{"report_id":"814c4c7c-a002-4dae-b526-f01d139c8103","version":6,"status":"done","tags":[],"date":"2026-03-23T15:58:44Z","url":{"schema":"https","addr":"asetnaik.icu","fqdn":"asetnaik.icu","domain":"asetnaik.icu","tld":"icu"},"ip":{"addr":"43.169.14.15","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"asetnaik.icu/","fqdn":"asetnaik.icu","domain":"asetnaik.icu","tld":"icu"},"title":"Access Restricted","dom":{"size":8033,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7753), with no line terminators","md5":"64f1a7763837644b6c958ad8b0069965","sha1":"3425e691f958ecca6140d54cd4d0352e1fd65171","sha256":"a3757d123c9d919ac6b079cb3144a1de18b5a0a479a3272074ee662dd7b09aff","sha512":"8daa755c1ab0218d9d93e871955a72306709e8227a0b1c54dafba3e0f117372d824c6c3ad9634b5df714e244843313656049b2aa48c9e8b2ed07e5a5af3f8572","ssdeep":"192:mj20ZL9TyhKThxpA+HLqxhMvelDNn92/TUcDjPUE:b019WkThxhMdnM1DzB","tlshash":"2bf1943142257139f53b96e2b0b093ce71b6c00ff9674664daed67a8c7cacd54a222d4","dom_hash":"domhash7a44fe9872bfa24f787bf2d7eba03c8b","first_seen":"2026-03-23T15:58:47.403279Z","last_seen":"2026-03-23T15:58:47.403279Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"asetnaik.icu","fqdn":"asetnaik.icu","domain":"asetnaik.icu","tld":"icu"},"ip":{"addr":"43.169.14.15","port":0,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T15:58:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-23T15:58:22Z","timestamp":1774281502,"ip_dst":{"addr":"43.169.13.15","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"ip_src":{"addr":"Client IP","port":40138,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-03-23T15:58:22.003329+0000\",\"flow_id\":422991517029628,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":40138,\"dest_ip\":\"43.169.13.15\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"asetnaik.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"15af977ce25de452b96affa2addb1036\",\"string\":\"771,4866,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":878,\"bytes_toclient\":1634,\"start\":\"2026-03-23T15:58:21.955644+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"asetnaik.icu","ip":{"addr":"43.169.13.15","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-03-23T15:58:44.596834Z","last_seen":"2026-03-23T15:58:44.596834Z","alert_count":0,"request_count":2,"received_data":15440,"sent_data":912,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"asetnaik.icu/","fqdn":"asetnaik.icu","domain":"asetnaik.icu","tld":"icu"},"ip":{"addr":"43.169.13.15","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8e503dcb33ffa107ebd95a810fae1f7","sha1":"859bf3a6bb0a14672976a78e06b30ec52c92fe5e","sha256":"c3913f474c93fe224152a873f7c5744a477c21db47d8676d9001077f44e2774a","sha512":"e7153e13a1c7eef85c4954d3479ecca5bc7e63b34862e09fa21a7b47d5d9a4cc324be73c18e6b3dbd82cdd6c251ca23ab5b2d5129c6db8ac1b3dfdc431f33007","ssdeep":"","tlshash":"e24175776374a2704a1a22f366bbd3c4a97a9120785b85904bdd5988113adea8333ef1","size":2151,"data":"","first_seen":"2026-03-23T15:58:47.411117Z","last_seen":"2026-03-23T15:58:47.411117Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"asetnaik.icu/","fqdn":"asetnaik.icu","domain":"asetnaik.icu","tld":"icu"},"ip":{"addr":"43.169.13.15","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T15:58:21.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asetnaik.icu","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 11 Mar 2026 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:8B:5F:46:D6:85:71:4A:E5:EE:48:2F:1E:F5:25:C1:21:F2:B2:23","sha256":"79:95:F1:73:5C:D5:EA:F9:FD:D1:89:BB:D9:4B:72:8D:64:A7:E3:8B:16:2E:8F:08:B2:4C:08:9B:BA:E1:71:BA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: asetnaik.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 567 No Reason Phrase\r\ncache-control: no-cache\r\nserver: EdgeOne_L7S_OC\r\ndate: Mon, 23 Mar 2026 15:58:22 GMT\r\neo-log-uuid: 280665075179103460\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7486\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"567","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":7486,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7206), with no line terminators","md5":"9ac45f09cda0d8a8de5ea35b39f3e189","sha1":"42bb748485509d4d006106e55327904bfef77b8b","sha256":"4caa98685db0b000b46e8707f79143a60e43446f18898a14d5f4bac10c8d8dca","sha512":"205406ba44f6e4ee7d43379627667afaf7bd802ab02c0a97ac77e2f4fea9d5c10da28bed58ca3e2d6f00bc825c1c6bdcd8448392dc791ca1d202a03c6470f9a4","ssdeep":"192:Jr0ZL9TyhKThxpA+HLqxhMvJBTUcDjPUf:9019WkThxhMUJnDzC","tlshash":"3ff186310221213df57b9ae270b093ce7176c50bf9674664dbec67a8c7cacd94a326c0","first_seen":"2026-03-23T15:58:47.406343Z","last_seen":"2026-03-23T15:58:47.406343Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":565,"dns":78,"connect":19,"send":0,"wait":28,"receive":0,"ssl":470},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asetnaik.icu/favicon.ico","fqdn":"asetnaik.icu","domain":"asetnaik.icu","tld":"icu"},"ip":{"addr":"43.169.13.15","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asetnaik.icu/","date":"2026-03-23T15:58:22.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asetnaik.icu","organization":""},"issuer":{"commonName":"TrustAsia DV TLS RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Wed, 11 Mar 2026 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5B:8B:5F:46:D6:85:71:4A:E5:EE:48:2F:1E:F5:25:C1:21:F2:B2:23","sha256":"79:95:F1:73:5C:D5:EA:F9:FD:D1:89:BB:D9:4B:72:8D:64:A7:E3:8B:16:2E:8F:08:B2:4C:08:9B:BA:E1:71:BA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: asetnaik.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asetnaik.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 567 No Reason Phrase\r\ncache-control: no-cache\r\nserver: EdgeOne_L7S_OC\r\ndate: Mon, 23 Mar 2026 15:58:22 GMT\r\neo-log-uuid: 16874010452353702061\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7488\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"567","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":7488,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7208), with no line terminators","md5":"3b8180fe21de632051ed8f6661ae86e0","sha1":"a04464139b97bf8f6c7a06d6442a6f5da5dca13d","sha256":"81150e1e0e521215434c6fda8f971f145bbe8740317e484a202e6661f853629c","sha512":"e9932a319c34e1ddebd24e8a79369c1b85f4b36bcdec67695e1cbe006686f14ee2f82f90558431d1804cc82402dbdaf5fe136bab456bde60aa24b4b31d6ef4a7","ssdeep":"192:Jr0ZL9TyhKThxpA+HLqxhMcJBTUcDjPUf:9019WkThxhMDJnDzC","tlshash":"eef186314221213df57b9ae270b093ce7176c50bf9674664dbec67a8c7cacd95a326c0","first_seen":"2026-03-23T15:58:47.408859Z","last_seen":"2026-03-23T15:58:47.408859Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}