812ffb60129461fc8acd991bc61dd02276384fea699af1a1a8","sha512":"1fdeb934a8059049117a2db10d9dacc4c997a7acdfc41b6a6aa50db5bc9043bff991bb0028744e62433ac5d79aa158286ddb3d636f7d1ac9d125d1def0b72bc1","ssdeep":"96:D/jcl/w0cJT2erOLuIzfk9uBmcOdlpOXxtAyj3jR9LIDHgwSOSKEf:sJw0U6QOLuITk9uadlpO73PMjzs","tlshash":"9fb17c682990f635b6953e7d60e2125d4b94e041c6ec8559f1be13610c38a9c6d33bf2","first_seen":"2024-11-16T11:30:56.67828Z","last_seen":"2026-09-03T14:21:48.107614Z","times_seen":8,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":472,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/xau-float-1.53afab4a.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.086Z","timestamp":1788445256086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/xau-float-1.53afab4a.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 748\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-2ec\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2175,"size_decoded":1155,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53afab4a1ae26ab3219aaab3cb53dba6","sha1":"16defaebf3a6199d9bbd186978ce904f09ccc813","sha256":"414b701ff5e0afb7083605b047672146f3e2b8247139b225144d8f79940dbb54","sha512":"3e746516841dbc4dfed3b60784a3d6c92c592158923ab5d27a652007f8c80ac9d317aea1ebba232e11e11f34826af0a6dc5fde54a2764504a0d7c754c06181ae","ssdeep":"","tlshash":"1141cd68d2ad9827e119c25cdf057035392d41d786858391718eef6e2f389cb3a2f6f4","first_seen":"2026-09-03T14:05:57.5874Z","last_seen":"2026-09-03T14:21:48.108206Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/page-Pledge~page-account~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~pag~9f49e32b.36154f66.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:55.209Z","timestamp":1788445255209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/page-Pledge~page-account~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~pag~9f49e32b.36154f66.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 44607\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-ae3f\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115895,"size_decoded":45026,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65402), with no line terminators","md5":"e469af6f2e290028f7224d92ac3adaa5","sha1":"65f4453b0f740478613b2b23138d02e19851f19c","sha256":"acb9744650a6a5eb10e049af6b7edce5173690bcb21b2db4789a85e366d2e162","sha512":"c3d71c22f94270547caa18bc84666674fca89557ab93f5153f971c56441564460baaf3dde707a4359e7300fdac5488b52ac6336ae16f52a1d15d558ee288cd33","ssdeep":"1536:iZ6NjHcIaMDcHWcM9YgnYVNts1zd7myCtzAgaPfl:iOHcCYgnYEzetkHl","tlshash":"fdb32aff63c6a1f4985bc7b0d02b1421b12b1dfdb62ac6859378cde0b5944688a4ed7c","first_seen":"2026-09-03T14:05:57.626974Z","last_seen":"2026-09-03T14:21:48.109501Z","times_seen":2,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://admin.baseinves.cc/wss/socket.io/?EIO=3\u0026transport=websocket","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.065Z","timestamp":1788445256065,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /wss/socket.io/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://baseinves.cc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: AM10Y7ShWuyeUecKkon1Ng==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:56 GMT\r\nContent-Length: 0\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: 8o2pvPqqVX/hPtw3h7iXkLp7AE4=\r\nAlt-Svc: clear\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":243,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T17:23:48.268081Z","times_seen":18259592,"resource_available":true,"data":null}},"time_used":562,"timings":{"blocked":0,"dns":0,"connect":185,"send":0,"wait":182,"receive":0,"ssl":195},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/logo.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.872Z","timestamp":1788445256872,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-48a1\"\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18593,"size_decoded":18116,"mime_type":"image/png","magic":"PNG image data, 428 x 428, 8-bit/color RGBA, non-interlaced","md5":"2b4e1629b4e631ac7c1e9ab872c8a5b1","sha1":"c428efe292176690e166be67b4a88ea60d6d48d7","sha256":"8be440d8bade805fbdce39b1098d57657d8a866cf2a0e474d6eb00eb791713ad","sha512":"1e622b71a0cd5b9210561924cd0124ee943b4e36fed233344729032e9f5ad153e4daf998f9bf5a9da50b050d8652d97c928b987819d6733c949cc2fbd26c98ec","ssdeep":"384:mHsn4g8DKPWzHgR7MRbCac4xxDYynm1rptHgihAccflSq79ko34DO+:mM4VKPWzAR7MRbCExx0hrptHRhAccdpK","tlshash":"7c82dfddda2c29b815640a44e8ec218e8a36fcc0e7d1a0416ae4ae27ba500f574bdf57","first_seen":"2026-09-03T14:05:57.586227Z","last_seen":"2026-09-03T14:21:48.102677Z","times_seen":2,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/fonts/element-icons.535877f5.woff","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.136Z","timestamp":1788445256136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /fonts/element-icons.535877f5.woff HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/css/chunk-vendors.6b92dc4c.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: font/woff\r\ncontent-length: 28200\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\netag: \"6a97cd8e-6e28\"\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28200,"size_decoded":28559,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 28200, version 1.0","md5":"535877f50039c0cb49a6196a5b7517cd","sha1":"0000c4e27d38f9f8bbe4e58b5ce2477e589507a7","sha256":"ab40a58972be2ceab32e7e35dab3131b959aae63835d7bda1a79ae51f9a73c17","sha512":"da269b20f13fb5b0bb4628b75ec29e69bb2d36999e94b61a846cb58db679287a13d0aa38cdf64b2893558d183c4cc5df8da770e5a5b2a3288622cd4bd0e1c87b","ssdeep":"768:gOvv6ExpCVxUtrT6w8ClFd80EjPVerMKBaGXjAlEm:Hvv6xVWewtlFdGjPlkFjAlEm","tlshash":"b9c2e13197213ae9d9824ef876e498fef1651402290f390e8696adb3a98d5c73e16831","first_seen":"2023-04-05T15:22:49Z","last_seen":"2026-09-03T15:02:10.009731Z","times_seen":29773,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":316,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/1716105196343640.png","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.492Z","timestamp":1788445257492,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/1716105196343640.png HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 19 May 2024 07:53:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6649afec-2674\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9844,"size_decoded":10271,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"0d24b27d05b7b3011b53d83822985551","sha1":"3ee739624a4b581cb59cc07c38e18192259514c4","sha256":"073a619dd22d64d0db9f60ef8199b7b216a9efba06a4bc40fd319ebbf3611bc0","sha512":"08372cd184e4584d98ef097a68c49865d6977d7b19e32e1b5b62fd280185e469bf5dacf906313ec644f528d14e477d25ce87b26d974e69046d5b2e44fb9a64dd","ssdeep":"192:YiewTUfmBxN7siq+mnwBx1jOHd353+N26xyBqWnyrex41z4lvcouO:YJs1Bx1q+mnajah5u+B1x48couO","tlshash":"7f12af2316599f2d60be4c66305eafe23d6f2e0c44410b72a9100e6716a3bc2ac855cf","first_seen":"2024-01-21T15:57:30Z","last_seen":"2026-09-03T14:21:48.111985Z","times_seen":120,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":362,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/css/page-Pledge~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~page-agreement~p~60d95afb.797705c1.css","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:55.211Z","timestamp":1788445255211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /css/page-Pledge~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~page-agreement~p~60d95afb.797705c1.css HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 1952\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-7a0\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7096,"size_decoded":2355,"mime_type":"text/css","magic":"ASCII text, with very long lines (7096), with no line terminators","md5":"dd93a495000d55d5e4615244239de679","sha1":"16e7588237dcb64a56362de5ac94116fd5f9b0f2","sha256":"c8d06fc6c1f5129516d1f46106fcc48e2f134b328579b9b40ba844c0674a689e","sha512":"d1e13a3522a6c2aecacef36f34ef1d25e8a2ed2e392843b817a3f8c6e1da43e1f5213dc2c7c0ee43f0a92b1c2492f6dae117d415ab0cb5abfc7698b957736f74","ssdeep":"96:6ygZe4YTHjwG6884DZBLb2ZbH+6CsVO8Actc+fXlibIo:6ygU40ytdyP","tlshash":"0de162763539362da923e2227a94a6cd7234e812f52753eff84f6326c4c72e61d31684","first_seen":"2026-09-03T14:05:57.655452Z","last_seen":"2026-09-03T14:21:48.112729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/home-chartBox.e0871112.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.473Z","timestamp":1788445257473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/home-chartBox.e0871112.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1799\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-707\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4191,"size_decoded":2216,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4179), with no line terminators","md5":"08cb24fc9a42bcbbf5d895d53f096db9","sha1":"57a7c948fdcc4b19dc7f55a06827dcdf5868d64e","sha256":"9be75890cf4498bbe1853ed2cc8d6d7f3d0b898bd29404ec3e3dfe8c8f787276","sha512":"85eb463a2258c9bc0f9819b8c4e189badf1e2aa0cd739f6fec88112a123fbb2eea7b1b4f617aa3f2139ac667e56cc3ffcbf9d0741da37972107950ed499a5a97","ssdeep":"96:xPxGBQSEQTnrs2ntG1519H1O9pdjlIcINjr6Xc62aXV6E2pD2y4s:xZ1inpn8Xvk9pdJs3Sc62aXVfcD2yb","tlshash":"4281a665e1945c0f1dabc64fa53bc306e248390d5c46c17dbfbaa4e21a4ac40323cbb4","first_seen":"2026-09-03T14:05:57.595431Z","last_seen":"2026-09-03T14:21:48.113921Z","times_seen":2,"resource_available":true,"data":null}},"time_used":739,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":739,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/1716262362476136.png","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.494Z","timestamp":1788445257494,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/1716262362476136.png HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 21 May 2024 03:32:42 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"664c15da-1a5d\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6749,"size_decoded":7176,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"2c3719963c9575ade9d2905f8a2911fb","sha1":"57fd17aff4608173d28afd431c2417a8b5afec65","sha256":"f22061853568d37b9b8f4775622b90ad1a559a4fbbfb22491226f883c1b7fad7","sha512":"35d792bdd7681ce413fbb301da4c35905408ae390abfde1e4e96768567dc46d3541e37c74bb45f839b34c030b145da64c58b233b5e8b18dfb181ad7728890598","ssdeep":"192:tW5Jx9W9v0nCQL0rHhc0yo0Ec0Ki8MiyEqd:tW5JrXCHromRR","tlshash":"9fd19ef23c03a1edfb9998575ac70161183e4d9fe75992993a18cf6a48514a3d0fb0e3","first_seen":"2024-01-21T15:57:30Z","last_seen":"2026-09-03T14:21:48.114741Z","times_seen":19,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":379,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/1716518647660496.png","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.495Z","timestamp":1788445257495,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/1716518647660496.png HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/png\r\nLast-Modified: Fri, 24 May 2024 02:44:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"664ffef8-37e0\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14304,"size_decoded":14731,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"dccb65ee3a2193aa03db1637c8e75ae7","sha1":"b08342ac8c98e0bd1144a5db57be1a4c97d5e392","sha256":"ad184d126b0421d84fc24ecfccd2d63f897fa98dd2b00a3c37b9e1d5eb70ab4c","sha512":"dbc25e5599b8dda3a03d2bcacda522a1c0abefc89db6f94b68d0435f535e32aa6934d0ff2d6aa7b4686e8ec8dc3ea4b64a94d0a8ceee33208794e65af985f939","ssdeep":"384:zgZdO5A1jFWB6SM69HRUJmZPEflHrLbbFLzkD:zEVjFWXM6xemhEdH3bbFLzkD","tlshash":"b552c02d448b1353d07f6457d11ff472f5f52e2aa7f080a9aa9aeb2e294c5ffe114200","first_seen":"2024-12-26T01:26:43.128886Z","last_seen":"2026-09-03T14:21:48.115293Z","times_seen":3,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":379,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/chunk-1dbbf397.4fe91c8b.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:55.217Z","timestamp":1788445255217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/chunk-1dbbf397.4fe91c8b.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 38402\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-9602\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146066,"size_decoded":38821,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63305)","md5":"b71978ce92da6ee4623b49cdb8a5dc15","sha1":"ed171a48efd02021341fb318c973068a2151f4b0","sha256":"8eae34f7d1d43b64089a02882936e37e7c3a12e3697cc4f044334a7eb5022438","sha512":"6d2af4bce39c5f1d5d8fe0a885a6802276cbc1bfbff7fa49030b53b82d4fe3916dde0a487d78bbd76752a6b53b5d4051a0b727265915c24f5f48cf7948b5583f","ssdeep":"3072:sGhW+1xjVoKZbzmY+nw53AQkc1OKBPVypuvt:sGhW+zVoKZbSYcw53AQkc1OKBPVy0vt","tlshash":"96e31949731075a282f7268b53a8c610a3b64855b80ad5e871bd4c6b6d7e85c03feffc","first_seen":"2026-09-03T14:05:57.581496Z","last_seen":"2026-09-03T14:21:48.115802Z","times_seen":2,"resource_available":true,"data":null}},"time_used":614,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/api/getSiteConfig?lang=en","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.109Z","timestamp":1788445256109,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"OPTIONS /api/getSiteConfig?lang=en HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://baseinves.cc/\r\nOrigin: https://baseinves.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nAllow: GET,HEAD\r\nCache-Control: no-cache, private\r\nDate: Thu, 03 Sep 2026 14:20:56 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-Baseinvest-Token, X-XSRF-TOKEN,lang,1min\r\nAccess-Control-Expose-Headers: Authorization, authenticated,lang,1min\r\nAccess-Control-Allow-Methods: GET, POST, PATCH, PUT, OPTIONS\r\nAccess-Control-Allow-Credentials: false\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":689,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T17:23:48.268081Z","times_seen":18259592,"resource_available":true,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":181,"send":0,"wait":206,"receive":0,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/asset-echarts~asset-echarts-runtime~home-chartBox~page-fiatAccount~page-iepnList~page-marketQuotaion.8aebfe3f.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.463Z","timestamp":1788445257463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/asset-echarts~asset-echarts-runtime~home-chartBox~page-fiatAccount~page-iepnList~page-marketQuotaion.8aebfe3f.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 103075\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-192a3\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":292696,"size_decoded":103496,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65136), with no line terminators","md5":"d05ac7fbc3a9f5f55bde14ba0754749d","sha1":"b9e8b1389185bf038cce9b4fe0dadb93c2b140cf","sha256":"8167ad6d883949613b1a93b041c9ab4bd118e3ac67e6c4d4b73ef1c860b7b5ff","sha512":"cc4569584ae13c94aff0b38f7c48678ddda6d03ad3c81b85ab4e16778a2fb73f0d6a3f4e6ca1ec4d7da397052844e996f01f8f5579829b501bd129bf16eca4ab","ssdeep":"3072:1Uxjcp29MIRaY99jVUz0kLTxM1x4871PzPvlvNghiKF+Ge3ecmJ:Dp2SYwXLTxmxJ71r3lFghhFi3ecmJ","tlshash":"68541adc7284b42552e721b454bf250b92367809780fc998f629e5cabcbc55e227bf3c","first_seen":"2026-09-03T14:05:57.582834Z","last_seen":"2026-09-03T14:21:48.116425Z","times_seen":2,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":378,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/css/home-chartBox~page-fiatAccount~page-iepnList.6dc57fe0.css","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.468Z","timestamp":1788445257468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /css/home-chartBox~page-fiatAccount~page-iepnList.6dc57fe0.css HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 34\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\netag: \"6a97cd8e-22\"\r\nexpires: Sat, 03 Oct 2026 14:20:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34,"size_decoded":387,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"d6c1fe929f8f09f6ff8f3f533f626eb5","sha1":"71bc025918fe527b8d2f7ea5ac24191f1ca23cf7","sha256":"684584280994a44d205fb518c2b4ee74ba6259fedcf3f760ef8b0aa867216578","sha512":"f56b734fa6907f990e6099971e455f35fbefed3aec01e109238f661d84ddc7bc3a17e1c2c6f9952ff1e0bb18c6dde32e3b9425312607514bdd7e13863d8606ff","ssdeep":"","tlshash":"63800451d134f15571303503d00174450005410513111cd0cdd0dc15104550554104d0","first_seen":"2023-05-22T09:48:05Z","last_seen":"2026-09-03T14:21:48.117027Z","times_seen":25,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":553,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/home-chartBox~page-fiatAccount~page-iepnList.634ebaff.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.471Z","timestamp":1788445257471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/home-chartBox~page-fiatAccount~page-iepnList.634ebaff.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 40112\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-9cb0\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":116998,"size_decoded":40531,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"43588fb6d606bbb9261593df81b4ec03","sha1":"b98ed0f1a472a23ce2de68657d96f8d52c1573a1","sha256":"6bf02e4dbd5ab030183f077bb8bebb707fb5855b1d853e0641ca8649f3eb69f8","sha512":"3650f94858ed5caf7e14e66d7ce0ee22dfe262996cbe872dda1a75ed84867ad2d858188f70e680a7043f5d0ec8a3c25b57f0355442cdee6132af614f75e2f3a5","ssdeep":"1536:oW+n6mRvS9IPwvFRGLP3DBLDcoa2hW1V+2aNfHLWj2eSp7c:W6TqfDybEWD+2VjlSp7c","tlshash":"59b32aee3284702746a77275147f280742321509984aca28be6ed5d9adbd59f333bf3c","first_seen":"2026-09-03T14:05:57.590206Z","last_seen":"2026-09-03T14:21:48.11743Z","times_seen":2,"resource_available":true,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/css/app.4431f5b8.css","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:49.494Z","timestamp":1788445249494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /css/app.4431f5b8.css HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:49 GMT\r\ncontent-type: text/css\r\ncontent-length: 15534\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-3cae\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92438,"size_decoded":15939,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"95d326eeecf9072f434147fcc44d5436","sha1":"861d55c710393692df1a16fedf3b7e5b5f461963","sha256":"126bc39b59d147cf971ddc537e74a59315862cee2e42616cd4fa6a07682ea155","sha512":"01fac84dafbdc92898128ee23368698e286ec1745cb0734173dedfcf3da955ec4d15e6a32624f0752f6a8da5b9bd49b6a4d8d73ac18ddf59b5aeb2d4f38c2d68","ssdeep":"1536:gt8RcZQbu3BcKI8RBMq2rmRSh2rm8Ys5WSB:YNcOpWo","tlshash":"0c93506ef2f1322f695a856d704a7bbd3c2ca192ab020bfcbe13733687c56d71461509","first_seen":"2026-09-03T14:05:57.605362Z","last_seen":"2026-09-03T14:21:48.118018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1983,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/layer/theme/default/layer.css?v=3.1.1","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:55.225Z","timestamp":1788445255225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /layer/theme/default/layer.css?v=3.1.1 HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 2812\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-afc\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14367,"size_decoded":3215,"mime_type":"text/css","magic":"ASCII text, with very long lines (14367), with no line terminators","md5":"3d2e0d91c5c0b96abb8dbdc2234aba77","sha1":"9d55e153b30fd7414fada5718e20918e9c7f65e7","sha256":"e3144d018a6a24f733c6fc2a2ee603fb583f0030585e9d4b71bec471b78e31fc","sha512":"42bf3eff281998d088ce012b9a5910f72951c91715595572bb968fbfc5fa2b1cddacef3ca683a1734eb41114b302b6a4dad8b7432c5877b3563a080a2547ae05","ssdeep":"96:mp+Ntha8qNEp+wRY1vUPXiK6nMLPD2OtLzXyPHL/LztJDzyv2OQ7KGx1jyd2/SWz:1WmLr2OtSrzzt42OQ7KGx1jCWR2b+RcU","tlshash":"2e5221e144811299b0278721d6dc7eba32f88d43e5630daef257381f874c6dba2b6647","first_seen":"2023-04-05T06:05:22Z","last_seen":"2026-09-03T14:21:48.118758Z","times_seen":6849,"resource_available":false,"data":null}},"time_used":937,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":937,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/xau-float-5.dda1f199.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.094Z","timestamp":1788445256094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/xau-float-5.dda1f199.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 696\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-2b8\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2104,"size_decoded":1103,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dda1f199ccdf2d316fc2da48db8330d4","sha1":"f5d997f36521479dada9e1caeeb01bd493c8de0d","sha256":"c586eb6934bfb2d6ae8a4519ead2262238acb3bca441b760d5f54c2b0391a985","sha512":"a52a3d80fbc496af1bac9ea989f93b8fde4f86173acb467e2006ef72489b68516d5c77bd4b072d85916f1ea230a861d9f3e18e96258d4a6d746380208b9f9ee5","ssdeep":"","tlshash":"d041cb69d3ad8d3ef12a4208db017434392941d39b49a340746a6f790f2928f7e3f6f8","first_seen":"2026-09-03T14:05:57.600739Z","last_seen":"2026-09-03T14:21:48.119367Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/2.d13a609c.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.160Z","timestamp":1788445256160,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/2.d13a609c.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-2f01\"\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12033,"size_decoded":12424,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"d13a609ce21a5947a2e4a4b611b448ba","sha1":"14765f006c9ffaf102daf284918d1b0f31badfbe","sha256":"589336bb72b562f2f990038cd14624a7e16c7052d5811c7e608bdcbf98804c6e","sha512":"6066981ac3006a8614a5406801988f920bd5950cdd7ce368b4dc01848bfc95cb77bf65a2760e7447cf974fddaad9f18f839af775c03ee7e97ce5c7a84796e7bf","ssdeep":"192:KdhuJNs5vOjno8pzibfPpevBwJyzp6Bvj2l4Ul3AP+EroahJrdw012S4o//Jz79+:khuJNsUno+sw2cz09j2lO88ddw012JAe","tlshash":"be42c0254634a675007fc7f2862d7b41a43761c134efec48fb4b981ab72913aac0cb6a","first_seen":"2023-11-12T15:17:22Z","last_seen":"2026-09-03T14:21:48.120083Z","times_seen":31,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/20260721120741737189.jpg","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.941Z","timestamp":1788445256941,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/20260721120741737189.jpg HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 21 Jul 2026 16:07:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f994c-107b3\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67507,"size_decoded":64962,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1270x581, components 3","md5":"80a13d7516b59a2c0c57cde0a25bcb20","sha1":"324663d9c4cbeb7d58fb3338dd77aa97fe87cb81","sha256":"c5d1ff249bd5e202db6d8398bd5818caa73a33ecffd87cb620b4dc4dd485e248","sha512":"4533b9d2e594284c97229fa02030bca2cd55665fd16c959cccfab8ef9439d74af4c8ab4ceb79bc78d93ac7deefba3ff92ffcb00a0f1717aa44754ddf9e4bda7a","ssdeep":"1536:poLzQNcdea5G/f4rcruas1khmIgOCZundxVx7oIBiTPrv55dA0r4leGqNT0:pYzQgea5GIrcru70mIhn/r1kb5sHmT0","tlshash":"f363f1d3f9f84009eb651674494c2aefd2b8d664df8660cf9ea812b17fc058078de1da","first_seen":"2026-09-03T14:05:57.647577Z","last_seen":"2026-09-03T14:21:48.120643Z","times_seen":2,"resource_available":false,"data":null}},"time_used":915,"timings":{"blocked":-1,"dns":0,"connect":187,"send":0,"wait":354,"receive":189,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/20260721120744705002.jpg","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.946Z","timestamp":1788445256946,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/20260721120744705002.jpg HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 21 Jul 2026 16:07:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f9950-ee63\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61027,"size_decoded":51970,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1266x686, components 3","md5":"0c1024bc7f37858971ed4f9298f88d75","sha1":"a70294ff2958b65ffa40f36884f2d15b73587307","sha256":"8ee40aae409fd4eb0395fb9f341c252ab7c163d98b85da6c9277364452d0129c","sha512":"dc2ea36a949f4cb484db7c77378466db5c74d0b99b729c3b503257ccbdde7e9860f3ed88066b79d86e705c38c6202cbed378364189a2c5ba688354231753d73d","ssdeep":"768:B9KGzlbtjEJnpUcPf9qEiQ+F3UIxXTcrgsq2oqzsG3maR4tBAkQUnKPq+ulBu:LKGz0nIDRZUIaRq2oqAFdAkVnCGQ","tlshash":"1e53d0fdc0e0c98be9855a7a44fe0e0765152a3d83f162e3c18287d86e5e67439f3423","first_seen":"2026-09-03T14:05:57.60951Z","last_seen":"2026-09-03T14:21:48.121249Z","times_seen":2,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":-1,"dns":0,"connect":183,"send":0,"wait":370,"receive":187,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/20260721120749276224.jpg","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.950Z","timestamp":1788445256950,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/20260721120749276224.jpg HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 21 Jul 2026 16:07:49 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f9955-f8a1\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63649,"size_decoded":60453,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1266x579, components 3","md5":"57dda1b44a62512e2cd41fff22db1bba","sha1":"4c55c6081ea391cd21ad33547820968fdd2e0415","sha256":"e8e13fe7434ea931cb2045c36fce6342c33f44ef40ee40b5ffce538d7a71c36b","sha512":"ff30a64612b0abb9d3a82dd417865ff0d437d8a33e9f15d56c4e21b1a2212bebe562d450f3d74e5b5c9a09741ff8d40e6ea7aeff04532a6c1886687e76d8261b","ssdeep":"1536:b68pmgT3QonJPCzz4mnN3EdcRc6cE1Vitk3:b68wgTTnJi1n1","tlshash":"b953f14acb73ba76c07727301d210628260d4f19ee4be433da45ea0af5edb7f98212d5","first_seen":"2026-09-03T14:05:57.56498Z","last_seen":"2026-09-03T14:21:48.121895Z","times_seen":2,"resource_available":false,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":183,"send":0,"wait":376,"receive":188,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/1716105174584643.png","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.491Z","timestamp":1788445257491,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/1716105174584643.png HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sun, 19 May 2024 07:52:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6649afd6-2203\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8707,"size_decoded":9134,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"23b2d67f4fac198177a6f835a24552b7","sha1":"281fbd3c9ff168a5d452bcbec6140091f348dc07","sha256":"ebc3a7fd60aaed829245b3e010a91bfbd59619f4b302e31151875685cd01cc96","sha512":"b3a6e6230976ac651fcc9998eb63cc74ac249ddc8fbb15820d5c8afdb972473adab96bc682c25c6a1db718d0a3721d4f7342a1cc1f50d8e87f99ea0341c5858e","ssdeep":"192:MslQdqjkkRhqO04euIwS17z2cACY6gYLRwZ7YjJzw4:AsFvqO04ej5z2czgYikv","tlshash":"be02b0bbb56239361ab7bf90934f70986b799ee4e73655eb0d0c1889640737ba4044b0","first_seen":"2023-10-21T04:15:11Z","last_seen":"2026-09-03T14:21:48.122621Z","times_seen":160,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":360,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/8.1b5d7274.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:58.671Z","timestamp":1788445258671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/8.1b5d7274.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:58 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-1612\"\r\nexpires: Sat, 03 Oct 2026 14:20:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5650,"size_decoded":6028,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"1b5d7274cc9b3bfa898a3ea4a3367e25","sha1":"d7f89e10c74e2381865a639db7ff05b654b0b9fc","sha256":"87a5805472e3f115481ab4569a2d173b2e693d97e2270b6d0e5d4ab54692ebc3","sha512":"ea81c6d1e8d462f4a61296b2c74addcaffaac9dbd56125a5a90286fa789f6599a6880be3fd9fa258b585e8d0a79a769885775147641f6713ad0c32e54afbce38","ssdeep":"96:SoxGcIDEQ11snQVwQaGoqxYTdMRdzhLYOYTKF7sg:SoxGpDz12QjwLJMRduOH9","tlshash":"85c16dea7c5dbdd4d65cca0e530f2e672144a8903668cb35fc4e855493e5f011448a3b","first_seen":"2026-09-03T14:05:57.653846Z","last_seen":"2026-09-03T14:21:48.12322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/xau-float-2.454e72b8.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.088Z","timestamp":1788445256088,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/xau-float-2.454e72b8.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 782\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-30e\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2263,"size_decoded":1189,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"454e72b8917835ebc3ba579c823b1067","sha1":"dbf527dfb30a9cae57e67f234e872f90ca81302c","sha256":"c8b52207f5fa693af16138a6fec426e0c32cf6e8f5bb62424fbce1091687e9f1","sha512":"16cf9cf032edd009f88c05e9a1d9d978fd6abe3c80f27c233cefa9383279c05169292ed66c7805a8aff4919f63d22f2aef2927dc7a4eb5845261d0596bec1694","ssdeep":"","tlshash":"3741deb4d1bde413d6198249cf49a03a3a1d80e786418351704e9f9e2f685cb6e2b3f4","first_seen":"2026-09-03T14:05:57.656683Z","last_seen":"2026-09-03T14:21:48.123918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/20260721120801393920.jpg","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.958Z","timestamp":1788445256958,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/20260721120801393920.jpg HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:58 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 21 Jul 2026 16:08:01 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f9961-fb09\"\r\nExpires: Sat, 03 Oct 2026 14:20:58 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":64265,"size_decoded":58201,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1268x690, components 3","md5":"0888c22b0ac398663121734a41cf8c64","sha1":"bc8a66c9e5104f808f89d34dbfcfcd39d34d22e8","sha256":"e80c47a9c1fc22cf4563ceff796d17bba27d83e5224ed4a0af0fe6e80491219f","sha512":"b255113114be69a37829d53230f4d6d914a6c12a5d4b8ffede12f3e231415daf8bdff9ffdf29733d5515cf9af8fed70d65ff99f38c605b4884ec721eb878a88b","ssdeep":"1536:UFTO0LON2QpAOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOlHBaIP6thU3ZQessGyH:G9ORKOOOOOOOOOOOOOOOOOOOOOOOOOOM","tlshash":"a953df69acf68530c76e3bf58086a53ed210a5a83dc4c11d8e497fb8648c3e6ed5c1f6","first_seen":"2026-09-03T14:05:57.634511Z","last_seen":"2026-09-03T14:21:48.124588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1314,"timings":{"blocked":1107,"dns":0,"connect":0,"send":0,"wait":199,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T14:20:48.445Z","timestamp":1788445248445,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:49 GMT\r\ncontent-type: text/html\r\ncontent-length: 1234\r\nlast-modified: Thu, 03 Sep 2026 09:45:03 GMT\r\nvary: Accept-Encoding\r\netag: \"6a99419f-4d2\"\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3735,"size_decoded":1566,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (697), with CRLF, LF line terminators","md5":"6e1d472a8a203f1c04a3a6bc1b44ce2c","sha1":"60aaa13ac172d7da3c3fa67a6b44d8256f3730c2","sha256":"27ca06c14b2a13e5a7c7562f27d3542e21d0dc2fdd025edf47a3cfcd3a128571","sha512":"46babaf4b714d0db9d6255c8860a345bbadc555025061169ac45bf21fb8cf96b9616061ee37065e8c17ce03f0c7fe9f6def2a7b37f717a60ac12c19060a65783","ssdeep":"","tlshash":"9971652d5e6440a9c932793adef7f15d94a25b0f2441ec9078bc03294fb0f54c5c1a69","first_seen":"2026-09-03T14:05:57.615731Z","last_seen":"2026-09-03T14:21:48.125296Z","times_seen":2,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":0,"dns":87,"connect":177,"send":0,"wait":185,"receive":0,"ssl":371},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/layer/layer.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:49.490Z","timestamp":1788445249490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /layer/layer.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7620\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-1dc4\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22117,"size_decoded":8038,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22020), with CRLF line terminators","md5":"47db0e57d73194c6a41bab5b4d55e860","sha1":"9db378fa8d56979e86519f483993486dc476902b","sha256":"69025fc1818313fb94c9ca4975c6a45e8385a6fd0ab9d0c60c0ac93cd997566e","sha512":"851e8630a4e631b332027850905245cb68ea56fddab22a8b7504bb4689c1a26b955ddf1b0ef23d1b1a0ecd83d668e115c9e10caf823029046a97a9f7b5c858b7","ssdeep":"384:N1xCih92A3igrLXSt/SdMrXqE6tGLxzAOTElH0jjhtjfs8:N1EiV3i+WtXItqF13k8","tlshash":"85a2b66a754034976323906ad11fba0b31f21d24d7078128f22bb4ae1dbcd95a2b7f5f","first_seen":"2023-04-07T19:23:28Z","last_seen":"2026-09-03T15:35:46.880721Z","times_seen":1295,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/iconfont/font_2302506_w05z3emunp.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:49.492Z","timestamp":1788445249492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /iconfont/font_2302506_w05z3emunp.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 105056\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-19a60\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":290139,"size_decoded":105477,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ba06a70435b4f1c32cedd7ac37243aef","sha1":"d3e80efd23a5db7c9a850f198e9b0666ebb9d1f7","sha256":"13b4a03145b92e09d39ff35b0df6592567a9a1e67526521ef09833637e6cbb9b","sha512":"1522691e752567e9f6f8f336f0444d25004598bac59bdae09bf6825d00ecf0dec980a91838b3f1b94d1bcc2d654977cb18b6f5073eff5460241426de2714f429","ssdeep":"3072:V2L6CAhxHXW4JowHa0rk2AbxuLloWvD4Lnr3zoeqW:/rkQD4Lnr3zoeqW","tlshash":"8854d7e5e36892fc5c0e43ddae39b474360f10fe35d1ce688168ce60a653ad9d94dc8a","first_seen":"2023-03-07T15:53:09Z","last_seen":"2026-09-03T14:21:48.126917Z","times_seen":101,"resource_available":true,"data":null}},"time_used":5491,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":863,"receive":4628,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/page-home.da69aae2.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:55.214Z","timestamp":1788445255214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/page-home.da69aae2.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 511\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\netag: \"6a97cd8e-1ff\"\r\nexpires: Sat, 03 Oct 2026 14:20:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":511,"size_decoded":880,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (511), with no line terminators","md5":"f485fe14013de56ce7b5e1ab2e1df54a","sha1":"e3bfd3fa1a18ac3375d3ccb1aa0cebd63a8711a0","sha256":"f9f93abf5b7262a1a5397e0bad6337437dc714ac813f0ba5296633e790db4e81","sha512":"8ebc303546ee877d7c2f0a676fe0ea54b04df52a000eb3904341d41773e9a8e13f7cf64b0e4621dedacc95b709bb0489d21024f4ab1bb4378aaf1af08e807966","ssdeep":"","tlshash":"3cf0c07df0476c6c05bdb1e855566a47a8160c8e1e5e4df079a084ad226319a872a342","first_seen":"2026-09-03T14:05:57.643882Z","last_seen":"2026-09-03T14:21:48.127531Z","times_seen":2,"resource_available":true,"data":null}},"time_used":458,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/20260721120747753680.jpg","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.949Z","timestamp":1788445256949,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/20260721120747753680.jpg HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 21 Jul 2026 16:07:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f9953-a3ba\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41914,"size_decoded":36344,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x532, components 3","md5":"633ac6d9fe10adce342a30a539e8c7fb","sha1":"41fbeafdddfe9499dc99ab282a8980e230b3c357","sha256":"a0d5f50e37960328935d3fef4dce1bb36789828c49231e68621f026ea3edc43d","sha512":"da64876911775864a63a2958932fc18b28c96b42848f308bbb6186916e88fcd17127e4b0d5c6402283dd9b32f316416ff08be0c75e99c4ee9447dba8d0fda56f","ssdeep":"768:lPWgDnbN1q08tglD1sxbWhswi6BHgsIS+JTArk4o2Jhn:legrJ1qNg/sUQ6BH0S7r/ok1","tlshash":"6813bf0abf438938d39526f1c720e16f54f5ecd8bee274ee6dd29eb41852619300e6c2","first_seen":"2026-09-03T14:05:57.589162Z","last_seen":"2026-09-03T14:21:48.128173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":928,"timings":{"blocked":-1,"dns":0,"connect":183,"send":0,"wait":373,"receive":184,"ssl":188},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/upload/20260721120752661729.jpg","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.951Z","timestamp":1788445256951,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"GET /upload/20260721120752661729.jpg HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Tue, 21 Jul 2026 16:07:52 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"6a5f9958-c89c\"\r\nExpires: Sat, 03 Oct 2026 14:20:57 GMT\r\nCache-Control: max-age=2592000\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51356,"size_decoded":42699,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1271x686, components 3","md5":"3d27b4c9b983148fce5ff4eef377bd6a","sha1":"6bed001e621615e3b8bf1a5ae31bc8cf5091e278","sha256":"588a883d18bb49499330de2aec80cbb65eb2be612203a803769641ff61c4ad2a","sha512":"f05275cc7492a6776ea49f874d061f97328d92bcc5d238aca4135bfa29fe600cfd272d2589173c4adbbcca9cdd5eba37c9a71fbde4097b4c09830cd8e3bdf4c9","ssdeep":"1536:XaKSxXguNBFQ9OyMRfuXTyRetL+T/lH5ZXZkV:XaKSxyYhuXdt4/nU","tlshash":"6b33bf3fb6912e13dac783b40cab5b358ac68d6ea30d354bd9215acd283c1b4e9450ed","first_seen":"2026-09-03T14:05:57.569307Z","last_seen":"2026-09-03T14:21:48.129093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1105,"timings":{"blocked":724,"dns":0,"connect":0,"send":0,"wait":192,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/asset-echarts~home-chartBox~page-borrowMoney~page-fiatAccount~page-iepnList~page-marketQuotaion.429ad556.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:57.465Z","timestamp":1788445257465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/asset-echarts~home-chartBox~page-borrowMoney~page-fiatAccount~page-iepnList~page-marketQuotaion.429ad556.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:57 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5004\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-138c\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:57 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14848,"size_decoded":5422,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14847), with no line terminators","md5":"83fef373fc7ea2b2d64400bb32986e96","sha1":"03de0c573c8856dd6277e4581baf2a7cfc9f1962","sha256":"1d235a9522b9867870c2aaff6f6747caa66996b0c8c8597945278bc2746b347c","sha512":"942c2c729b9cd64916a53fcc4be611c0f5df7eae95106e789ba8bd067b3ad3d41300b6f218f8cd68dfa4c7196e02f94c5746b8c9ceecced7e66247929a191aaa","ssdeep":"192:u7Lwga54D2/v3NvH94QHD3XtmOudzLq/MOH6z1V3OwLmwb1H9bUMY0Xy:u7LwJ//PNV4qD3XodzWEOaRZOwCshry","tlshash":"0062118db991f4e91a9361e4811faa0bf1e72a78f40d94e1cab2c1d1ec74c4f4177e29","first_seen":"2026-09-03T14:05:57.584895Z","last_seen":"2026-09-03T14:21:48.130034Z","times_seen":2,"resource_available":true,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":556,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/11.288b2604.png","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:21:06.674Z","timestamp":1788445266674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/11.288b2604.png HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:21:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a97cd8e-11ca\"\r\nexpires: Sat, 03 Oct 2026 14:21:06 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4554,"size_decoded":4932,"mime_type":"image/png","magic":"PNG image data, 225 x 60, 8-bit/color RGBA, non-interlaced","md5":"288b26041e92c73bc4675be5f82226e4","sha1":"5757517333ad8f5b2b610055557bcfefaa6fe0a1","sha256":"77b6f9cf544409ef96ceefb1ba928a3e14b5533771c3525eac6faea5b22a3326","sha512":"d20c21f02fa0c11d1448ad63244f09b2444e09558f8aaa489968b412c111ff27cbd44d9e70112474792699719524a18dc89546bcf0c1fc5d58b703a2bb87ccf8","ssdeep":"96:0pdQe4Q78ZlecjFkKaSFDGo+a0zSuYxprWERMUmT31l0svo:0Yb7j0zSdLWEGUO3T0sg","tlshash":"39917dd06a50f88fd20679fb67e34168defce065ee61b45c6b6d0a226927442d81302f","first_seen":"2024-11-16T11:30:56.636879Z","last_seen":"2026-09-03T14:21:48.130829Z","times_seen":8,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/js/page-Pledge~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~page-agreement~p~60d95afb.86325bdc.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:55.213Z","timestamp":1788445255213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /js/page-Pledge~page-accountNewPage~page-accountSet~page-activityIndex~page-activityVip~page-agreement~p~60d95afb.86325bdc.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:55 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5509\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-1585\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17870,"size_decoded":5927,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17685), with no line terminators","md5":"7c5bf7ca66d2ed552a4b6f6e7917d8a8","sha1":"7b15ade055d772ded38b9d4be672b963c52633ec","sha256":"a848d721715c03dda870ea2e42b90f114f2aa195f1c581147170d69a9ecbb956","sha512":"247a0ad0e2f73183208b637255f44414d2f30b386400d315cab3dc7be095b7ce55e2a78bf06c9467f91a881a125aafa18566523f78d64fddca847bac84f2bc41","ssdeep":"192:J4gEGkxOUdHbmmTOcH4p8tEkR1z0GYu29itfJzEpMIP6UnzWIjHvK79Lci3pYryn:xwdV7/3yT5u9LtVtiJ8","tlshash":"9582975771c7e47d8d679110902a2930f12a0fe8b116d156b77cceb0b4c6d78eb2e6ac","first_seen":"2026-09-03T14:05:57.624281Z","last_seen":"2026-09-03T14:21:48.131627Z","times_seen":2,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":459,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"admin.baseinves.cc/api/currency/quotation_huang?is_class=3\u0026_timespan=1788445256901\u0026lang=en","fqdn":"admin.baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.906Z","timestamp":1788445256906,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"admin.baseinves.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 06:40:17 GMT","end":"Mon, 02 Nov 2026 06:40:16 GMT"},"fingerprint":{"sha1":"5F:9F:01:B0:25:F3:D6:86:8C:52:7D:D3:0F:02:FC:FF:8B:4E:E6:FD","sha256":"AF:C9:2A:EE:A2:A8:DE:F0:09:7A:50:24:83:F1:F4:B1:83:A5:3C:C6:08:5B:AC:20:45:17:F6:69:85:4B:49:99"}}},"request":{"raw":"OPTIONS /api/currency/quotation_huang?is_class=3\u0026_timespan=1788445256901\u0026lang=en HTTP/1.1\r\nHost: admin.baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: lang\r\nReferer: https://baseinves.cc/\r\nOrigin: https://baseinves.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nCache-Control: no-cache, private\r\nDate: Thu, 03 Sep 2026 14:20:57 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, Content-Type, Cookie, X-CSRF-TOKEN, Accept, Authorization, X-Baseinvest-Token, X-XSRF-TOKEN,lang,1min\r\nAccess-Control-Expose-Headers: Authorization, authenticated,lang,1min\r\nAccess-Control-Allow-Methods: GET, POST, PATCH, PUT, OPTIONS\r\nAccess-Control-Allow-Credentials: false\r\nSet-Cookie: baseinvest_session=eyJpdiI6IlE5SDdWeWRIU1pYUFNLMU41Y3l5XC9BPT0iLCJ2YWx1ZSI6IjU0WE14d21ld2luOXJscGJZbCtzSzVRbmlUU0RoSVdVMm56bGs5MmE1cSs1TXZHTTF4SGVpV1NZZVwvQ0JlWExRU0RUcHdJdkM5ZG9pelJjcmZVMWxnMkxqQkhrTThtTXpIWnM5Y29wS0FCakNBdkpEYm5VK3VneEpOVkhTSitkbSIsIm1hYyI6IjhmN2VmYTVjYWViMTgyN2U0MmZjOWM1MDE3OTBmNWMxMThhYTYxNDkzNjMyMjdiMTcyMDE5NTg2ODMyNWIyY2IifQ%3D%3D; expires=Fri, 04-Sep-2026 14:20:57 GMT; Max-Age=86400; path=/; httponly\r\nStrict-Transport-Security: max-age=31536000\r\nAlt-Svc: clear\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":[{"name":"baseinvest_session","value":"eyJpdiI6IlE5SDdWeWRIU1pYUFNLMU41Y3l5XC9BPT0iLCJ2YWx1ZSI6IjU0WE14d21ld2luOXJscGJZbCtzSzVRbmlUU0RoSVdVMm56bGs5MmE1cSs1TXZHTTF4SGVpV1NZZVwvQ0JlWExRU0RUcHdJdkM5ZG9pelJjcmZVMWxnMkxqQkhrTThtTXpIWnM5Y29wS0FCakNBdkpEYm5VK3VneEpOVkhTSitkbSIsIm1hYyI6IjhmN2VmYTVjYWViMTgyN2U0MmZjOWM1MDE3OTBmNWMxMThhYTYxNDkzNjMyMjdiMTcyMDE5NTg2ODMyNWIyY2IifQ%3D%3D","quoted":false,"path":"/","expires":"2026-09-04T14:20:57Z","raw_expires":"Fri, 04-Sep-2026 14:20:57 GMT","max_age":86400,"secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"baseinvest_session=eyJpdiI6IlE5SDdWeWRIU1pYUFNLMU41Y3l5XC9BPT0iLCJ2YWx1ZSI6IjU0WE14d21ld2luOXJscGJZbCtzSzVRbmlUU0RoSVdVMm56bGs5MmE1cSs1TXZHTTF4SGVpV1NZZVwvQ0JlWExRU0RUcHdJdkM5ZG9pelJjcmZVMWxnMkxqQkhrTThtTXpIWnM5Y29wS0FCakNBdkpEYm5VK3VneEpOVkhTSitkbSIsIm1hYyI6IjhmN2VmYTVjYWViMTgyN2U0MmZjOWM1MDE3OTBmNWMxMThhYTYxNDkzNjMyMjdiMTcyMDE5NTg2ODMyNWIyY2IifQ%3D%3D; expires=Fri, 04-Sep-2026 14:20:57 GMT; Max-Age=86400; path=/; httponly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15177,"size_decoded":2868,"mime_type":"application/json","magic":"JSON text data","md5":"1dff471963707b40f4dfc7fe0402e635","sha1":"9f2c7e62e28b9ec20908059d2e9f74dc4917d86d","sha256":"ce938ea63d1073a5475e864b75f8a6acfd73617322b97caee610493b0197ff66","sha512":"9618c849bbcb7df2a2c1b729ff9ea04f3a553b9d8a6c8e32ecfeaa2ed43b5d3c88d04ea7cbccccb563fe8ccd97ba5c4390163a77890a540ac7e318fae6225d1d","ssdeep":"384:yI3tCL/vWWRyEQ2qJqveKuOrGIomDWC29uhSz:yIdgXlRlQPIbuKEslCky","tlshash":"4d62e25d261d8bb8c6b79ec29dee32ab71407407dec28fc0d7ed9f88418857ba50b506","first_seen":"2026-09-03T14:21:48.132309Z","last_seen":"2026-09-03T14:21:48.132309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/jquery.js","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:49.489Z","timestamp":1788445249489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /jquery.js HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:49 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 29576\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-7388\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:49 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84342,"size_decoded":29995,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025), with CRLF line terminators","md5":"9087a9859288a8b9e5275a823c2ace1e","sha1":"f2c621911b387b2a6399c08d05c7027653a9e072","sha256":"730fa28a30b20e876e67b0ceacc14ef814ade02fc3504d91435675f5e847f287","sha512":"e46f3420f05a12c3063df19a03689b6029d479230d03fddb5d2adc4abf655c795c3c1b3777fc3d6fc7a3cfbfee089ef19d5fdc925be73d5dbdc64524a1a253ab","ssdeep":"1536:GP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:Z+41hJiz6fhdlTqya98HrA","tlshash":"5f83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T13:00:08Z","last_seen":"2026-09-03T14:21:48.133476Z","times_seen":258,"resource_available":true,"data":null}},"time_used":505,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/css/chunk-1dbbf397.859f4391.css","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:55.216Z","timestamp":1788445255216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /css/chunk-1dbbf397.859f4391.css HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:55 GMT\r\ncontent-type: text/css\r\ncontent-length: 3956\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-f74\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:55 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13351,"size_decoded":4359,"mime_type":"text/css","magic":"ASCII text, with very long lines (13351), with no line terminators","md5":"9eaaa03f95c294d151665c8bc6faf2e0","sha1":"b1b453d74b47f0b4477bc1f20844ec80b6fc54bc","sha256":"5376a83f09008dafef4f5666de7755231764549d97bd176e6339c2f3f0f108dd","sha512":"2c11a48e700f6a71b12ec8a4edb085052c7ee5ea7cfc18a5262433d4035e60f3b263112799034ae027b106453aeb661efcb2fe70d6a3eba84dc70fe1eb5ac318","ssdeep":"384:2UbeQSCRgt9BUArb6C6if65WJ1mXAA0TH5x:fb6CObhrb63if65WJ1mXAA0T3","tlshash":"8452326457003837f3774f6e0aa1e6b59f60cc838a934d9db2c0dd44d6f98b9132eaa5","first_seen":"2023-04-11T17:45:13Z","last_seen":"2026-09-03T14:21:48.133982Z","times_seen":379,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":457,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/xau-float-6.8be06996.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.095Z","timestamp":1788445256095,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/xau-float-6.8be06996.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 689\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-2b1\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1886,"size_decoded":1096,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8be06996b8a2474dd513c9da3e273418","sha1":"4ad18d17f27a1e107f17b1eab3fa6154837fd0c9","sha256":"0e3f30a701dacc0c944cbf36226d4079bdc398671ff7979c1b4337c4b3175ada","sha512":"23457f2162708027378a450b4b7c60fcef82b48881ceebff1f0879bf58712a9dc1e53419232d8ed7d0ed8bc85f159d6d51a5d870e78e8f9939340eb0ae3530f4","ssdeep":"","tlshash":"1641ff79d6bd9927e118824def057036391a81d78a918341304def5e2f28dcb6a6fbf0","first_seen":"2026-09-03T14:05:57.61934Z","last_seen":"2026-09-03T14:21:48.134495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/33.5a9cc0e8.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.101Z","timestamp":1788445256101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/33.5a9cc0e8.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 565\r\nlast-modified: Wed, 02 Sep 2026 07:17:34 GMT\r\netag: \"6a97cd8e-235\"\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":925,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a9cc0e87ba92d1847ddcd0fbc1f90ab","sha1":"d1dd2d4a0685f3b4de5adc14ad0e96ac3bf4c40e","sha256":"fc981e7e877b7df186ec5f40ecdb56554695ed420cc41dfbfd61775e6bbb718f","sha512":"2da731ae4fac4d8bf884dff0850667e84b2494290ed8841ed477a4d36a6f7cc3b766bdf1a5c93aa7f40f1b5a3f6f6e65feb998de3ed905a7706e2c4fca257c59","ssdeep":"","tlshash":"50f0e1fb5b46c2404cc06b25e4782d62fc6e18b7dbc4876d90e940d1a1b11d68b80468","first_seen":"2025-08-02T08:37:54.45522Z","last_seen":"2026-09-03T14:21:48.135186Z","times_seen":98,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"baseinves.cc/img/tabbar04.c002a41f.svg","fqdn":"baseinves.cc","domain":"baseinves.cc","tld":"cc"},"ip":{"addr":"128.241.236.76","port":443,"asn":2914,"as":"NTT-LTD-2914","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://baseinves.cc/","date":"2026-09-03T14:20:56.107Z","timestamp":1788445256107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"baseinv.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 31 Aug 2026 16:00:08 GMT","end":"Sun, 29 Nov 2026 16:00:07 GMT"},"fingerprint":{"sha1":"99:8E:95:24:DB:AA:B3:A9:6D:DD:5C:97:10:EF:B4:EF:54:6A:23:47","sha256":"A6:1C:0B:3C:DC:E6:78:7B:DD:E1:D8:39:E1:BC:19:6A:07:E7:80:F3:50:C2:97:E1:41:B9:51:36:50:DC:15:22"}}},"request":{"raw":"GET /img/tabbar04.c002a41f.svg HTTP/1.1\r\nHost: baseinves.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://baseinves.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 14:20:56 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1747\r\nlast-modified: Wed, 02 Sep 2026 07:17:36 GMT\r\nvary: Accept-Encoding\r\netag: \"6a97cd90-6d3\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 03 Oct 2026 14:20:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: clear\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5401,"size_decoded":2155,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c002a41f21d64cd3a15ed4ab1389303c","sha1":"23cb8894d30bfd8f9a81c8ca1e0a754328763456","sha256":"b3c0a16cbe043a8113f46afbc936518e6589cb18b3d907e9eb07403d0aaba148","sha512":"ea954df21c8918ea8b1ef9eb07b371bdcef449cb04ee1dea126f2934f08674ab37a5b75f4e514b15d747182f7519983ec01c7f6db098b46c0dd9c3f7e0f717c8","ssdeep":"96:Gf6FpWrNrmZTln+KLmQyntkTHIWJ20ZTdewkslkfMGb0bST6y4TMPnrUCwR8Mlg:Gf66rdQTlBLmzSIM20GwHFHYIT84g","tlshash":"84b1ffd272f45b70c10adbb0c21685647d6368fea735d74987e9af6cdc5a12e508ec40","first_seen":"2026-01-21T08:58:28.584627Z","last_seen":"2026-09-03T14:21:48.135713Z","times_seen":21,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
