{"report_id":"df74090a-d273-437d-b344-957abbf28dea","version":6,"status":"done","tags":[],"date":"2026-05-03T18:23:23Z","url":{"schema":"https","addr":"x-based.icu","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"ip":{"addr":"104.21.55.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"x-based.icu/","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"title":"Just a moment...","dom":{"size":1867,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c3d70e436207d230363c6b6f955e67f5","sha1":"c87203ae710b02ee26ddb88bf30ba7a807be0bf4","sha256":"dd1c623e8f091b54614601a11c591ad08395eeebd29199d0f9177130ee480075","sha512":"b4bb85d068434030c0cb6dff8bedae325a53e3726345fe7b80347f8c7b12d605019e731451df5b3aaed104b88cb21088352cdc74d73b723181548e7413b5790c","ssdeep":"","tlshash":"cf3146779616113dfa32d8059a80facc7048584392539ae7fe91766accc62b25f7378c","dom_hash":"domhashb05de4af389cdbee48954d73b37680b7","first_seen":"2026-04-27T15:53:49.596389Z","last_seen":"2026-05-05T20:24:44.399864Z","times_seen":12,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"x-based.icu","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"ip":{"addr":"104.21.55.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-07T18:23:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-03T18:23:01Z","timestamp":1777832581,"ip_dst":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44336,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-05-03T18:23:01.773685+0000\",\"flow_id\":363360986442878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":44336,\"dest_ip\":\"188.114.97.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"x-based.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":913,\"bytes_toclient\":2684,\"start\":\"2026-05-03T18:23:01.765054+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"x-based.icu","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-30","domain_rank":0,"first_seen":"2026-05-03T18:23:23.072532Z","last_seen":"2026-05-03T18:23:23.072532Z","alert_count":0,"request_count":5,"received_data":36197,"sent_data":2215,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"x-based.icu/","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76dfb506a832820f99186b62218131b7","sha1":"6d7eef3b3e9e0326445277a88f8fb567a1907b2f","sha256":"0d7a18fe9a439d26c6efdc1122d319ff99e21ba4317b1e4cab57fd24d2d5fe89","sha512":"e53a3d0390885937574e628287e8db6da1165db06958baff2adf4a3bd709925bb2934bbf16905c3195078fecdf462a4c6aa00f74cbe0b3515569cafeaa1fe8b0","ssdeep":"","tlshash":"e831c26e652335737ceb336b7bbfa384257290837846d421785ca7057f58c49402ecca","size":1469,"data":"","first_seen":"2026-05-02T12:58:13.163614Z","last_seen":"2026-05-05T20:24:44.412705Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-based.icu/?f=detector.js","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff461ca00e14a3a61498cd42053b87ac","sha1":"0cdee88b0c78e7a5c3621b1830cedfe49976c818","sha256":"d53bb543e8775c366c62bfc86652a68347f29af5fbb187d727ec6d26a4ddeee3","sha512":"51ba0a806d339b5e76faad29c3a20d49d42742d87d20fb479d270bd414d9e35a4ed4a0bde9997ce8c07ff3511498d800e02feb57ad892cfdc1bc1023b050a450","ssdeep":"192:/p4QsLM8EbIg27UtwryBKrV8jfG6bYGvfKaB3ni7WPO7Q5zFeJg:/poMtPEyBK6bnFiK2a","tlshash":"c822738ebda7212659b3f07a6b1fb101f7b340034148d874b89dc314bf9197a52adee9","size":10430,"data":"","first_seen":"2026-05-03T18:23:26.460336Z","last_seen":"2026-05-03T18:23:26.460336Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-based.icu/?f=detect.js","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9277adc8791fd0d3052f14030bb29f61","sha1":"fe23d6eab441c698e5a4a968c12365adaa21c686","sha256":"dd1d85303d304c4567ea4d97d21677caf94d4a6fa2edd7cf23b1f07b7068a323","sha512":"dc540359eccebd5b883026344174392a64f9b7a263a65305f0edbf14034a960a5eea690cefd1c14405e1a1dbb79db8a74cd1851f7bd81adfd8a424026f0688cf","ssdeep":"","tlshash":"8c51228b7a9620314267a53cab5fa20236366047040aced5bcdde7e4af4613d8277de9","size":3123,"data":"","first_seen":"2026-04-26T13:52:15.674628Z","last_seen":"2026-05-05T20:24:44.407404Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"x-based.icu/favicon.ico","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://x-based.icu/","date":"2026-05-03T18:23:02.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-based.icu","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 23:13:16 GMT","end":"Wed, 29 Jul 2026 23:13:15 GMT"},"fingerprint":{"sha1":"09:C3:19:3E:28:5F:6E:7F:44:72:9D:47:39:D6:5E:DA:FE:0E:87:8E","sha256":"88:58:9D:F5:1C:66:99:63:9C:59:ED:CE:B4:CD:2B:E1:AB:72:C8:14:03:32:5C:86:F4:66:83:27:D4:DC:B2:18"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: x-based.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-based.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:23:02 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nlast-modified: Sat, 02 May 2026 00:43:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000, must-revalidate, proxy-revalidate\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vW0TyitKs4u5eSaCFisGENggOWXcophd5Ds9K%2Bp2EhIYUDDkXIxRVTeQZlWVFR%2FV3mYfOlcx0ENkmzDk0qUKj61R4%2FDPDE71E2jKvKjpd7duyfzytFO%2FIGxvzOlJ6A%3D%3D\"}]}\r\netag: W/\"69f548b8-3c2e\"\r\ncontent-encoding: br\r\ncf-ray: 9f614b674dca569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"7dcc8d0dcd3ea8e2c9569ead9310071b","sha1":"fcfda8bfcb163eb69cf5afc8976475a1bec0d665","sha256":"a852c2d848c7646387e0904df6f504b29f13b344f01c09b1c832759c0ca110a4","sha512":"61ca9414d8f9a03f0c6dbbb7e04b0a8a471834abf66f5669b4c6b17b9c81fbba400b541e32b2dc4f91181b17b2a6e9922a70a468b32f00bb8a8cad4fbfb551c2","ssdeep":"192:qhF17SjKV2LURVXrLqt1cWodSLiJEdWRpIwjAQXEZryvhOuPtpZ/Zn:aF1+aAOH1dSLZd0OZryvhFtTB","tlshash":"2562b4023b8ed128ea752732b5a153fc1759cc59737507133031b926beb2d7eae19348","first_seen":"2024-11-07T13:19:23.857566Z","last_seen":"2026-06-19T09:14:11.887207Z","times_seen":4,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-based.icu/?f=detect.js","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x-based.icu/","date":"2026-05-03T18:23:02.319Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-based.icu","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 23:13:16 GMT","end":"Wed, 29 Jul 2026 23:13:15 GMT"},"fingerprint":{"sha1":"09:C3:19:3E:28:5F:6E:7F:44:72:9D:47:39:D6:5E:DA:FE:0E:87:8E","sha256":"88:58:9D:F5:1C:66:99:63:9C:59:ED:CE:B4:CD:2B:E1:AB:72:C8:14:03:32:5C:86:F4:66:83:27:D4:DC:B2:18"}}},"request":{"raw":"GET /?f=detect.js HTTP/1.1\r\nHost: x-based.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-based.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:23:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oVlYgWPa%2BkYWXMNVORSggv5PqNwzVpPDOmpx0qETy933nGKBLVsQC2YkT18IKUV9OVob9UDGYnCVQtDSIZxLu3NOclxWcYoajCQssnxBTq3R0l2zeVqHjq2h3Z5AYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f614b678e18569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3123,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9277adc8791fd0d3052f14030bb29f61","sha1":"fe23d6eab441c698e5a4a968c12365adaa21c686","sha256":"dd1d85303d304c4567ea4d97d21677caf94d4a6fa2edd7cf23b1f07b7068a323","sha512":"dc540359eccebd5b883026344174392a64f9b7a263a65305f0edbf14034a960a5eea690cefd1c14405e1a1dbb79db8a74cd1851f7bd81adfd8a424026f0688cf","ssdeep":"","tlshash":"8c51228b7a9620314267a53cab5fa20236366047040aced5bcdde7e4af4613d8277de9","first_seen":"2026-04-26T13:52:15.674628Z","last_seen":"2026-05-05T20:24:44.407404Z","times_seen":27,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-based.icu/?f=jscheck","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://x-based.icu/","date":"2026-05-03T18:23:04.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-based.icu","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 23:13:16 GMT","end":"Wed, 29 Jul 2026 23:13:15 GMT"},"fingerprint":{"sha1":"09:C3:19:3E:28:5F:6E:7F:44:72:9D:47:39:D6:5E:DA:FE:0E:87:8E","sha256":"88:58:9D:F5:1C:66:99:63:9C:59:ED:CE:B4:CD:2B:E1:AB:72:C8:14:03:32:5C:86:F4:66:83:27:D4:DC:B2:18"}}},"request":{"raw":"POST /?f=jscheck HTTP/1.1\r\nHost: x-based.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://x-based.icu/\r\nContent-Type: application/json\r\nContent-Length: 524\r\nOrigin: https://x-based.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":524,"data":"{\"results\":{\"audiocontext\":{\"ok\":true,\"value\":\"ok\"},\"timezone\":{\"ok\":true,\"value\":0},\"webdriver\":{\"ok\":true,\"value\":false},\"plugins\":{\"ok\":true,\"value\":5},\"screen\":{\"ok\":true,\"value\":\"1280x1024@24\"},\"canvas\":{\"ok\":true,\"value\":3966},\"permissions\":{\"ok\":true,\"value\":\"prompt/unknown\"},\"webgl\":{\"ok\":false,\"value\":\"Mesa / llvmpipe\"},\"fonts\":{\"ok\":false,\"value\":2},\"hardware\":{\"ok\":false,\"value\":\"48/undef [cc-too-many:48]\"},\"cdp\":{\"ok\":true,\"value\":\"clean\"},\"mouse_gate\":{\"ok\":true,\"value\":\"pointer_fine\"}},\"ts\":1777832584256}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:23:04 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSDeyO0jElo24oK6etb1UBXESvA7zJ2iC5Kw5CWtdgFUjJ%2Bp58Q290lgsNrBsg0HFUpgz5JqD7KcMS9Dgs8fb%2B%2BxpedMpfThyj8Uvw68JFohcH42MgNpCFOc%2BxdRSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f614b73acf6569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"72b266af93431360d286e35fd165ed47","sha1":"4666a7da11a418c210b9e6731cd8e86d6df61ff4","sha256":"24fb0a562df398b866a4f723d6b1e888e3a3ed3a42647f97f8e7e03be32a2d76","sha512":"3a4de3015825bd3b3650efac372c1547fee44140529f183dd4480fbf0b1be6e868385e1e9b0f1a5422791bf8932f8e7f504cf26d2e7cae09afa10f6503dab66c","ssdeep":"","tlshash":"e3900400715130f4100333d71c050d7147750403101c047ddc47473c0dfc1713053017","first_seen":"2026-05-02T12:58:13.160397Z","last_seen":"2026-05-05T20:24:44.409324Z","times_seen":6,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-based.icu/","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-03T18:23:01.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-based.icu","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 23:13:16 GMT","end":"Wed, 29 Jul 2026 23:13:15 GMT"},"fingerprint":{"sha1":"09:C3:19:3E:28:5F:6E:7F:44:72:9D:47:39:D6:5E:DA:FE:0E:87:8E","sha256":"88:58:9D:F5:1C:66:99:63:9C:59:ED:CE:B4:CD:2B:E1:AB:72:C8:14:03:32:5C:86:F4:66:83:27:D4:DC:B2:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: x-based.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 18:23:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLxLx21VWqDXqsgUXNXXX2%2F3W0k0dc4yJua%2BjCT637BCf1hwpkvtOoUK0cZLtP5ZsvtpUdg1SLBA10vBaV%2FvA8pH76ZeMTGSxc8QtaMJDD83ilYTWGfYhSOPLp8SBQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f614b642aaf5687-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4019,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"c136e05ae4ee11a53c628f651ee304c5","sha1":"b7b85de9d4d7c5929d5ee4abda66a8f3357c4129","sha256":"bd1b00e13455767aa6daa8d3b9e0de41779db20d50056c8bd9a4f7ff86739dac","sha512":"f4afc844f80fe32f02e71e72de3fef3d7718be17efb916ce8f7a82b339cbfbf877fe225ab46a0b40b731763ef9290a7cfce3ad95af6912959775a634a2a6141d","ssdeep":"","tlshash":"9d81952ba127303778b3e1463bbab78c34518443d143d562bdddb70a9fe899545279cc","first_seen":"2026-05-02T12:58:13.15226Z","last_seen":"2026-05-05T20:24:44.41115Z","times_seen":6,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":83,"dns":74,"connect":1,"send":0,"wait":231,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"x-based.icu/?f=detector.js","fqdn":"x-based.icu","domain":"x-based.icu","tld":"icu"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://x-based.icu/","date":"2026-05-03T18:23:02.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"x-based.icu","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Apr 2026 23:13:16 GMT","end":"Wed, 29 Jul 2026 23:13:15 GMT"},"fingerprint":{"sha1":"09:C3:19:3E:28:5F:6E:7F:44:72:9D:47:39:D6:5E:DA:FE:0E:87:8E","sha256":"88:58:9D:F5:1C:66:99:63:9C:59:ED:CE:B4:CD:2B:E1:AB:72:C8:14:03:32:5C:86:F4:66:83:27:D4:DC:B2:18"}}},"request":{"raw":"GET /?f=detector.js HTTP/1.1\r\nHost: x-based.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://x-based.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 18:23:02 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nzdELgukMpX3Dtg%2BZtDghnGIe1C4Uwnh1rhuxmkB4CwgENkirThC7iU%2BNJK6RcBq9LfBPy6NEXU8lQQ810N8dTicb09NXaS7m3gPks3G2qMxM4VD9LLiGTZNSoZufQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f614b667cb1569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10432,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ff461ca00e14a3a61498cd42053b87ac","sha1":"0cdee88b0c78e7a5c3621b1830cedfe49976c818","sha256":"d53bb543e8775c366c62bfc86652a68347f29af5fbb187d727ec6d26a4ddeee3","sha512":"51ba0a806d339b5e76faad29c3a20d49d42742d87d20fb479d270bd414d9e35a4ed4a0bde9997ce8c07ff3511498d800e02feb57ad892cfdc1bc1023b050a450","ssdeep":"192:/p4QsLM8EbIg27UtwryBKrV8jfG6bYGvfKaB3ni7WPO7Q5zFeJg:/poMtPEyBK6bnFiK2a","tlshash":"c822738ebda7212659b3f07a6b1fb101f7b340034148d874b89dc314bf9197a52adee9","first_seen":"2026-05-03T18:23:26.460336Z","last_seen":"2026-05-03T18:23:26.460336Z","times_seen":1,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}