{"report_id":"9fbb4bb2-919b-4278-9f60-66b0de2b5998","version":0,"status":"done","tags":[],"date":"2026-09-19T07:24:45Z","url":{"schema":"http","addr":"clv.to/","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":0,"asn":39287,"as":"Materialism s.r.l.","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"clv.to/","fqdn":"clv.to","domain":"clv.to","tld":"to"},"title":"Clover Finance (CLV) Wallet | Cross-chain DeFi \u0026 CLV Crypto","dom":{"size":24524,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18878)","md5":"7e154dd4b2506fd49249b399ed3d5485","sha1":"141e5ccbfc7943d7dbc6be0ab50a8e39aa4a22ac","sha256":"c0208b29e51aeb438442ec73ab84735b90b88d3e4a9fa3253b07cf9ace4cdf44","sha512":"e816b0cfda258f0f8da5c6765aa51a41fe45f9d96c28776561a3fb8333bb5beea9630660ab562fa8a1d66430312e8cb1f01f71b7fd771cb28ecd71faef14c5ef","ssdeep":"384:4vq3YL6xIIu6x40cc/V3YQqMBHV2UrTBzHqkB:4i3YLYIIu6x40Td3bqCHV5rTBmkB","tlshash":"d0b2a72266883e37131395d9b56ba3aeb0a6410ac359192cf3fc83ed4bf2d44d4675cb","dom_hash":"domhash8a3e8d63a140ef28f91c3b7be1fe4b17","first_seen":"2026-09-19T07:23:54.420656Z","last_seen":"2026-09-19T07:24:53.053991Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"clv.to/","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":0,"asn":39287,"as":"Materialism s.r.l.","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T07:24:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"clv.to","ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T07:23:49.190546Z","last_seen":"2026-09-19T07:23:49.190546Z","alert_count":28,"request_count":28,"received_data":14931268,"sent_data":14140,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"clv.to/assets/main-CBDswgcj.js","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7fcb585b94d14c4c2ec42340c75dbcf","sha1":"81afa1440f8acaf9ccea567163016216bf1bceab","sha256":"853924f75cf707d066991b9d90e33998636f412d96db817e2e73e7dc4126abec","sha512":"4c5c4c576e8f46a9984429bc87982bb4012271e49e67006019b901979afbb495548ea8e6f8781b2e48bbcd131a3549421f7efcca5bec2903e9dcb39aaa520af5","ssdeep":"6144:CVBsCLweRfbpMlfvQGZ1VnJnfG0OvxsCJ3Bt9YFq:4FGvQu7UsqBIg","tlshash":"c1746de871a5b5616fa747f1406f050bb33e1817980d0420b264fdae35f588992bbfee","size":357749,"data":"","first_seen":"2026-09-19T07:23:54.42195Z","last_seen":"2026-09-19T07:24:53.093574Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"clv.to/assets/clv/videos/advantages-forward.mp4","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.271Z","timestamp":1789802655271,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/videos/advantages-forward.mp4 HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 3480622\r\nLast-Modified: Sun, 09 Aug 2026 16:23:43 GMT\r\nConnection: keep-alive\r\nETag: \"6a78a98f-351c2e\"\r\nContent-Range: bytes 0-3480621/3480622\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3480622,"size_decoded":3480891,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"c35944b37504dd61ec749a071743c120","sha1":"e7062eb57811812b5cbe07922c6b37dfd64bd00e","sha256":"3ab2ab65c9c762f29034a571b6de8025a7a7f7072dff3f5d6bc1e85099c57427","sha512":"08301d44691beda3b0bcdec029e6a27a404c3207d1c88754fd81815ac8e148490b9cee48f54511fcfe9a14da6fde1b551247e53a38561dba45a29184dcf581ad","ssdeep":"24576:0XtPsle4azd/eHVKR/ZY0aeSkJ8FNz3cq+m:MtPssvssQ1F1sq+m","tlshash":"042523d8ef808804d59ed83edef676720a06a1e7c0b4e98a758e45824f557e1ff02637","first_seen":"2026-09-19T07:23:54.435866Z","last_seen":"2026-09-19T07:24:53.060038Z","times_seen":2,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":28,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/favicons/favicon-192x192.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.683Z","timestamp":1789802655683,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /favicons/favicon-192x192.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 32348\r\nLast-Modified: Wed, 12 Aug 2026 08:55:37 GMT\r\nConnection: keep-alive\r\nETag: \"6a7c3509-7e5c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32348,"size_decoded":32582,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b46e1f05ab58e286764d59c5e6be643d","sha1":"c98dc920161de96c50fb9788104ead1b30cf82db","sha256":"2d95e213451396adc9c93d6f26f573006b0ac79defb2aff10e130fe68388f90a","sha512":"e97ffb9ad64a34985537e8b482e25950cf6f7be0178c9b5a9b0fde7d8742c5d7612294e7f2ca4dce840a56dd9c92621bc2f01c6b40e08ac513c681bc12e6e79e","ssdeep":"768:ITrVpuKVDfxFBM86Gj/A7rS5+Es5lrJMFAYVEWF:IfxxTqWUaFAYD","tlshash":"e2e2f1d7acd35353aece55cb013727b362aa4d8d8e3cda44252d8494fc5b21a20f7962","first_seen":"2026-09-19T07:23:54.427886Z","last_seen":"2026-09-19T07:24:53.064541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/logo-white.svg","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.221Z","timestamp":1789802655221,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/logo-white.svg HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/leaders/bitcom.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.237Z","timestamp":1789802655237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/leaders/bitcom.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/leaders/kr1.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.238Z","timestamp":1789802655238,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/leaders/kr1.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/leaders/cmsw.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.239Z","timestamp":1789802655239,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/leaders/cmsw.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/telegram.svg","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.241Z","timestamp":1789802655241,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/telegram.svg HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 677\r\nLast-Modified: Sun, 09 Aug 2026 16:21:21 GMT\r\nConnection: keep-alive\r\nETag: \"6a78a901-2a5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":677,"size_decoded":912,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4c4e46a6b1a24dc3e0c8060091d478db","sha1":"e6df7fc15f9644d0c0e43730fc3cdb3f9c5baf86","sha256":"4e99f68281a1961163967d488ef1c4e43cef3922de3522f9cb44290c76e6859e","sha512":"ecde15e71884114c73eb81f8b72ed080ed87b4bef5b0405e155dc32711de1e7ce925dc4ed61b98eb7ca575f6044761b09e6e970a59280bc1d7a5773642f185fc","ssdeep":"","tlshash":"bc01d3508268fd99a101d778d3742070b6f722f4553c8b4412ea14b0dda187ff95ccab","first_seen":"2026-09-19T07:23:54.429046Z","last_seen":"2026-09-19T07:24:53.068569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/videos/hero-animation.mp4","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.269Z","timestamp":1789802655269,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/videos/hero-animation.mp4 HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 10080317\r\nLast-Modified: Sun, 09 Aug 2026 16:23:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a78a987-99d03d\"\r\nContent-Range: bytes 0-10080316/10080317\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10080317,"size_decoded":10080589,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"9b2992fc40af5019fb2275ea1d5555a3","sha1":"a189a9c23091fd51c62b61083899f6fa4892d483","sha256":"d377fe2e40cb572a9a956d971349bcb8c87d4350a8938daf3330545bbeac6a26","sha512":"98ea638667979ab173f26e75b728cace6d69d7bf67bfc50cff9fb1d48e5945b10eddf7656a68a07c8e63ac54094903f69f90fc90acddedce4ece8030ec4c90a8","ssdeep":"24576:5y99tyJIWZA6EazFnWxCxEw2RRuCg1xOXHwmlgq8Rgt:4jtYIWm6EoFWxtdRm1fVqAa","tlshash":"8a25239cabd95180e9cd307484d4e3911637e9b3998bdbc3362e548617a06f67f2c2a3","first_seen":"2026-09-19T07:23:54.434588Z","last_seen":"2026-09-19T07:24:53.071023Z","times_seen":2,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":25,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/videos/advantages-reverse.mp4","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.273Z","timestamp":1789802655273,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/videos/advantages-reverse.mp4 HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: video/mp4\r\nContent-Length: 3484438\r\nLast-Modified: Sun, 09 Aug 2026 16:23:48 GMT\r\nConnection: keep-alive\r\nETag: \"6a78a994-352b16\"\r\nContent-Range: bytes 0-3484437/3484438\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":851699,"size_decoded":851968,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"3070e9420f991b390e988250147f4c7e","sha1":"5e3421a8c49a2c657d0c3009148a96b49e3ecf43","sha256":"62caf071b17aa09fa17ae12d3ac0b8fcc0b965ac6565e9b8d6f8702b69958a7a","sha512":"b75b0340258314bdf0335b133fbef78b9e0192e49274013e43c55b978b54a68627f7c2773e10c42344d52258ffbf122d0d67500ec100e63e157a6cb7516d2d08","ssdeep":"12288:Js0rT4WHFh45ZWNEu+Tt3eoEdOyd4I4+JzGOWR+p3KCp7ZwjgpwkZcJC4XzRqgNv:uiF8Zq6t3uOgN5wq4XFD","tlshash":"ab0523dce3157addd89120bac7d1f3502d02b901aa85d540ba8f5be61fb03d85b3aa37","first_seen":"2026-09-19T07:24:53.078908Z","last_seen":"2026-09-19T07:24:53.078908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/favicon-16x16.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.685Z","timestamp":1789802655685,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 839\r\nLast-Modified: Wed, 12 Aug 2026 08:55:37 GMT\r\nConnection: keep-alive\r\nETag: \"6a7c3509-347\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":839,"size_decoded":1070,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"2b75df422770461e76f32dda7a001b10","sha1":"7f4c863dfdc3180a1d49b801c4cd39c10101b169","sha256":"4436a7a1e43e898028b79db459e6708bce14a5549aeb5b25aed8627c362a9108","sha512":"0dbf4370c11f34f305359fdf1049388eff59d41a295ac339ab277faf9a5a0246740ff27a96bbfce87f47c4ebfb487efcbdb18153477611827f3ff660bcbc4852","ssdeep":"","tlshash":"8c0186735b2e24a5ce548379014213944b4b139fa85f5d154ffef2181e1f14490a07eb","first_seen":"2026-09-19T07:23:54.430949Z","last_seen":"2026-09-19T07:24:53.082405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/leaders/okex.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.233Z","timestamp":1789802655233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/leaders/okex.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":14,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/discord.svg","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.243Z","timestamp":1789802655243,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/discord.svg HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/medium.svg","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.244Z","timestamp":1789802655244,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/medium.svg HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":127,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/fonts/inter-variable.woff2","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.255Z","timestamp":1789802655255,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/fonts/inter-variable.woff2 HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/assets/main-Bn59egL-.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nContent-Length: 3289\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a871800-cd9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":3521,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/main-Bn59egL-.css","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clv.to/","date":"2026-09-19T07:24:14.961Z","timestamp":1789802654961,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/main-Bn59egL-.css HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/css\r\nContent-Length: 53155\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a871800-cfa3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53155,"size_decoded":53388,"mime_type":"text/css","magic":"ASCII text, with very long lines (53154)","md5":"c17595423a5c4fefe201ddfe052a9db0","sha1":"088ca8acc0c06b7bd4c704ce84f0637ad6545d75","sha256":"f29e43201695c28516bfbc0895fd33cd51e5cb043da17687b62683b1e08ad7e6","sha512":"fdf549c77a05cadaccf0d4f8a35b8108d64596491d42a42fe538ecc4a911068759689a634128870027e19a42300a70f4fd70a4a8a6d4b714f56342e13ab11483","ssdeep":"384:8AoqCKeI7VQw9hINke+vE9z6jxubyf6HDQ5/tktE40yPvEHl:dCHI7ZTI+vE9Aubyf6HDQ5/tkBa","tlshash":"9c33343177706528f13f89b6f5817ac8b020e20be65316bddae1f629c5e51930726bce","first_seen":"2026-09-19T07:23:54.424425Z","last_seen":"2026-09-19T07:24:53.086112Z","times_seen":2,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":52,"receive":25,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/clv-icon.svg","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.223Z","timestamp":1789802655223,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/clv-icon.svg HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/favicon.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.227Z","timestamp":1789802655227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 10830\r\nLast-Modified: Wed, 12 Aug 2026 08:42:04 GMT\r\nConnection: keep-alive\r\nETag: \"6a7c31dc-2a4e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10830,"size_decoded":11064,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"ce0596bcf169e7e6384bc9da4cc7fbf7","sha1":"13323176f579938b10e76f59ae8717693bfa468f","sha256":"8f3d92dfdc14ab985f152d5ca6e4e92043dd7826f1e17e6acd12d572f7997eef","sha512":"c54f4f0deb70e427e4afa02690496b00fe2f51119a78369ba40890dd771532c590c1b80533a6d292f74b1e62bf316b143ca8de6078c196f0847af24dc93bd7d6","ssdeep":"192:nKNf113bq6+ddpBgXauITBZgwR5dw8b3JEP7fRbYAPj9QVOLr6ecNSG6GHDTrYO:nWtFGbpB8/ITBZHRTwgiZbBL9ySLcxTd","tlshash":"ec22bfea71c40a3fba8a3d2911f5c599ce53a1e8f5073471642d2dfc4908ad8e52cb2b","first_seen":"2026-09-19T07:23:54.431972Z","last_seen":"2026-09-19T07:24:53.088481Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":25,"send":0,"wait":51,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/leaders/polychain.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.230Z","timestamp":1789802655230,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/leaders/polychain.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":14,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/leaders/huobi.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.232Z","timestamp":1789802655232,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/leaders/huobi.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/leaders/gate.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.240Z","timestamp":1789802655240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/leaders/gate.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/logo-gray.svg","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.240Z","timestamp":1789802655240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/logo-gray.svg HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/twitter.svg","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.242Z","timestamp":1789802655242,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/twitter.svg HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1312\r\nLast-Modified: Sun, 09 Aug 2026 16:21:22 GMT\r\nConnection: keep-alive\r\nETag: \"6a78a902-520\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1312,"size_decoded":1548,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9368819592c9536af2ffc3f3a1da1c07","sha1":"1eb11c31f147a846d6cb67a340220c40f7f682b1","sha256":"e0a141900787bc96e931f1d9e9ae0823c99882141c757e2c03c442da424b008e","sha512":"d00d832c8edefdc058a96e3705c2a2176bd027d7d3f26046339c5f429734cfac3e787a066ecf7d4d2f52e94815095de1fecf450fe4ec2c4d647369aa004d38b9","ssdeep":"","tlshash":"3b21ebe5e3f8f1e1e100fbd8937559313d9b28b76b36ca6d4356a940e24141e58acc5c","first_seen":"2026-09-19T07:23:54.425634Z","last_seen":"2026-09-19T07:24:53.091157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T07:24:14.565Z","timestamp":1789802654565,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:14 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":127,"connect":25,"send":0,"wait":26,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/main-CBDswgcj.js","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clv.to/","date":"2026-09-19T07:24:14.960Z","timestamp":1789802654960,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/main-CBDswgcj.js HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:14 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 357749\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nConnection: keep-alive\r\nETag: \"6a871800-57575\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":357749,"size_decoded":357998,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43429)","md5":"e7fcb585b94d14c4c2ec42340c75dbcf","sha1":"81afa1440f8acaf9ccea567163016216bf1bceab","sha256":"853924f75cf707d066991b9d90e33998636f412d96db817e2e73e7dc4126abec","sha512":"4c5c4c576e8f46a9984429bc87982bb4012271e49e67006019b901979afbb495548ea8e6f8781b2e48bbcd131a3549421f7efcca5bec2903e9dcb39aaa520af5","ssdeep":"6144:CVBsCLweRfbpMlfvQGZ1VnJnfG0OvxsCJ3Bt9YFq:4FGvQu7UsqBIg","tlshash":"c1746de871a5b5616fa747f1406f050bb33e1817980d0420b264fdae35f588992bbfee","first_seen":"2026-09-19T07:23:54.42195Z","last_seen":"2026-09-19T07:24:53.093574Z","times_seen":2,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/leaders/hyperw.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.234Z","timestamp":1789802655234,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/leaders/hyperw.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/leaders/bithumb.png","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.235Z","timestamp":1789802655235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/leaders/bithumb.png HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 20 Aug 2026 15:06:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a871800-cd9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3289,"size_decoded":1195,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"46846e5ed858d94abf7b7359f3e047fa","sha1":"9f30129275354bd26fba125f9cb55f9bb357c4ca","sha256":"91768b201b2e6f3ffd304935521831cba3cbf74e2ec7aaf3b365a1a13f242747","sha512":"e118dc4e385d9c5e0c839b8c73b3076d756ffd89648a5ddf74d1eb8c209f03b1c757f32c19af7b6ee0da9a010d76511d29827d684b4506f0838144315dfb314e","ssdeep":"","tlshash":"d461c4430aa4c4c52328d23c6fd6b175ca435587c7ac6c1d72ee429d5fe2e5189e33e6","first_seen":"2026-09-19T07:23:54.423131Z","last_seen":"2026-09-19T07:24:53.066262Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/youtube.svg","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.245Z","timestamp":1789802655245,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/youtube.svg HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 611\r\nLast-Modified: Sun, 09 Aug 2026 16:21:31 GMT\r\nConnection: keep-alive\r\nETag: \"6a78a90b-263\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":611,"size_decoded":846,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf54877d16bfc34b98746cf9a9484e03","sha1":"2d5b6e53c6862364db3d12a1eb967768a42b784a","sha256":"d211d336f0683577d285ca69a5bfb49dfcd58f874dbdce37fd2bb4bb9addd85c","sha512":"188801e5d701bbf4458b6c71120255eb949fc70dff9475c4d576d13b3afb62811935a897e731d489b3386c82fbda6086d1257cd468cc967317ff1e1c8cdf2f04","ssdeep":"","tlshash":"e5f07df7d6e7b754fa42c322c6e876bd31af106032650f95da7063b4a0150819a4c4d5","first_seen":"2026-09-19T07:23:54.429991Z","last_seen":"2026-09-19T07:24:53.095605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clv.to/assets/clv/images/tiktok.svg","fqdn":"clv.to","domain":"clv.to","tld":"to"},"ip":{"addr":"45.142.141.209","port":443,"asn":39287,"as":"ab stract ltd","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clv.to/","date":"2026-09-19T07:24:15.246Z","timestamp":1789802655246,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clv.to","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 11:34:19 GMT","end":"Wed, 11 Nov 2026 11:34:18 GMT"},"fingerprint":{"sha1":"B7:82:89:03:4B:89:7F:A9:32:B3:20:4C:42:23:E1:BA:4F:82:BB:C5","sha256":"26:FA:E3:90:69:42:BB:26:5F:68:30:0A:69:00:8F:63:94:48:0F:0B:59:2C:3A:7A:68:3B:72:DE:C4:CF:DA:EA"}}},"request":{"raw":"GET /assets/clv/images/tiktok.svg HTTP/1.1\r\nHost: clv.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clv.to/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Sep 2026 07:24:15 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1690\r\nLast-Modified: Sun, 09 Aug 2026 16:21:33 GMT\r\nConnection: keep-alive\r\nETag: \"6a78a90d-69a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1690,"size_decoded":1926,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7590c3f0111d49f1664b47a5537752f5","sha1":"974e65ee947dd53349cc370fc3ed126b3f7ef22a","sha256":"5ca4a8bd152dc6ebfab33710dad658b7750dae15d5d253033203f09a609ae865","sha512":"c0091cdbe9647eab53a365e8c273bb12f3185c6a5fd969643840096ecf537708d5922fb5ad6541d310c62ef489d1b64c68506acbb948906bc8d3a727c4b0fe2e","ssdeep":"","tlshash":"2231f1f79bd4f7e1e0c1ebb49b15d2b6725b30b67e9e970683a0eba0700506648cc881","first_seen":"2026-09-19T07:23:54.433514Z","last_seen":"2026-09-19T07:24:53.098381Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"clv.to","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}