{"report_id":"4bab69cb-d967-4cc7-84f4-e333a3ca1c71","version":6,"status":"done","tags":[],"date":"2026-04-27T14:19:54Z","url":{"schema":"http","addr":"www.clonix.vercel.app/","fqdn":"www.clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"clonix.vercel.app/","fqdn":"clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"title":"Netflix Clone – Watch TV Shows Online, Watch Movies Online","dom":{"size":31382,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2176)","md5":"7304b7ee7204ddf1f7f42376b8e2a5b7","sha1":"3ef246d89479c97660cf8375e5f11a01ddf9d12b","sha256":"46e9db1c61aebb55b3d59a03cd5debf1768ae9f40574400fefd1fe840887f68f","sha512":"c7a65c89f174f1b455b6290da068a99480f2d88976226bf8f46f3660774fae7389cb7b2a1b024b307971abdf0a50503be1a302885081030823f069784d04886c","ssdeep":"384:RyEL+qJHQn/pKlWK5K0KUzKujfKpn7Ebs:RUpkWIBxzjjfbbs","tlshash":"7ae284325df812371183c2e676652f1afda7c613c60d126cb0bd87982fa7c86989f61d","dom_hash":"domhashb855791990501a493f84f59174381e38","first_seen":"2026-02-27T01:03:13.85491Z","last_seen":"2026-04-27T14:19:56.175147Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.clonix.vercel.app/","fqdn":"www.clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-01T14:19:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"clonix.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"www.clonix.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-04-26T23:16:34.884005Z","alert_count":0,"request_count":1,"received_data":90067,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets.nflxext.com","ip":{"addr":"45.57.91.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"domain_registered":"2011-02-11","domain_rank":22756,"first_seen":"2015-07-22T04:02:07Z","last_seen":"2026-04-26T12:44:08.186341Z","alert_count":0,"request_count":9,"received_data":670697,"sent_data":4577,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"clonix.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2023-05-15T09:56:46Z","last_seen":"2026-04-27T14:19:24.607896Z","alert_count":12,"request_count":3,"received_data":2026609,"sent_data":1375,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"www.clonix.vercel.app","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-27T13:01:30.183882Z","last_seen":"2026-04-02T04:12:10.56377Z","alert_count":16,"request_count":4,"received_data":34581,"sent_data":1876,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"occ-0-2085-2164.1.nflxso.net","ip":{"addr":"49.44.220.94","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"domain_registered":"2016-03-25","domain_rank":0,"first_seen":"2021-04-25T07:21:28Z","last_seen":"2026-04-27T14:19:24.574146Z","alert_count":0,"request_count":1,"received_data":262850,"sent_data":585,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-26T22:35:53.043088Z","alert_count":0,"request_count":2,"received_data":243570,"sent_data":989,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-26T22:20:29.825994Z","alert_count":0,"request_count":1,"received_data":17812,"sent_data":642,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-08-08T14:06:38.579034Z","times_seen":18894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-08T15:36:52.725612Z","times_seen":265875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonix.vercel.app/","fqdn":"clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e989e29d62f9e1ebcc7fad675368910","sha1":"34fb249851874a721edba310117590188bd0aeea","sha256":"6d9bcf3ead4ef934083bec84e366490436ae37fa1395f283efb6bb529a0e64f5","sha512":"4d45043d1e169b3fd6e4ca8f9eac35f2dc3101c18e782d80f8d30c05f193e5e2f77023532934bd2f8d7dad3f5b74620f9bbf2b35880a9184641c3610330432f4","ssdeep":"","tlshash":"b8b0120c7453d80060b770240d0f9120143a011b10854e00790c8ac4af5452fc939008","size":120,"data":"","first_seen":"2023-05-31T01:32:03Z","last_seen":"2026-04-27T14:19:56.207492Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.5.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.5.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d84\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 27 Apr 2026 14:19:34 GMT\r\nage: 1723917\r\nx-served-by: cache-lga21981-LGA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 64, 55898\r\nx-timer: S1777299574.113124,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30879\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-08-08T15:36:52.725612Z","times_seen":265875,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":18,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-in-0819.m4v","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.91.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sat, 09 May 2026 23:54:10 GMT"},"fingerprint":{"sha1":"BA:CF:83:A2:49:82:2B:37:BD:94:59:59:6E:F1:1A:EF:93:93:59:98","sha256":"BD:9F:70:67:2B:95:0D:7A:9E:55:32:7F:59:EC:27:5B:51:63:70:4A:9F:95:60:B0:AC:CA:3C:74:D9:DA:AA:FA"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-in-0819.m4v HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: freenginx\r\nDate: Mon, 27 Apr 2026 14:19:34 GMT\r\nContent-Type: video/x-m4v\r\nContent-Length: 267712\r\nConnection: keep-alive\r\nContent-MD5: pYX28yVkH4IOMnLz7ACG7Q==\r\nLast-Modified: Mon, 12 Aug 2019 20:49:12 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 04 May 2026 14:19:35 GMT\r\nContent-Range: bytes 0-267711/267712\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":267712,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, Apple iTunes Video (.M4V) Video","md5":"a585f6f325641f820e3272f3ec0086ed","sha1":"faea17ded67d6df03c0bf8d08b2a3dcf1d5b340a","sha256":"b71753769da84bf6bda2349bd9fa2f4a0af54f87923f6b3a20d5836117be68f4","sha512":"f2071d21f0fa2fe4f91ec54609dc88765d2031730818be433a3c4648a362e556de4dc461ce7da537f7b52a5a535244eea4c21ecedcb90dfc0b7e92c56d9b98c2","ssdeep":"6144:6kCH7bTyVslQH+8ngL8999RSWh0mWlNXPsfAn9CwhnnUlx9:vyTgOigoT9Rn0/Pplhnuz","tlshash":"b54412974731a328df59973871aa2e430231c329fd6ae317f9951835b78a72e8f9530c","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-08-08T00:50:45.320951Z","times_seen":11832,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":228,"dns":0,"connect":0,"send":0,"wait":25,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices-in.m4v","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.91.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sat, 09 May 2026 23:54:10 GMT"},"fingerprint":{"sha1":"BA:CF:83:A2:49:82:2B:37:BD:94:59:59:6E:F1:1A:EF:93:93:59:98","sha256":"BD:9F:70:67:2B:95:0D:7A:9E:55:32:7F:59:EC:27:5B:51:63:70:4A:9F:95:60:B0:AC:CA:3C:74:D9:DA:AA:FA"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices-in.m4v HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: freenginx\r\nDate: Mon, 27 Apr 2026 14:19:34 GMT\r\nContent-Type: video/x-m4v\r\nContent-Length: 74303\r\nConnection: keep-alive\r\nContent-MD5: c+JdHa496slk30MRHATJcw==\r\nLast-Modified: Wed, 23 Jan 2019 00:35:07 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 04 May 2026 14:19:35 GMT\r\nContent-Range: bytes 0-74302/74303\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74303,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, Apple iTunes Video (.M4V) Video","md5":"73e25d1dae3deac964df43111c04c973","sha1":"6301d10955803c58b803d04f6e4830f0aee5d01d","sha256":"92259a1c73354bce2540a94397feed47d41bde07f23359decea3187799e5c19d","sha512":"9c610f8bc47b52c855a15cd3f66b05cd3c527db68141bfdeedd50e13f45be7ef7070f479461b5db12b693c424197e91f585a3bd5d5c7f9f9697725182a56cbe5","ssdeep":"1536:nkxpHovDAiPFnFQb+4QZ9AD17YXU8mUzDxUyzmIZk6+YviRj41mMs7:kxZovlFnJ/XbzDSww6Q5d","tlshash":"9b73020af343c43be7b981bd2e86fb1252b7f1613d6a634359c5b834aa035d4fd511a4","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-08-07T12:55:24.623513Z","times_seen":11496,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":23,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonix.vercel.app/netflix%20ver4.png","fqdn":"clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 08:44:51 GMT","end":"Sun, 26 Jul 2026 08:44:50 GMT"},"fingerprint":{"sha1":"E9:02:2C:F3:43:84:C9:2F:26:FB:21:A3:6F:A9:81:B8:6D:C3:1B:B7","sha256":"A3:83:25:AF:4F:89:6D:95:A6:7B:E8:F0:D9:DC:D4:47:DF:FD:72:6E:BB:D2:61:E3:EC:9C:B1:11:4B:9C:A8:3F"}}},"request":{"raw":"GET /netflix%20ver4.png HTTP/1.1\r\nHost: clonix.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 52934\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"netflix ver4.png\"\r\ncontent-type: image/png\r\ndate: Mon, 27 Apr 2026 14:19:34 GMT\r\netag: \"2ef5611672cb193e7e2fd635a5ddc480\"\r\nlast-modified: Sun, 26 Apr 2026 23:37:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l28wj-1777299574333-a3952f577af8\r\ncontent-length: 1979283\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1979283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1899 x 927, 8-bit/color RGBA, non-interlaced","md5":"048e0f01979bc950e14ad2e3638b8737","sha1":"a3d6c029dc69a06ef5efc6b28f905860704cc81d","sha256":"81ac7f3e1335bf3a34cf9997e418677c525292876f8fbfa6b41c8ee5288de7b6","sha512":"46194829dc58d3fb1c34cd97d2ed98926b05a35acdf740498986708ccc275fad9b44938a5127cb789080755285781bbcdf6ec71eeef62a6a6f3aeaef0a239126","ssdeep":"24576:QBE6gaqw2RYmqwFk+Jopbj4WmIzrM6q70UQWJuD8eM:2BgdZ9v0bg62XgDY","tlshash":"1e253379c889c21a68cf95e83270b4128de6f8b3576dcf50724c50d8e73a9939c95fe2","first_seen":"2026-02-27T01:03:13.860861Z","last_seen":"2026-04-27T14:19:56.178703Z","times_seen":7,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"clonix.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.91.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Fri, 08 May 2026 00:38:13 GMT"},"fingerprint":{"sha1":"67:A0:C3:05:AD:B0:BB:75:92:AA:9F:CC:52:3A:64:C3:1F:BE:44:60","sha256":"76:27:BC:0E:5E:B8:F5:FD:8E:AB:97:8F:9D:BD:7B:A0:36:F9:08:B7:5C:6C:0C:33:C2:CC:93:12:13:48:FF:24"}}},"request":{"raw":"GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2 HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clonix.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 27 Apr 2026 14:19:34 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 53304\r\nConnection: keep-alive\r\nContent-MD5: C/MXfx/tbZUxeCIfukPH6A==\r\nLast-Modified: Thu, 17 Jan 2019 20:16:30 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 04 May 2026 14:19:35 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53304,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 53304, version 2.6554","md5":"0bf3177f1fed6d953178221fba43c7e8","sha1":"83d9f039f1ba7209321c7da72d3dc6a9aa5e2ab3","sha256":"c0bceb927c506dce9f6e6f5f570e641ad580b9554be06f61508a4aee32380167","sha512":"76ebfc377313354b469aca9695cdc28bb76e8ff015156d0f2ddbb45c763d4822808014e8e742ba3dfa447981bbdd2b7603e852c77b78aa52ff8de452094ecf0c","ssdeep":"1536:t21aKxDJpWmqPuw/L5muh28j0JPVMib83e50+kPmb:t20uonjYm20MVM28uDIQ","tlshash":"d83301020c97d667910cca53e475a6bfbcc0c7c09a68d0d91a3ddb779b4b0ca8c9ea06","first_seen":"2023-05-02T12:35:36Z","last_seen":"2026-08-08T14:55:32.880688Z","times_seen":2617,"resource_available":false,"data":null}},"time_used":946,"timings":{"blocked":435,"dns":1,"connect":23,"send":0,"wait":23,"receive":54,"ssl":408},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.clonix.vercel.app/","fqdn":"www.clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T14:19:30.980Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.clonix.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T15:42:15.821852Z","times_seen":17781527,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":0,"dns":13,"connect":2,"send":0,"wait":0,"receive":0,"ssl":345},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"www.clonix.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.clonix.vercel.app/","fqdn":"www.clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T14:19:33.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 08:44:51 GMT","end":"Sun, 26 Jul 2026 08:44:50 GMT"},"fingerprint":{"sha1":"E9:02:2C:F3:43:84:C9:2F:26:FB:21:A3:6F:A9:81:B8:6D:C3:1B:B7","sha256":"A3:83:25:AF:4F:89:6D:95:A6:7B:E8:F0:D9:DC:D4:47:DF:FD:72:6E:BB:D2:61:E3:EC:9C:B1:11:4B:9C:A8:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.clonix.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Mon, 27 Apr 2026 14:19:33 GMT\r\nlocation: https://clonix.vercel.app/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-id: arn1::l9nb9-1777299573847-88b956e6ec53\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":34069,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T15:42:15.821852Z","times_seen":17781527,"resource_available":true,"data":null}},"time_used":715,"timings":{"blocked":352,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":348},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"www.clonix.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonix.vercel.app/style.css","fqdn":"clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 08:44:51 GMT","end":"Sun, 26 Jul 2026 08:44:50 GMT"},"fingerprint":{"sha1":"E9:02:2C:F3:43:84:C9:2F:26:FB:21:A3:6F:A9:81:B8:6D:C3:1B:B7","sha256":"A3:83:25:AF:4F:89:6D:95:A6:7B:E8:F0:D9:DC:D4:47:DF:FD:72:6E:BB:D2:61:E3:EC:9C:B1:11:4B:9C:A8:3F"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: clonix.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 52936\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 27 Apr 2026 14:19:34 GMT\r\netag: W/\"2d4cb8c972d8613600f5ffb694ed8089\"\r\nlast-modified: Sun, 26 Apr 2026 23:37:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l28wj-1777299574043-a691091c977c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11659,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"2d4cb8c972d8613600f5ffb694ed8089","sha1":"6512ff2a5c422205f20e9d768e61e778d8c1a926","sha256":"432e6543724ffecc4d068ee036a7c0cdd837b5f533771893c37f2a0cbeb9dcc8","sha512":"dc38e14c49846d0e8ceae2f62b362f5d3a26d9cb19336f335b60348712e68d086c3dc3063f973358b959f393e83de194ab5018b4422ce067595c583eadc0a459","ssdeep":"192:dkpK+YjbvXRXrIeh1MHfrh+1IZh4hxhRcC87ZIEpF1c6Jh48Hx66o:dbvWjzoCh4hxhRcC872EreokH","tlshash":"2532949ca704500d9733c8997b53ef5a22a940528a0787febff46408fbd5a6850b1fce","first_seen":"2023-05-31T01:32:03Z","last_seen":"2026-04-27T14:19:56.181105Z","times_seen":32,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"clonix.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.91.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sat, 09 May 2026 23:54:10 GMT"},"fingerprint":{"sha1":"BA:CF:83:A2:49:82:2B:37:BD:94:59:59:6E:F1:1A:EF:93:93:59:98","sha256":"BD:9F:70:67:2B:95:0D:7A:9E:55:32:7F:59:EC:27:5B:51:63:70:4A:9F:95:60:B0:AC:CA:3C:74:D9:DA:AA:FA"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 27 Apr 2026 14:19:34 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 49614\r\nConnection: keep-alive\r\nContent-MD5: pIMz1DwZYS7WGYf6Xb/zxQ==\r\nLast-Modified: Wed, 14 Aug 2019 17:59:05 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 04 May 2026 14:19:35 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3","md5":"a48333d43c19612ed61987fa5dbff3c5","sha1":"8a8781250b96fee7830eb63ee8dda19e5c871881","sha256":"492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875","sha512":"ff3cc72bdfb03e8d372d84001c80ecde5a8100f8675d4c427c09bbd464be7c5d430d1e10ddfb7e540262ef2b3914c22594bf4306477391dfd9819e4266de9e98","ssdeep":"1536:F5p+9SA6w1sC4S+KJj3nNfeo2JmunFRfVSF:N+9F6qBTJj3wo2JVf6","tlshash":"4323f2dbac60c267d2d35d797deb4d7c7f834a26d95e998e82c80c4c6d7c84aa3480d4","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-08T00:50:45.320084Z","times_seen":16890,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":411,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"occ-0-2085-2164.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVxdX2WnFSp49eXb1do0euaj-F8upNImjofE77XStKhf5kUHG94DPlTiGYqPeYNtiox-82NWEK0Ls3CnLe3WWClGdiJP.png?r=5cf","fqdn":"occ-0-2085-2164.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.220.94","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Tue, 12 May 2026 20:19:25 GMT"},"fingerprint":{"sha1":"81:59:D0:A5:73:77:30:8E:8B:BD:4D:65:68:CA:AF:75:A9:CA:2D:51","sha256":"5B:E7:EA:C5:EA:FD:5C:25:7F:0C:65:C2:58:B0:3F:87:4B:8D:CA:48:86:9B:B3:89:FB:5C:CF:63:8A:A4:26:8E"}}},"request":{"raw":"GET /dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVxdX2WnFSp49eXb1do0euaj-F8upNImjofE77XStKhf5kUHG94DPlTiGYqPeYNtiox-82NWEK0Ls3CnLe3WWClGdiJP.png?r=5cf HTTP/1.1\r\nHost: occ-0-2085-2164.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 27 Apr 2026 14:19:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 262393\r\nConnection: keep-alive\r\nlast-modified: Fri, 22 Aug 2025 10:30:55 GMT\r\netag: \"3761223cb1d51eddf683a72afb6cef3a\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":262393,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced","md5":"3761223cb1d51eddf683a72afb6cef3a","sha1":"12aab9367bf4a79556a091993673d81ca148e204","sha256":"5370e4e0a2035ada734ce093e4d724e5efe3dd94a243846f2b497f43001dc689","sha512":"d48a38dc12786b1c2355b0a133fb461f30d05aa3d13f78ba1b8ad358a55d2a565277bb9af0906a227cf2ffe9cd81e3a2532f3540760fb69092d629d358e5405a","ssdeep":"6144:5P6qm/aC6Lh+TIRcTzHxB30VLnmdVU8C3/MhP3xW0CzWU:l6qmSVAGEHLkVryVUnsPhid","tlshash":"b3442314927108d990ab9eb6b3107870f9f0b5d4e9bf56525afcc7eeed12df1402e20a","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-07-24T06:03:33.433899Z","times_seen":2703,"resource_available":false,"data":null}},"time_used":2685,"timings":{"blocked":826,"dns":40,"connect":169,"send":0,"wait":173,"receive":858,"ssl":616},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.ico","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.91.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sat, 09 May 2026 23:54:10 GMT"},"fingerprint":{"sha1":"BA:CF:83:A2:49:82:2B:37:BD:94:59:59:6E:F1:1A:EF:93:93:59:98","sha256":"BD:9F:70:67:2B:95:0D:7A:9E:55:32:7F:59:EC:27:5B:51:63:70:4A:9F:95:60:B0:AC:CA:3C:74:D9:DA:AA:FA"}}},"request":{"raw":"GET /us/ffe/siteui/common/icons/nficon2016.ico HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 27 Apr 2026 14:19:34 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 16958\r\nConnection: keep-alive\r\nContent-MD5: QbRf3OCb1qzQfHqJSdpnXg==\r\nLast-Modified: Tue, 21 Jun 2016 21:54:27 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 04 May 2026 14:19:35 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"41b45fdce09bd6acd07c7a8949da675e","sha1":"931e18dfc6e7d950dc2f2bbdfe31e1ea720acf7c","sha256":"abe8012eb65c0dc0ac3e87dcc1e60e1908ebd8f12b7c47a5df1856f7a7bb1edd","sha512":"a650426e681161f3673d5e56c1f6c45d609715f07e85b3a3b2c610d293fbcb04a882ac9f92e65977a7145ef45035d08870de3ab6ba331daa2ee2fb4b1ce83296","ssdeep":"48:vXswapDVp0m3T5xuzqnM6ly9mq2FtFe4iMFJ+fPHyc2/4:vcwkDVpr5YGiAVJHiyJ+Sc2/4","tlshash":"f372c8af60d3dd8dfe516ebad125cc38123c38e0edfc956bb0c14e2a0a1294266d39d0","first_seen":"2023-05-01T03:11:06Z","last_seen":"2026-08-06T00:21:46.082383Z","times_seen":6547,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonix.vercel.app/","fqdn":"clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T14:19:33.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Apr 2026 08:44:51 GMT","end":"Sun, 26 Jul 2026 08:44:50 GMT"},"fingerprint":{"sha1":"E9:02:2C:F3:43:84:C9:2F:26:FB:21:A3:6F:A9:81:B8:6D:C3:1B:B7","sha256":"A3:83:25:AF:4F:89:6D:95:A6:7B:E8:F0:D9:DC:D4:47:DF:FD:72:6E:BB:D2:61:E3:EC:9C:B1:11:4B:9C:A8:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clonix.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 221914\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 27 Apr 2026 14:19:33 GMT\r\netag: W/\"ea21e99895f273259e4a907f6f5ab46a\"\r\nlast-modified: Sat, 25 Apr 2026 00:40:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xh6pj-1777299573895-9deccdf0c4d7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":34069,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2153), with CRLF line terminators","md5":"3931bd16cc3ea6a6a500cfedaac10f6a","sha1":"bfc330839e3e2020efb47d38f949609c90955687","sha256":"a291d534fbf39641aa6e604de8a5cad9ce83b06521d26e0dbc460ad3b706549a","sha512":"b216c67623de345c91c764486dce0b4dfc44ffddf8c7a65dd103996d9369b913e948e58b9422540a869586b766c3ed891a9edd1e32bbf693ca56172b8064cb46","ssdeep":"384:BZMQXZUH35vsiGKvKKoKIKbKrjMKcW/+9L:BkvsiGCKnJk8jML9L","tlshash":"bae283315dc8213311b3c29a76612f99fea38143d70a52acb0fd479b2fb6c46989f61d","first_seen":"2025-04-10T13:13:58.918265Z","last_seen":"2026-04-27T14:19:56.187187Z","times_seen":15,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"clonix.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://clonix.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 27 Apr 2026 14:19:34 GMT\r\nage: 349356\r\nx-served-by: cache-fra-etou8220177-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 25229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163873,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"94994c66fec8c3468b269dc0cc242151","sha1":"ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad","sha256":"62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab","sha512":"190194d1f30c8b6dfcb80f9afdb75625fa5418a52405d81f15d8019bbd92510e817b25a3a18feda27d2d1231fe3921fd88fe037e1fbb1ccd08f5fe5e4742ffe3","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fM:4t04/0VUpz600I4fM","tlshash":"c1f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-05T04:27:21Z","last_seen":"2026-08-08T14:06:38.593616Z","times_seen":25978,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":54,"dns":0,"connect":13,"send":0,"wait":17,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.91.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sat, 09 May 2026 23:54:10 GMT"},"fingerprint":{"sha1":"BA:CF:83:A2:49:82:2B:37:BD:94:59:59:6E:F1:1A:EF:93:93:59:98","sha256":"BD:9F:70:67:2B:95:0D:7A:9E:55:32:7F:59:EC:27:5B:51:63:70:4A:9F:95:60:B0:AC:CA:3C:74:D9:DA:AA:FA"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 27 Apr 2026 14:19:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 20506\r\nConnection: keep-alive\r\nContent-MD5: WH4EDyAll5IJSQHKlzlmng==\r\nLast-Modified: Wed, 14 Nov 2018 18:48:14 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 04 May 2026 14:19:35 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 210, 8-bit colormap, non-interlaced","md5":"587e040f20259792094901ca9739669e","sha1":"d48b9de536ecd248ab1d923bf837c6958a9e0cec","sha256":"e1fa26cc34fda574edc01d09e374d6f10735a3fa621bdde87c104ee15453d4b6","sha512":"5e6b251454cae8e34b4dd8875ef9e1f0630295f671ba46ea8f5723d8ba29948a7efabd3074f09df6b5340e4b51c7a91f601c0b1b1b38ce460821e25e964e92c2","ssdeep":"384:4FdLgjnSkU4g5tOEkRzi8QrHAqjfhDMzBvkl3e+v+EnCectZXhN37PO:4FNyg6EkBi8Q0sfh8BvkI+vBnCeYTDO","tlshash":"b892e170cc151d0eefb8d0ad6060c878a539c1d48a59e0caefeb87ca17b55685f9c5f8","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-07-30T16:18:10.579635Z","times_seen":5680,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":434,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.91.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sat, 09 May 2026 23:54:10 GMT"},"fingerprint":{"sha1":"BA:CF:83:A2:49:82:2B:37:BD:94:59:59:6E:F1:1A:EF:93:93:59:98","sha256":"BD:9F:70:67:2B:95:0D:7A:9E:55:32:7F:59:EC:27:5B:51:63:70:4A:9F:95:60:B0:AC:CA:3C:74:D9:DA:AA:FA"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile-in.png HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 27 Apr 2026 14:19:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 151687\r\nConnection: keep-alive\r\nContent-MD5: GGpwZJPdUV4w+K1oLQaFeA==\r\nLast-Modified: Wed, 23 Jan 2019 00:35:07 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 04 May 2026 14:19:35 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":151687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced","md5":"186a706493dd515e30f8ad682d068578","sha1":"2d09cad7878e23f97cbac2784a58056c61e80f0d","sha256":"4a3bfdf68de04166878c6bfa4c5b0f57a100cad45ab80939433e8f7aeef4b7a4","sha512":"58a42545466cd303f7555a48975fe4b9ec06fd3bcb90619518df97b7d310cf284f68605650b71983213beb4ac2362d387d82d40987484a297fba9f041f8a5d6b","ssdeep":"3072:0FqkZ1XMvfRSLzMyYu0DaZTq8cD5lsozQjiUBvEKOH0JO:oXyRSLiu9ZTq8cl58jdvE/H0k","tlshash":"53e31329424f5b4976b1408cc1f87634cd256eaf9c6b8c1b41f6bee53b8ed852353193","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-08T00:50:45.310084Z","times_seen":8619,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":456,"dns":0,"connect":0,"send":0,"wait":24,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://clonix.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"13131-qF5oFiTJGhBqUUwx6s+A3oF7LMM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 27 Apr 2026 14:19:34 GMT\r\nage: 268610\r\nx-served-by: cache-fra-eddf8230081-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23715\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78129,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-08-08T14:06:38.579034Z","times_seen":18894,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":1,"connect":36,"send":0,"wait":13,"receive":2,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Amatic+SC\u0026family=Heebo:wght@400\u0026family=Josefin+Sans:ital,wght@1,300\u0026family=League+Spartan\u0026family=Montserrat\u0026family=Nunito+Sans\u0026family=Nunito:wght@300\u0026family=Press+Start+2P\u0026family=Reenie+Beanie\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:9D:A0:A4:A4:3B:62:A3:D0:B3:63:4B:5B:C3:1D:9B:09:43:3C:91","sha256":"DB:10:40:08:19:EF:D7:9C:5F:11:BC:78:DC:9F:81:F3:9E:A7:30:2F:1F:06:C8:C4:A4:DD:BC:C3:27:6F:2A:AA"}}},"request":{"raw":"GET /css2?family=Amatic+SC\u0026family=Heebo:wght@400\u0026family=Josefin+Sans:ital,wght@1,300\u0026family=League+Spartan\u0026family=Montserrat\u0026family=Nunito+Sans\u0026family=Nunito:wght@300\u0026family=Press+Start+2P\u0026family=Reenie+Beanie\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 27 Apr 2026 14:19:34 GMT\r\ndate: Mon, 27 Apr 2026 14:19:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17126,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ea1ac8bbc9c69b0b56fb7c49fb4735eb","sha1":"285c59907393b8cfc00bd0aed0dde62d8cf91022","sha256":"cd8159bdaa4cabe48f9affd3b9b28158d81e0ee0bc8f2e6e2ba5bb81e4b6bcf9","sha512":"013a4ad6e58415d51c6383982c27e59ca19bdca3d66d334805947368772a0d0fa93076dcf97eae4139e580d5025c558bfaa0d0e534c11ea6fcdf07dc9877d14d","ssdeep":"192:JekfkQHk0ktgkDyiyaqnyGbqGIwV1yuqysNnCznCK2nCkYYBt9mHo1TLlmDFXK0n:JN1hqYENIYKv286coS8r4YjQ","tlshash":"ab724f91042b9500db832cc223ce7e36ee5eb1617054c07aaffd49c9edaec665365b4d","first_seen":"2026-02-27T01:03:13.860014Z","last_seen":"2026-04-27T14:19:56.200886Z","times_seen":7,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":108,"dns":1,"connect":18,"send":0,"wait":38,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/download-icon.gif","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.91.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sat, 09 May 2026 23:54:10 GMT"},"fingerprint":{"sha1":"BA:CF:83:A2:49:82:2B:37:BD:94:59:59:6E:F1:1A:EF:93:93:59:98","sha256":"BD:9F:70:67:2B:95:0D:7A:9E:55:32:7F:59:EC:27:5B:51:63:70:4A:9F:95:60:B0:AC:CA:3C:74:D9:DA:AA:FA"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/download-icon.gif HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 27 Apr 2026 14:19:34 GMT\r\nContent-Type: image/gif\r\nContent-Length: 22171\r\nConnection: keep-alive\r\nContent-MD5: 3Ty3jbeMPgoTybd+4Z3u5g==\r\nLast-Modified: Mon, 12 Nov 2018 22:40:57 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 04 May 2026 14:19:35 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22171,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"dd3cb78db78c3e0a13c9b77ee19deee6","sha1":"9de1915d6543939218ff991b39ee5f9a11aad6f5","sha256":"4f99e4c2ed1c2b7de72f47102c64d601567f8efaad5944a08c86786cad4050e6","sha512":"e0f3e98794b9a45d11ecad95e5df5151f0af32be08c6c366e1e36bf9cfb9b33fcfb74edc7cb46e2c9c70f01777c7a4e1654f4085b599e8990afa4d6961f26b64","ssdeep":"384:PDE51qDMZ1Gi9rsmRUCAc/xxaH3jaMV4bJeRt7eY/0RfvezcNi588+v0qt8/ojGw:PwzjXAeUtV4EluXFskHr3KwdmE3","tlshash":"9ba27c6f9404c831b69255f0f4bbee96390b507977a66c6c5c2da0a43ba52cc3cd738e","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-01T03:18:31.150089Z","times_seen":4825,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.clonix.vercel.app/","fqdn":"www.clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T14:19:31.356Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.clonix.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 308 Permanent Redirect\r\nContent-Type: text/plain\r\nLocation: https://www.clonix.vercel.app/\r\nRefresh: 0;url=https://www.clonix.vercel.app/\r\nserver: Vercel\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T15:42:15.821852Z","times_seen":17781527,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"www.clonix.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.clonix.vercel.app/","fqdn":"www.clonix.vercel.app","domain":"clonix.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T14:19:31.701Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.clonix.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T15:42:15.821852Z","times_seen":17781527,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":347,"dns":0,"connect":1,"send":0,"wait":0,"receive":0,"ssl":348},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"www.clonix.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"www.clonix.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.91.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonix.vercel.app/","date":"2026-04-27T14:19:34.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sat, 09 May 2026 23:54:10 GMT"},"fingerprint":{"sha1":"BA:CF:83:A2:49:82:2B:37:BD:94:59:59:6E:F1:1A:EF:93:93:59:98","sha256":"BD:9F:70:67:2B:95:0D:7A:9E:55:32:7F:59:EC:27:5B:51:63:70:4A:9F:95:60:B0:AC:CA:3C:74:D9:DA:AA:FA"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonix.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 27 Apr 2026 14:19:34 GMT\r\nContent-Type: image/png\r\nContent-Length: 11418\r\nConnection: keep-alive\r\nContent-MD5: d5lKZzJ7qVff2IDjOpHwQQ==\r\nLast-Modified: Wed, 14 Nov 2018 18:20:41 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 04 May 2026 14:19:35 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit colormap, non-interlaced","md5":"77994a67327ba957dfd880e33a91f041","sha1":"5ba507de8c9bc4a063beecb569e89bcf9e0a901c","sha256":"b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056","sha512":"a6de315aea77f4b862fb43d08bc0664ee1c085bf551760add9d6749bd45515349d6ae416e941bf9b3fc9156aac10a73d80bf4fcc6ff61297f7155f666652ae79","ssdeep":"192:OmrrVi2S1Vk8jYiyXte75R7e8AnFdw8ozUeepPaIYXUPPiHd74HH8rZEyEwz:JrrQ2S0/I777eBk8kULYkcIHuZBEwz","tlshash":"c432b02d2632de066bddf62cb1a785707bf092c0703641e2f5c59092ec67dae121a35b","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-08T00:50:45.312176Z","times_seen":16971,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":353,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
