{"report_id":"a76e3723-1059-42c0-8df2-45693fd1a137","version":6,"status":"done","tags":[],"date":"2025-11-23T12:42:54Z","url":{"schema":"http","addr":"clonedfirmregistry.com","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"clonedfirmregistry.com/","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"title":"Home - Cloned Firm Registry","dom":{"size":158529,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10901)","md5":"b5182586a3ed3128ec7df275447f702f","sha1":"fa866cabaa2d28e1cdd18108237b299218abe43a","sha256":"40979227a8e900be91a3a3e2d7a2929e00a8426ac4a9c813e829fd1fd168d819","sha512":"a0bd47a0fa3f8cc0f56e85a60504f0518037206558fcb84ac4d9d5a15c35d786695d4bf8c8d7abec46d5892176c5df787fe0365a4446c5cb9c7a3b626dc22785","ssdeep":"3072:W+zWb2Nmz5gwo5VXkmz5gwo5VXh5tmrg6YBd/D8UyP57/:B1eTQ","tlshash":"e6f34c32f98995bb326f12cee11f732c508b8ae5da405af6b3f9406c53e0cd275931a5","dom_hash":"domhashdd70b8ad56d872ddae9cb361d536d9a0","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"clonedfirmregistry.com","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98","country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-28T12:42:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-16T22:13:25.550079Z","alert_count":0,"request_count":7,"received_data":217288,"sent_data":3869,"comment":"","tags":null,"fingerprints":null},{"fqdn":"b4270182.smushcdn.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-02-22","domain_rank":0,"first_seen":"2025-11-23T12:42:55.634212Z","last_seen":"2025-11-23T12:42:55.634213Z","alert_count":0,"request_count":10,"received_data":506822,"sent_data":5286,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"clonedfirmregistry.com","ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":48,"request_count":49,"received_data":903960,"sent_data":24474,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"All in One SEO:4.9.0","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Site Kit:1.166.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"All in One SEO Pack:4.9.0","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Elementor:3.33.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-11-16T22:13:25.532985Z","alert_count":0,"request_count":4,"received_data":66682,"sent_data":2357,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2025-11-16T23:06:27.075537Z","alert_count":0,"request_count":1,"received_data":1027,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-11-16T22:16:03.162694Z","alert_count":0,"request_count":1,"received_data":431472,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/all-in-one-seo-pack/dist/Lite/assets/table-of-contents.95d0dfce.js?ver=4.9.0","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d435b2968cda40d69a5bc7cc5383f46","sha1":"7bf26b1edaac6db5943e6701ab82840c49db7d20","sha256":"4b69179a0538863821c36d742825a6a4fab601aa56483d7ac09c7e8cbb4a1a8e","sha512":"cb341f3ba2a329edbe05775aaf9e00544c2dbaceb664a5e2c343c429a688f978b216d3b4adfcf3053e383bd8444cc84752cceee6a4821e9bc8c71cc9cc62440e","ssdeep":"","tlshash":"bc012b54e190353104fd2e9ec9f235d2e74d2159718ac0293cf9cd0f1ab58aaf170ab3","size":685,"data":"","first_seen":"2025-11-06T17:37:37.032769Z","last_seen":"2026-04-04T11:09:44.543573Z","times_seen":5979,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T12:49:15.274165Z","times_seen":638661,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"39ae0329e69b6736d149a03a889e5ae2","sha1":"04b7337750c4ae4cb685f42d0a0e8aa6f7c44a2f","sha256":"90133a6c180efa76afc59578d6d9a166471a8d89db634cb4f1c6ef84b5a58271","sha512":"341fb258a2b8c9e70fd2fce912d81aca6c70a0b683a403cc67fa56fe22fdb1332fa1c1f004ca756a8d9d9db827f6f801be6e3fd7eafdfbfb7816014b2ae3819f","ssdeep":"768:j/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7La:7tDD1+WE9A5yLcWJ9mBtIoERuWfRMBK7","tlshash":"5c13955171aaca2941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","size":44258,"data":"","first_seen":"2025-11-11T15:45:08.534912Z","last_seen":"2026-04-04T10:08:25.671132Z","times_seen":6600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/posts.aec59265318492b89cb5.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4eb94422648c909222aa4aa078a98425","sha1":"1c1384c7181fb659681dd27b9272b9cfd5eb2018","sha256":"ff5eb886fa582a52b903f58ac233b44a2c35e17b8553fd9e7e6230486833d93a","sha512":"44776492f2435e7db9bd99107b44dcddffc022d820c490c38e4e75f6b0b7cc14431dcf2671a03225a919a167e669b551788448eada9c3cdf5f19c34a916194bc","ssdeep":"","tlshash":"1361785535976c31ea4f4187b80b010e6e021bfaad0570c9ba69d8d69af0fc73361b70","size":3317,"data":"","first_seen":"2025-11-11T17:30:18.706728Z","last_seen":"2026-03-27T23:36:39.614186Z","times_seen":971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f22859374f227fd915eb960469409dad","sha1":"54295ffbcbca79fb91f50b3d60ac0311f119c511","sha256":"0723f9bf9ae8db418e4513d4b548809c81856a7f2d54be4b34a93d1e3c54a288","sha512":"5e389202fb840f6464e418012f3c9dea9943f9485e7b5fe93c80acbaa1856f77d5403f4f061abd1c60a078f81a75faecda20d95e3f0d6a7785cb188ad3c95d85","ssdeep":"","tlshash":"c80120a030a2b8b605af40cb74c3056c25502df2740668a2b9cb84c12eb4f953342778","size":752,"data":"","first_seen":"2025-11-11T20:38:15.182558Z","last_seen":"2026-04-04T07:48:11.475571Z","times_seen":982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-04T12:45:57.140499Z","times_seen":147484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.1.3","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"112ff84cb9de5f630790f622925995f0","sha1":"efd004b998bbd64c18a8a6a68bcccf7090e38346","sha256":"80b616dced78fe1579fc6e6f99982a0f3d38b2e562790d877ff4b782388bff43","sha512":"714a431f871150701432b14d159b45a910cc32668d55975c09ce48011ab31db87c6679a3622ab5e8caad36a7b32b565ab9104660ba1888f61b8efdbe07ed3578","ssdeep":"","tlshash":"8521c0817efc491516d921e0c92ac4087069fc217985986d8a2820ea9f95fea9cd17a7","size":1236,"data":"","first_seen":"2025-10-25T19:27:43.30869Z","last_seen":"2026-04-04T09:33:01.274882Z","times_seen":638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.1.3","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55bf125302bcf8c093a69a2a70c98799","sha1":"3409bf8683c55120111c93ad1e6d296f24183724","sha256":"387b6f25925a4ac7a5d9f1c6b9a97839c1b305f27ab892fc6123926d1a47461f","sha512":"66d50acf0768d4de2fdb8b6741436932edd6996ba770568c0a995ffd62c501137c178a847e292628c5188e52de1096122a288927d4cbd0a1fd419348ca2929a0","ssdeep":"384:NCxrOeCPhR/iF/iiM05iJfiT3iFQJklrzKCQy64w/ibfiw3i75iVfiW7Bfij3ixw:8riJR6F6z0AJaTyFQJklrzKCQy64w6be","tlshash":"4282eca5fedc962c00e512f5e56a528db42c5022f806a89d3f3cb5f48ae0fd74cc5a5b","size":18180,"data":"","first_seen":"2025-10-23T23:07:23.868013Z","last_seen":"2026-04-02T07:02:06.934376Z","times_seen":426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-P36C83GM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b13a0ec9a6c3fb7804694bb6ca49db2c","sha1":"6d3bb5337648d2a2aa7729c2e63c1f482dd70ab9","sha256":"d702d4ebae820c7c7d8c9992550bbbb247a3d5dee730309e206f336d252b666a","sha512":"4461b26c7a860c3ea2c1deb70019dfb3594ff8f64f67d6bdeab747881cb52c52a774d017ad9576804be0d18e6fc3f0f88fbad803af7d767c8e8f559253b61525","ssdeep":"6144:VJbPBUKitJeUI2XVUULUVWo6O7GQEO7QZ2ElVFBoOr+Lu:7bJDi2UnVUUtO7QZ/","tlshash":"40941ace73d674225396f078502f018ba57b28a2b45cc896f1c9cde12e74a9a4277f7c","size":430868,"data":"","first_seen":"2025-11-23T12:43:08.215181Z","last_seen":"2025-11-23T12:43:08.215181Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd53af9dd3f0878807fb84a32212f8f3","sha1":"32b70d70b1431fb7699e145a286132fe3d885201","sha256":"b247bcd9d5bd94b74d6ea69670c5c60f104f6515f2d56f6971722cf43492be07","sha512":"f94191fc02a7e671945743bcb194e1e064a964c48137a7d62df4f681559fc1dfc81cbe13780f4b655b47dc03cd8d55df2fd1120ad1450f34929c8bf96671cae5","ssdeep":"96:BpfNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:rVNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"4dd153980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","size":6248,"data":"","first_seen":"2025-11-11T15:45:08.498293Z","last_seen":"2026-04-04T10:08:25.623092Z","times_seen":6561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-04T12:33:23.623476Z","times_seen":210045,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-04-04T12:45:57.159167Z","times_seen":72132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.8521a0597c50611efdc6.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d59ada857f43edb9541ca2b0bb88e897","sha1":"9a1a2e89f6e293fa8ec5d3c6eaabef25b836c441","sha256":"00a240ab46a72f1bacc80c5f1f7d7595620230d10027565a809de218d9fc1978","sha512":"e300440cb97200fbc00cf2006dd74cba5c134f6ef52527b5abe1806f165c69442ce5c4db4621ceedca91980c766585e7b6e5fd3c2c40f947505636e7c916b99f","ssdeep":"96:BLm3CQcqOf55/UEljUkkRk7PA2goL/V2VsVQKSGfV/xZdUyKfKAtZ2JWEfPvkW2e:hmSjqOf55/UEpUTW7vgoL91SEV/xZdUE","tlshash":"cbb1526272922977c58f816b77434a2df2322998740652ad7a79acef11f1ec033f1b34","size":5240,"data":"","first_seen":"2025-11-11T15:45:08.495138Z","last_seen":"2026-04-04T03:43:38.320899Z","times_seen":4156,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-04T12:33:23.670752Z","times_seen":237005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a28b0a09e44a8d4a6b92dc177466510d","sha1":"3c80d00bdc95ebbf2dd392162d54764d2d638ec9","sha256":"faa0c40586080e3658a17938bfa85a41163f27c5fa4aa7e953fa23e47f88e4df","sha512":"03d1007500885ca134076fb789ede5ee4bad85e64cd6d51f1b2c707d6156ba69a3753abfb40b6ad9fb6b4582e163346f8b266fd1cbacabe869a2ec3bef7ed5ce","ssdeep":"1536:SCxmDuqHrrU0yQ5RSSYeAjA6c9CSTCgl83Fn9A4cR8+KHiA2+9XS/9OfaNQAzeLl:ny2VA9wAu","tlshash":"db73f9c53152f8b60bfb44da902b4406f22609b8740da4d5bff9dce594b4d8a133bb79","size":73735,"data":"","first_seen":"2025-10-21T21:24:49.238682Z","last_seen":"2026-04-04T08:21:08.951842Z","times_seen":7309,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"869d031178e779307161c3b9e9704995","sha1":"5b1ff9cd2f499bb4e9791dad5f5f86681cc6bb73","sha256":"7b770ef0ba6f4ee0b6023c9384f40b612967bc3be6e269b09b8d698d0857d2f1","sha512":"36474ba99389280313b807b815567ee54780738eb4bc8bb9e48b609bec06b26dac1b2827fb43e24182e0da727535c4bfcb9055878926dc35d06f885858cac3b7","ssdeep":"","tlshash":"c861c99e3775348b32b604d16a3f0e07fb7258361a88d034cab9e7141cb14a3d37ae4a","size":3393,"data":"","first_seen":"2025-11-23T12:43:08.223111Z","last_seen":"2025-11-23T12:43:08.223111Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T12:42:36.869419Z","times_seen":195797,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-04-04T12:39:27.388544Z","times_seen":62097,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/form.71055747203b48a65a24.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1fadfda0cfde2fa50655a6da0ed6a98","sha1":"486fefcb0e227b78364bd6bcc56cb8a6670a4f48","sha256":"543284d598ba0b012bae1a49f1e520addc012ab023759d5b33288429bba4f78d","sha512":"3dfa88e07530f04b49e1b880f92e4d202833f9d5afc7406c137774b37a38e22749154115a1e42fa3776ff320ec28348bea0f6388c243af5cc75f4b1fc8bbc08f","ssdeep":"384:9PfucUQ8HOfXXtaij86dYmpbaX0QY+iECkGWWhdNMCHr5w//sjKHqXt5fsbu8sUU:9PfucUQ8HOfXXtaij86dYmJaX0b+iECl","tlshash":"e79282a13161688b4a9e24bab893009cb70325bcb686704eb5fc08ef9774dc1733537b","size":19776,"data":"","first_seen":"2025-11-11T20:38:15.197102Z","last_seen":"2026-04-04T07:48:11.485827Z","times_seen":1013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0735683ac8b59f84f02e4669ba5acbf","sha1":"5b6be32672e19f4248d503029c3c4fb77ccd52f9","sha256":"1b023ce6e0fcdac292ce0f5a7aa4ec3e8fd74f348c287fecdea634c4dfaa73f9","sha512":"1e2f9b9e8cb27163c704fbbfe651a3e4e4da8057fcc54d338225fa76f93dff681f55ba146c74c3962c6cc60fdddc66ca9fdcb4671d1866134ae32e4eed00176d","ssdeep":"","tlshash":"20014c3324810afbc9fab802575a77993a5333ead5b4741049dc450434bfd07e0d4cc8","size":706,"data":"","first_seen":"2025-11-23T12:43:08.223872Z","last_seen":"2025-11-23T12:43:08.223872Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4913f164c19428cc6084ea9cd544892a","sha1":"651110f7a0047c49a4a1b5862f2d2f3a2bf467dc","sha256":"a31567b34498e4680f7b5cf5fe2d13bd9f7c30b79089c3533ee7aa1586290723","sha512":"f7c74091f8698537479ebe785fef83a61523b828f805047466acc61b3d48db39bbd098395f784f349eb392f6b8c514921a90dd6989905dfba914d5ed1b4e3fb7","ssdeep":"96:+6sN0Z9Z4JfrjqoiNDmEl8OWZp5dfL0mAleNzwVeLUVU2j2KBKGarNcl8/2:JsNGyrjpiN4594mf0IQ9v7G/2","tlshash":"75c152941694fd2b31e139d8e01b9734652ec0337c1af981fa32dced64e4ed183aa532","size":5667,"data":"","first_seen":"2025-10-21T21:24:49.261004Z","last_seen":"2026-04-04T11:24:28.005068Z","times_seen":17856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-04-04T12:45:41.534662Z","times_seen":176059,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3368f43911c646878fe6d1f2758dde28","sha1":"27802144a4b9e1040bb1d54f617a01758580fa7a","sha256":"d53b0faf262700a5257d40b9e19dd7e4e588db4788fc53abe7b83ca00e504a1a","sha512":"e141c884ba14775bc155e99cfffac6a72f3a93344bf5e7799a353b5a8c0674634b56a3e35e9ac69503a6de9d2ab77d51992670c887d8e2a9567d630e9d84b13f","ssdeep":"","tlshash":"52519036fadc966e93c203e4d111ae495009b115b2e84d4e6b79f4bca1c2fd3edc2647","size":2692,"data":"","first_seen":"2025-11-23T12:43:08.225204Z","last_seen":"2025-11-23T12:43:08.225204Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","size":24109,"data":"","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-04-04T12:45:41.506701Z","times_seen":66916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-04T12:45:57.183032Z","times_seen":217858,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","size":3721,"data":"","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-04-04T12:20:26.846311Z","times_seen":44481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"82cf4f84271007e7874aee760ebe66e2","sha1":"059df94d139b07bac3ce5bdaa4b6f11a51e710b7","sha256":"e5d5d1dd66e31029b73f0a098e415f017fa7a96be93a7de73e64e3380babacaa","sha512":"41456f036c6662b054513c396b1462923c30fc586c127a965be64f63fa6ad2b3e61a31c9814a725d45ca5f9369d2a2fbc3831081acfce30b323fa5be22ddf3d0","ssdeep":"","tlshash":"69518421ba409e7f83e3c7943a2bbe132d7c0a368041b9a6f4fd48bc04b19653207d67","size":2727,"data":"","first_seen":"2025-11-23T12:43:08.225998Z","last_seen":"2025-11-23T12:43:08.225998Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T12:49:15.258785Z","times_seen":685263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f46b1dff340c5d65e56919046a6cca4d","sha1":"f841343bbc94b6ab0e997905fb46ad4ab1470989","sha256":"2d14d149cdd9527b8bf7de5abf39d246e9fbd2e0e1b1c474b77050866d378dea","sha512":"90c0e0d4d3fd7300ffc7babce584ff53371a19b68869be7761cebd29a83d091fc28733cb99b99a53c9e2740d703d98d426320efab1591c96d2c73ce6ef38b7c9","ssdeep":"","tlshash":"72c02286ea844f8713c202d0183c7a72182772732a008c03532deac401402c2984805b","size":186,"data":"","first_seen":"2025-11-23T12:43:08.22683Z","last_seen":"2025-11-23T12:43:08.22683Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a992d787f3776bdc23751c238189688e","sha1":"76e9d87298cc9a64029c830cb686738e054cf6ec","sha256":"6037f9ef9422224b7cc53d13cb876bd4e7fdb2a6720395db63cb33ec815a2135","sha512":"b744732f4bfe6ec5b7ad73965604d07ed5564267321943fc02053ffc474920b37aeb10f8d8bbbfa9fa765a088e9bbc9a0f006f6198d38082d8806654e86252fc","ssdeep":"384:7Gy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN7Kh:7R+EVxFm6cKikdHd7glQtHuGJswg/DT6","tlshash":"5fb2d9023163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","size":24047,"data":"","first_seen":"2025-11-11T15:45:08.550808Z","last_seen":"2026-04-04T10:08:25.611952Z","times_seen":6603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec38f8b5bb07d295036ef97f8aa53617","sha1":"93a438f650e0319c292ad996bc95954c1433ccb9","sha256":"2a6a2be05d3e89c3e6eda45d2548dc9c04ec3e3aadc44def2e9f02fea5429026","sha512":"8fd7135dcac33ae50953b4d95fc8e6fba553ebee747ff0b4a4ac278b10a6d423fceae4fcd91ab542e8ee08e8c224ed91bd2c19cb0195ebf505097a44653b9ab8","ssdeep":"96:B5dUscSAlxkdTRTgnwblr4nAV/N2/k7QTFdoBQZtNsaXC5C72ZscsDRsEQ+tw0og:vdUsc7lGd12UNgbXo6tNsaXC5CyZscsh","tlshash":"8db1de58f056ac39554f41fea04a3347a5252a7f5090d9bebaa88cdfc179ec032393bd","size":5346,"data":"","first_seen":"2025-11-11T17:30:18.61006Z","last_seen":"2026-03-29T23:29:09.461757Z","times_seen":1203,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30f13da1f424ee0383b76edc55881e1","sha1":"7e348a5f57ab13eedbc4ed917cdeee5bb9f9bd46","sha256":"cf01a621447e67a81629bc28276677c86c48fd72c44cba83a82448574aadfd60","sha512":"06571ea850a1ff105d50dd65340b1109e07dba2915279d549f0880e161c5487e0462e63f5bcf3daa1feb9ebd6fc00f84d552fb806f5f5405ebac203f097b89b8","ssdeep":"","tlshash":"daa0244530471400c04dc1504d13fc00041010c7034fc50435d05d30d550440744331f","size":68,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-04T12:18:13.996643Z","times_seen":109680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea0e8ea628a613417a821f656470e922","sha1":"1f863acf23f475e319a0e9062ac269c462856736","sha256":"cdfb02203123a3e07ff298a2a6a3ac8497beb3a3039d81d15757e86212b77717","sha512":"ce2ab4087f8a17dbb593b44d7beacd2bbf19ce2b2be17460a7139238d453e076236ef9649effe4cea987ba7457337709e7051717be73f9f245fda022e539f35b","ssdeep":"","tlshash":"5b21ab1a1e214f6683aea7d822de3e7f48c1073219d4b94e2799e4a401f7cddf0152b3","size":1320,"data":"","first_seen":"2025-11-23T12:43:08.228158Z","last_seen":"2025-11-23T12:43:08.228158Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","size":31880,"data":"","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-04-04T12:37:53.3305Z","times_seen":59934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clonedfirmregistry.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Nov 2025 00:38:32 GMT\r\nexpires: Sat, 21 Nov 2026 00:38:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 216242\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-04T12:49:59.926218Z","times_seen":306937,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":104,"dns":0,"connect":38,"send":0,"wait":38,"receive":7,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b4270182.smushcdn.com/4270182/wp-content/uploads/2025/11/CFR-website-icon.png?lossy=2\u0026strip=1\u0026webp=1","fqdn":"b4270182.smushcdn.com","domain":"b4270182.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /4270182/wp-content/uploads/2025/11/CFR-website-icon.png?lossy=2\u0026strip=1\u0026webp=1 HTTP/1.1\r\nHost: b4270182.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 38218\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4891896\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"91a7e1efe4d6d7e8ce3e1cdeffe884ce\"\r\nlast-modified: Sun, 23 Nov 2025 02:20:27 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 24 Dec 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=97348, smushRatio=60.74, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/23/2025 12:42:35\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d52c1d24361e84b21937d02d441ac6d8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":38218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"91a7e1efe4d6d7e8ce3e1cdeffe884ce","sha1":"26f1c25b23ca3b90baf0d4b6c8557a02058ba320","sha256":"cefd8b763b37f9beef5f65f8d94daa90f56236b3a0d5ca8a3585f962f1f27ae9","sha512":"21fc5ae42dd52c3cbc24598c5c16710b4585a3859f5bde7dac940749af0bb68bd9155d1fe0971ae3b507b7d6edb1ca470141d127d063ee43b8622b71542214d8","ssdeep":"768:miqSGR1PsDUkXo2pSqKLGgPzcrPo5icP9ElKYDdsd0+:3WUDUN2MqKLGcQaEAY0","tlshash":"5703f184b3c8d40aad678d2e7f39545c391a2725844a7af1b2b83c0938b143cdeb5b75","first_seen":"2025-11-23T12:43:08.181182Z","last_seen":"2025-11-23T12:43:08.181182Z","times_seen":1,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/posts.aec59265318492b89cb5.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:35.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/posts.aec59265318492b89cb5.bundle.min.js HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:35 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1177\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3317,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3273)","md5":"4eb94422648c909222aa4aa078a98425","sha1":"1c1384c7181fb659681dd27b9272b9cfd5eb2018","sha256":"ff5eb886fa582a52b903f58ac233b44a2c35e17b8553fd9e7e6230486833d93a","sha512":"44776492f2435e7db9bd99107b44dcddffc022d820c490c38e4e75f6b0b7cc14431dcf2671a03225a919a167e669b551788448eada9c3cdf5f19c34a916194bc","ssdeep":"","tlshash":"1361785535976c31ea4f4187b80b010e6e021bfaad0570c9ba69d8d69af0fc73361b70","first_seen":"2025-11-11T17:30:18.706728Z","last_seen":"2026-03-27T23:36:39.614186Z","times_seen":971,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/css/widget-menu-anchor.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-menu-anchor.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"d7e22d4931ccc121350d6f34ef623ae1","sha1":"e569f277c539359375c5f5110d9919281e212c8d","sha256":"fe20e3afdcbbdc9c58ca1dda0dc5bd3c3ce865d7d42ce445c85518c5939b4aae","sha512":"ee59f9237804b8636826dd75c8a95591a3c41ec95df54f645b95b6278b5d0a000652f60bd2fcee94d86a083055d55816a6893f5e30b3ec02e444b91ff2b63d51","ssdeep":"","tlshash":"dca002807c638341590f8b072893442d7a90dcd85b6594e5c97672429e6ce953ae6572","first_seen":"2025-09-29T18:28:49.704836Z","last_seen":"2026-04-04T10:16:17.971852Z","times_seen":2942,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/uploads/2025/11/BG-HomePage-High.png","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/BG-HomePage-High.png HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/wp-content/uploads/elementor/css/post-535.css?ver=1763655473\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Nov 2025 13:12:41 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11441\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 780, 8-bit gray+alpha, non-interlaced","md5":"15586f14c838bfbb7265b44b91c8c1b0","sha1":"5e2f90afe5424ef57447856a01a90edf891e7e29","sha256":"89f5ec5c4a64206416ef1d9c6bea3f87d9fa3a9085adf816570d58efdd86615b","sha512":"f04dea7d0d5f0d62bceeb2ecd7e1898e589e37286383e4d9cad85d478517ec4ae40d98cf1a072931658196dcb5628404cac1c02ffbb54a16969d315e1ea22e05","ssdeep":"192:buiTeoYQCs67gFtw120runEIhN2OoGNno/sQNJ0N+rRNX5LFM4h:aicQMsFa1bdKdK/a+dNJZM4h","tlshash":"1532aed01df89c55da178b3a2cef0f783abbb8746051014bc916da90af82a12bc43f65","first_seen":"2025-11-23T12:43:08.183122Z","last_seen":"2026-03-22T12:09:44.956218Z","times_seen":8,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clonedfirmregistry.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Nov 2025 00:38:32 GMT\r\nexpires: Sat, 21 Nov 2026 00:38:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 216242\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-04T12:49:59.926218Z","times_seen":306937,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":108,"dns":2,"connect":15,"send":0,"wait":36,"receive":11,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:35.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/load-more.8b46f464e573feab5dd7.bundle.min.js HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:35 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1484\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5346,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5302)","md5":"ec38f8b5bb07d295036ef97f8aa53617","sha1":"93a438f650e0319c292ad996bc95954c1433ccb9","sha256":"2a6a2be05d3e89c3e6eda45d2548dc9c04ec3e3aadc44def2e9f02fea5429026","sha512":"8fd7135dcac33ae50953b4d95fc8e6fba553ebee747ff0b4a4ac278b10a6d423fceae4fcd91ab542e8ee08e8c224ed91bd2c19cb0195ebf505097a44653b9ab8","ssdeep":"96:B5dUscSAlxkdTRTgnwblr4nAV/N2/k7QTFdoBQZtNsaXC5C72ZscsDRsEQ+tw0og:vdUsc7lGd12UNgbXo6tNsaXC5CyZscsh","tlshash":"8db1de58f056ac39554f41fea04a3347a5252a7f5090d9bebaa88cdfc179ec032393bd","first_seen":"2025-11-11T17:30:18.61006Z","last_seen":"2026-03-29T23:29:09.461757Z","times_seen":1203,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b4270182.smushcdn.com/4270182/wp-content/uploads/2025/11/Gemini_Generated_Image_41nvnm41nvnm41nv-300x300.png?lossy=2\u0026strip=1\u0026webp=1","fqdn":"b4270182.smushcdn.com","domain":"b4270182.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:35.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /4270182/wp-content/uploads/2025/11/Gemini_Generated_Image_41nvnm41nvnm41nv-300x300.png?lossy=2\u0026strip=1\u0026webp=1 HTTP/1.1\r\nHost: b4270182.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28886\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4891896\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"36f1fde4fbef6fbfb4b06f70dd5c791b\"\r\nlast-modified: Sun, 23 Nov 2025 02:48:48 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 24 Dec 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=29470, smushRatio=1.98, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/23/2025 12:42:35\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 53105c5f632849ac12eead9a6daa95b5\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":28886,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"36f1fde4fbef6fbfb4b06f70dd5c791b","sha1":"680840ee5971f2677875e05ca9d8a14f11ab39e8","sha256":"72a4cbce2e518446166b1699368bf0a5e16647111b1a97821b5aee33f32351e9","sha512":"dd4ed2ec57ea36909caf907825cf7ad68a509b0ca98e916a95826c401f6e4ee042137d5ec6adb8ae224dcf800724b2d2ca52945a1133e8022c09dd68b705865d","ssdeep":"768:12CfnIZLs0yahggJXa1Py9VbGHQEE4QYq4JVVG0WQ5nshGrSQvaF:128Ips0F+g1Ey9kHE74HVGpQhshGrjaF","tlshash":"aad2e1613264d8b4fa97dadd8f077b0e06fc6934e8932b53d0d19f866428a6cf80744a","first_seen":"2025-11-23T12:43:08.184665Z","last_seen":"2025-11-23T12:43:08.184665Z","times_seen":1,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b4270182.smushcdn.com/4270182/wp-content/uploads/2025/11/homepage-main-image.png?lossy=2\u0026strip=1\u0026webp=1","fqdn":"b4270182.smushcdn.com","domain":"b4270182.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /4270182/wp-content/uploads/2025/11/homepage-main-image.png?lossy=2\u0026strip=1\u0026webp=1 HTTP/1.1\r\nHost: b4270182.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 250892\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4891896\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"38920290a653b1863738a55bf11442c2\"\r\nlast-modified: Sun, 23 Nov 2025 02:48:48 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 24 Dec 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=377456, smushRatio=33.53, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/23/2025 12:42:34\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d43b78ce4733359312d7f485ba09e0f4\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":250892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38920290a653b1863738a55bf11442c2","sha1":"61f74e4da26271fa835974259134b5d4a4a78a93","sha256":"892b1fd60b694c80709cdc4afae7bce167209ebf7a798d0186c9c109c2775ce3","sha512":"fc14603ec86e71c1e3656acb669ca62d79f0fe461bfc24f056fb8c53a0c93c8abfa627e32ba3e5f34e58eb2f1ca86e37aca5065ebfb9e974b4d3a76707d5fc4d","ssdeep":"3072:bJGrBzm+8vQa1CdPsG+TnDL3KYXUeCAgHO0dBc2CI5R60i9gBclmYN4Fe8PCTJm8:FOC/hSkLTDL3KLdKNz0/8YFW2j/ibDsQ","tlshash":"023423ee59c293add8396680c42dcf831777c2f051a85bce78c3b6631e54a64cb5708e","first_seen":"2025-11-23T12:43:08.185624Z","last_seen":"2025-11-23T12:43:08.185624Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1124,"timings":{"blocked":265,"dns":56,"connect":1,"send":0,"wait":169,"receive":363,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:35.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:35 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 592\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1348,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-04-04T12:39:27.388544Z","times_seen":62097,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/uploads/elementor/css/post-495.css?ver=1763655473","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-495.css?ver=1763655473 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Nov 2025 16:17:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 795\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5115,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5115), with no line terminators","md5":"293ddcf1aaac43efaabc80cd63507f30","sha1":"11b7a0ce7b3c10be3709665e908a15b1966a1213","sha256":"6af3fba7155e51e4c94a49fbb7b7e93d924d14d957b98a34d07f533800d6e41f","sha512":"eb55d6ccf33e129a7315ef70e0c67b14af3452c234eae44f5f63317fedae94a7985cb003552997e16d82657633c04f5c9dc8a749602be3f4c3f85503f799c0a0","ssdeep":"96:XfLqUhi4IDZxL6LKrbShMJxSFdE5ZOaMJ1Qimr0gj33nEcgC0u8pTGrYLgQS8p+j:XfLqUhi4IDZhBShMJxSFdE5BUmr0gj3L","tlshash":"d2b171897ba1d032e1bb083eaad7d5b9102cd82b515fc5efa10dd704f4ab76fa25c201","first_seen":"2025-11-23T12:43:08.187098Z","last_seen":"2025-11-23T12:43:08.187098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/css/conditionals/shapes.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/shapes.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 10 Dec 2024 19:19:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 221\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":645,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (645), with no line terminators","md5":"ba2bc873ba3e8ccaffc77028bf9ee723","sha1":"ddde3c7ed3181d7ececbdbc35e3cb49a786f0060","sha256":"c5feb6bfb7973d126626671a6555cc3f88fb4d569138e4b05174e85fb0d3f8f2","sha512":"d1ea7902168d9013d78076e15ae2ce2f4a94a6057a9f9e7ad54e0832ffb0c52a2890b4f9ed8b0ffbe82d3c4ebdd1ca0f781c9796b526d6cd3a99420d9e6eae54","ssdeep":"","tlshash":"29f02d767d17501c802f921346c74a0e612496c717e22558f509414728ffdf1b35d24f","first_seen":"2024-12-17T09:11:11.315263Z","last_seen":"2026-04-04T12:45:57.066034Z","times_seen":13678,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b4270182.smushcdn.com/4270182/wp-content/uploads/2025/11/fake-lawyer-site-190x300.png?lossy=2\u0026strip=1\u0026webp=1","fqdn":"b4270182.smushcdn.com","domain":"b4270182.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /4270182/wp-content/uploads/2025/11/fake-lawyer-site-190x300.png?lossy=2\u0026strip=1\u0026webp=1 HTTP/1.1\r\nHost: b4270182.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21476\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4891896\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"2dcfe625e6ccf5aa33369a715e7721e3\"\r\nlast-modified: Sun, 23 Nov 2025 10:20:05 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 24 Dec 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=21825, smushRatio=1.6, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/23/2025 12:42:34\r\ncdn-edgestorageid: 830\r\ncdn-requestid: afb25e22311f70fabb5132c0307d14fd\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":21476,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2dcfe625e6ccf5aa33369a715e7721e3","sha1":"1f9633aa9914bec9cde720e32ee118be7c2adf69","sha256":"ab662b99663d8417957c41025a8ac35f5a3e4ebfc60dad1839a73c167fc7112c","sha512":"3caf13c4ca5b595a998895dacc0abb457a704ad22346213bb8c15da0749cb2595f915f21e47a4c4b40604db48d6f603e1839a607a19d9e6e23ed18ed78752a32","ssdeep":"384:EDDpBDZHDL2Y6KTYBPQOwtxSj8bfc8OYR5iEn7ObMJANn4KJyhkF0aqkv2VjRT:yNBNjCYlWIOw08DmYR0E3ydJyh60aKJ","tlshash":"cca2e09b67ca67f86cbcf15020c2cde664c518a787562c76e582e1b31e82b40c77f9d2","first_seen":"2025-11-23T12:43:08.188587Z","last_seen":"2025-11-23T12:43:08.188587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":795,"timings":{"blocked":265,"dns":0,"connect":0,"send":0,"wait":446,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.1.3","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin-pro/assets/js/consent.js?ver=1.1.3 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Oct 2025 08:20:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 528\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1236,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"112ff84cb9de5f630790f622925995f0","sha1":"efd004b998bbd64c18a8a6a68bcccf7090e38346","sha256":"80b616dced78fe1579fc6e6f99982a0f3d38b2e562790d877ff4b782388bff43","sha512":"714a431f871150701432b14d159b45a910cc32668d55975c09ce48011ab31db87c6679a3622ab5e8caad36a7b32b565ab9104660ba1888f61b8efdbe07ed3578","ssdeep":"","tlshash":"8521c0817efc491516d921e0c92ac4087069fc217985986d8a2820ea9f95fea9cd17a7","first_seen":"2025-10-25T19:27:43.30869Z","last_seen":"2026-04-04T09:33:01.274882Z","times_seen":638,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/uploads/2025/11/Shapes-icons-1.png","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/Shapes-icons-1.png HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/wp-content/uploads/elementor/css/post-535.css?ver=1763655473\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Nov 2025 13:12:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 19158\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19158,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1761 x 790, 8-bit/color RGBA, non-interlaced","md5":"ea501fd3c0237abba579eb649108e27d","sha1":"fc094f3837da995fe4705005c1a2d5d284c85cb1","sha256":"40eda7731c4c2024d0fa16acdd060507bce17e359f4d775081bebb02d8c672af","sha512":"c599394b7e464093d0ca831df3aef6a82f6c4c3b30a0033299f5fc657dfce33c427dae684b700c6b9bb17acb19edc65e3b84e59934789a0a113fceb86caade94","ssdeep":"384:e7EcDfiMoRaj0yomFaUMNJYwWP1EJA0YIstWMeoyoP8FJpKMNXE:ePhjYgax92/7EL5lE","tlshash":"3f823ae705c73bd4e5e543b8d4e98f5d3b26b08ee4a68357c3f1ec259c8290ab946c84","first_seen":"2023-05-06T04:09:02Z","last_seen":"2026-04-03T17:31:30.906396Z","times_seen":40,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b4270182.smushcdn.com/4270182/wp-content/uploads/2025/11/verify-lawyer-site-222x300.png?lossy=2\u0026strip=1\u0026webp=1","fqdn":"b4270182.smushcdn.com","domain":"b4270182.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /4270182/wp-content/uploads/2025/11/verify-lawyer-site-222x300.png?lossy=2\u0026strip=1\u0026webp=1 HTTP/1.1\r\nHost: b4270182.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32650\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4891896\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"2fa21c0fe87cbfee9b477af6fff84e33\"\r\nlast-modified: Sat, 22 Nov 2025 20:23:26 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Dec 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=33962, smushRatio=3.86, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/23/2025 12:42:34\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 57aa882be262a6d14c2f58bd4f72e351\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":32650,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2fa21c0fe87cbfee9b477af6fff84e33","sha1":"a1dc487cf92d57d0bb637af391d6dff02f0c3d54","sha256":"dbba48bf734cc7dc40cb79c0a9f205e24387737fcff39e7a19718bdbb5e2274d","sha512":"6be0eeef712acbe42faa555b084bcbc15d772cdaa31a1645e6ce352668ff5d33f625d26f30e39bd2ae49c46dc934bba621d044cb0c8c4942448d874faadec6fa","ssdeep":"768:zjLG4axlKjkjI5X85/14nWV6tA7Xzw1ojCg:zO4avVc5S6nWwq/soOg","tlshash":"35e2f1d4448a5d5f22f0ab70ca317bbacd17a90826d35ab4c37e2c3520eb931151ba3f","first_seen":"2025-11-23T12:43:08.190471Z","last_seen":"2025-11-23T12:43:08.190471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":243,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-23T12:42:31.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://clonedfirmregistry.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://clonedfirmregistry.com/wp-json/wp/v2/pages/535\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://clonedfirmregistry.com/\u003e; rel=shortlink\r\nx-litespeed-cache-control: public,max-age=604800\r\nx-litespeed-tag: f98_front,f98_URL.6666cd76f96956469e7be39d750cc7d9,f98_F,f98_Po.535,f98_PGS,f98_\r\netag: \"794-1763901753;br\"\r\nx-litespeed-cache: miss\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"All in One SEO:4.9.0","description":"All in One SEO optimizes a WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Site Kit:1.166.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"All in One SEO Pack:4.9.0","description":"All in One SEO plugin optimizes WordPress website and its content for search engines.","website":"https://aioseo.com","common_platform_enumeration":"cpe:2.3:a:aioseo:all_in_one_seo:*:*:*:*:*:wordpress:*:*","icon":"AIOSEO.svg","categories":["SEO","WordPress plugins"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Elementor:3.33.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":147198,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10901)","md5":"3338f16db3aa406e6b8d59cd12bfa25c","sha1":"9de9690032217afa3ad84dbfd7182f4ae3675d21","sha256":"a9350e6925b0754d15588f25163a411ad02c5378e92fa7d376fc0926e1cf774e","sha512":"5083c0b0c445579c87a0e5d9a41d0fa8593273be1af2b02f9a738d7f99dff6fe0ae37b1de78c3a87726adc0458f302bfa8895522dc5299da74260cacd2569911","ssdeep":"3072:V7NjpeQmz5dwo5VLmz5dwo5Vih5tmrg6LnBd/D8UyP57P:ewcl","tlshash":"71e35c32b98895bb326f12cee11f732c508b9ab5da409af5b3fd405c93e0cd175a3196","first_seen":"2025-11-23T12:43:08.19124Z","last_seen":"2025-11-23T12:43:08.19124Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2367,"timings":{"blocked":559,"dns":13,"connect":158,"send":0,"wait":1249,"receive":0,"ssl":385},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3244\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":27364,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (27319)","md5":"e7b4619f90a71b8497c710b17dc5a686","sha1":"c66f0f8ba0dc3cfdd747c2210ab6c5cf831a737d","sha256":"10916bc5e749a364b8bceb56e559773c5e96269447ba48a2afab939186bbbb92","sha512":"0e5bb25a6433c85e25c81465041ea1302b8a22cc057eaadc45374bb41d50b89516bf0f5b16d6d0a3dc62127e9c8e565165870527a1d0afc9cc0d4dffd0276886","ssdeep":"768:FrPoScoKjcUlwvGQzKVwGz42lvQz0ABI5PmBMqRIEEtCelEqJUrY+jz:d","tlshash":"56c27a81be93592f032f613b91e2c60c4f9519c8b2a176a9f0f5a10f41d7d5c6bb7b22","first_seen":"2025-11-11T15:45:08.489044Z","last_seen":"2026-04-04T07:48:11.469614Z","times_seen":2919,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/all-in-one-seo-pack/dist/Lite/assets/css/table-of-contents/global.e90f6d47.css?ver=4.9.0","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/all-in-one-seo-pack/dist/Lite/assets/css/table-of-contents/global.e90f6d47.css?ver=4.9.0 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 11 Nov 2025 18:46:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 416\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1487,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1486)","md5":"8aeaa129c1f80e6e5dbaa329351d1482","sha1":"f02ff55acacd58e2812c4051bf09acb9205350ea","sha256":"0edc19cd68d37abf1db96fbd995b3dba751f911d1eb65188420646e29b8b1110","sha512":"3ba2f493953858cf661a04437947f1eec6d2739e574bccb4bacee7585a15ad81ebf749dec2f0da7c9f8f7c92b3b8456f8fa238e3120939e81a7dac39a61e5e9e","ssdeep":"","tlshash":"3a31ec1cc782331860727658edc07e4ad36cb202a4df519afcd2620f96e907af671a1b","first_seen":"2025-11-06T17:37:37.119913Z","last_seen":"2026-04-04T12:18:16.214666Z","times_seen":5260,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/css/widget-posts.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-posts.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2295\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":16967,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (16917)","md5":"6d423e59d298a74ecb0edfefd7ffd8c5","sha1":"0a264fcd575f651b92d66b0e4805eb8992561f46","sha256":"0cf268e9f5fea6fec832041e62040f26593a1348dc941dae799d801ca621dc91","sha512":"b830ab5c0976352895447ebec3a76b66fec100bf669ee0662c2476376502666ad399ceb64ddc332cf9e0df21be56d2e64660c8e39b9b3093c0abbf301560c6c1","ssdeep":"384:fo2+K9RI1whgqkxk3kSk+B1eHE6Ye0yx+AdnxI0y5syiJU9jYT1ZMDiUjpIxUBIB:B0y5syiJU9jYT1ZMDiUjpeQ34aeQO6M","tlshash":"a57255017d1b9464ae4f055f605322cc2e94c1ead186f8ddedf1e28b8bface53324969","first_seen":"2025-11-11T19:34:52.10933Z","last_seen":"2026-04-02T15:21:59.384594Z","times_seen":967,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Varela+Round:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Varela+Round:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Nov 2025 12:42:34 GMT\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1597,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7030baf9622c0b3199d41d569f40e464","sha1":"43bb431ac4463820acc2d454391adbbd9ac04b23","sha256":"82fc687436a6cfe6ea556a48f3760c7be5a5de4d908dfed33a0dbd69b5bb207f","sha512":"ceedd567e433447e39f4ad218bf4f1ebc09a703b5618f27df4c89fe46e0b6dd003ebf6b8cb6186bff66541d74827d8a016d9bb53232f4c31e232357e4b7edc7a","ssdeep":"","tlshash":"d531c1a01417a504db930ce523ce7e359d4fa2506460d5796ffe2c9dacaac29731570d","first_seen":"2025-09-12T07:40:43.547603Z","last_seen":"2026-04-04T09:32:50.320072Z","times_seen":848,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":69,"dns":0,"connect":7,"send":0,"wait":34,"receive":0,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6867\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24109,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24021)","md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-04-04T12:45:41.506701Z","times_seen":66916,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clonedfirmregistry.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Nov 2025 00:02:01 GMT\r\nexpires: Thu, 19 Nov 2026 00:02:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 391233\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-04T12:47:48.238784Z","times_seen":295447,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":110,"dns":1,"connect":16,"send":0,"wait":17,"receive":1,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/themes/hello-biz/assets/css/header-footer.css?ver=1.2.0","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/themes/hello-biz/assets/css/header-footer.css?ver=1.2.0 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Nov 2025 11:13:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1261\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7182,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7179)","md5":"86dbb47955bb9db9c74abc72efb0c6f6","sha1":"66e008f8d28438934133a914efc7a40bd9fbad5e","sha256":"5052c28c33de995612b9c064753ee989d1e7755027e2b80292148728f444ec8d","sha512":"4a17290a195e7ead6048fa07dde958455f508f57d3c147f49cdfd32db655b8bc19e0b476611bca8b1a1a7eaf4df88185a861b74aab65366175701809defd6105","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sy6ZM3zzirdae64Qf3mfOOeZhYD:F/9j3EU5n1lJy6ZNZaL4nh","tlshash":"88e19f67f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-04-10T05:14:02.600959Z","last_seen":"2026-04-04T12:33:12.132803Z","times_seen":26670,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/cookieadmin/assets/images/cookieadmin_icon.svg","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/images/cookieadmin_icon.svg HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 15 Jul 2025 16:39:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 293\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":738,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac4f8069f74c4a83cfcf736471ed9894","sha1":"8e1b411b6f11ef7f9d4c15273b00e232806c1840","sha256":"1c1ca5d2744c185a68b3991a50cb400d0fb126b311fa5249f556a1ea82a220a7","sha512":"43d537b824606ce079bc2123ff86dc996e337b92e503eb6080d52411150cf2858220a74309d0f23df9f611d50345e7bfb1039c8cca643b90550cfbd11e90e8eb","ssdeep":"","tlshash":"8801286ae11c5a1e91020364d3277632a26fb4ede2881b3811acc870e701bdbe4279e2","first_seen":"2025-07-22T15:21:11.528647Z","last_seen":"2026-04-04T09:33:01.257301Z","times_seen":1869,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10035\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31880,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31880), with no line terminators","md5":"ceb183b138eac316a5cb0741ec23696a","sha1":"c9fcfc71c8f7229d96289ba702eeffc7827bd7e9","sha256":"2464e81935f8e354704bfd7c9dc5b722b7c2c3456f325be881556bf351f762e0","sha512":"7fc177991c5640b9b0113881747c7af234e6c7cfdcd5ef6d4cb4e3e9b6823499183071a398c7e505b8796028200107ec83fe3194512cd6ba1809d4fa33ec7cfd","ssdeep":"768:D1c+6idHZRdPM4ZBOB/hduNFXaz1kGtJR8RjDKv//Dk3iHVgbpM+MLKEnzBc5Glr:ZcURdPMMBOBjmFatJR8RjD8/xHVlEEnV","tlshash":"61e208523296e866069f48a3f0231119f3765dd9b80bf0d5b2bcdce6a471e877362b34","first_seen":"2025-10-21T21:24:49.242369Z","last_seen":"2026-04-04T12:37:53.3305Z","times_seen":59934,"resource_available":true,"data":null}},"time_used":446,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":445,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b4270182.smushcdn.com/4270182/wp-content/uploads/2025/11/victims-of-scams-200x300.png?lossy=2\u0026strip=1\u0026webp=1","fqdn":"b4270182.smushcdn.com","domain":"b4270182.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /4270182/wp-content/uploads/2025/11/victims-of-scams-200x300.png?lossy=2\u0026strip=1\u0026webp=1 HTTP/1.1\r\nHost: b4270182.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28596\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4891896\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"5d9517ece70e1321f9506b9a22df8f70\"\r\nlast-modified: Sun, 23 Nov 2025 02:48:47 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 24 Dec 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=30466, smushRatio=6.14, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/23/2025 12:42:34\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e5453fbb13af34b67f6cb5e3e3c47580\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":28596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d9517ece70e1321f9506b9a22df8f70","sha1":"2f978b8f618c13b7f55d47cf9dcb34ec0ce09f6a","sha256":"5950c893b2bb85d8fc535e28eaace5bd25368ea2bb797b6b39217505fb23f8d9","sha512":"0dafb294b5fcb74549d4fecfb2c58a8651664e6bc4fee1de5d3af5e4addd6772f72d53c2d924ccefaeab1179848b5e5912cc48edb8a88efda3b64677ea79d916","ssdeep":"768:bXSGnVerrq3nmg1UlqxiYsclnGQnxmH0Do1mHgl:Pn4rqLUgxiYsOVHg","tlshash":"a0d2f158f89ad916b02a0c83b7d6d47b2d013c60d6fbd3b8a107c05b602791ae7a69d1","first_seen":"2025-11-23T12:43:08.196519Z","last_seen":"2025-11-23T12:43:08.196519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":138,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.953Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 126\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-04-04T12:45:57.070063Z","times_seen":56886,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/uploads/elementor/css/post-535.css?ver=1763655473","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-535.css?ver=1763655473 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Nov 2025 16:17:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3558\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":47481,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (47481), with no line terminators","md5":"86fd2e719c2b17087eb2cebbafdb4348","sha1":"6bc937c49afd69d8234eaeaea29370255caec646","sha256":"a2ed16f8b9a7f417a7543516799e9c3c539c198375e77e3291143b7111083023","sha512":"7a9704e81a90dd5f6b05d8c47f81741cc4368c8affb0b85b63b89e80331d16d6c22ad84e963bfabb646e99ae153e2bd4f4790bcd02e5d883fb81df25c31c448d","ssdeep":"192:805W/Vy04fYE32wG51nJWyI6qns3BRqns3BJLRvlu3tK04SipZZVmqns3BSepVov:d2rSYU/umw2uJcbJusnJ9DwJF","tlshash":"a0238e953e13d125b46f042f76c7f5bc242ce8ca882e96f7f854a213a1f6f667398604","first_seen":"2025-11-23T12:43:08.197921Z","last_seen":"2025-11-23T12:43:08.197921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Montserrat:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Nov 2025 12:42:34 GMT\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34812,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"76e3e3043c43750b4048643e10e5a17b","sha1":"2dae7be8964bb1302e040a78d80621749d6053d8","sha256":"8657d26f0c60d5b2f909f2745b6a2d8df7efad9b3de73c0d33171c6214df8c05","sha512":"16dd77ebf3efd8897bd62ff43852e13251ea57f1661acd3a9650858986215f7a817ee902f5403b937a602154ee8203b85dd682c06629932fd18de0c44c2148ee","ssdeep":"384:A3Cw37F3Y3I3wHwcFFB5YwNFu+GNw+Fr/PWw/FkEUrwAFRd9cwxFqqKRwyF3rz6l:0Zds8FdCWQp","tlshash":"46f2af911057e500ea472cc523cf7e26de4e666674a4c5797ffd2ca8adeac221324b2c","first_seen":"2025-09-05T02:49:53.621529Z","last_seen":"2026-04-04T12:33:12.09581Z","times_seen":7793,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":67,"dns":0,"connect":8,"send":0,"wait":32,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10101\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":44258,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44214)","md5":"39ae0329e69b6736d149a03a889e5ae2","sha1":"04b7337750c4ae4cb685f42d0a0e8aa6f7c44a2f","sha256":"90133a6c180efa76afc59578d6d9a166471a8d89db634cb4f1c6ef84b5a58271","sha512":"341fb258a2b8c9e70fd2fce912d81aca6c70a0b683a403cc67fa56fe22fdb1332fa1c1f004ca756a8d9d9db827f6f801be6e3fd7eafdfbfb7816014b2ae3819f","ssdeep":"768:j/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7La:7tDD1+WE9A5yLcWJ9mBtIoERuWfRMBK7","tlshash":"5c13955171aaca2941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","first_seen":"2025-11-11T15:45:08.534912Z","last_seen":"2026-04-04T10:08:25.671132Z","times_seen":6600,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/css/modules/motion-fx.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/modules/motion-fx.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 240\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":778,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (778), with no line terminators","md5":"b3bd8e89ef04b52ab3b0d57a15036500","sha1":"c12c35d0c0d39c245d598582030f7787492ce324","sha256":"830e206b42444c7bad7bf3ce729c00a11e0f4cb76b01f94f2d5d2c4578f7ee79","sha512":"909e9d6fc2faeb0f0c09462c43be0b069d9a38f8b1475605e5f2083bc5f1ff9c3449ad79dd962482b4cbd7c5716ab12317191fd8a06b06f0267d8a28ede9d406","ssdeep":"","tlshash":"6601085b3e076238508f530681f2ed0ca2398dcbaa07a19dfb19815b41ef9a82183e07","first_seen":"2025-09-16T03:42:31.452311Z","last_seen":"2026-04-04T10:16:18.08455Z","times_seen":6616,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/uploads/2025/11/BG-home-new4-1.png","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/BG-home-new4-1.png HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/wp-content/uploads/elementor/css/post-535.css?ver=1763655473\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 13 Nov 2025 13:12:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 23184\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":23184,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 800, 8-bit/color RGBA, non-interlaced","md5":"3dd367bd47add229044ad9109dfe66ad","sha1":"4238e0893f2e5d2293f3caffe9cc2a559e4e174c","sha256":"214bdd9820a0fed38db6e72aca6e7079c3fafb3c4e90bb99b76abb2c548f9a2d","sha512":"ef97daa886c2a85b5e439d5bd50127d719d057895050d386d5f4a1dca3887e02833a08085cd6e61aa489239767f26ecad8d00ffb8432825590ab535ab6fabfb2","ssdeep":"384:nfJ3cnDRPtxroVTMmWwvn3POm5h4Cw5ZSGPZpME80zRI8n3XJQi65nHCnO0z1+VP:fJ3UDRPtdcoMB5h4CqSGR+mbJF6pHC1I","tlshash":"f1a2be0bcd67dadccf6a453e49e71bb53b374b1a1283876b0b799a712dd16ec48024d0","first_seen":"2025-01-27T20:03:30.113456Z","last_seen":"2026-04-03T14:53:56.046949Z","times_seen":11,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clonedfirmregistry.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Nov 2025 00:38:32 GMT\r\nexpires: Sat, 21 Nov 2026 00:38:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 216242\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-04T12:49:59.926218Z","times_seen":306937,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":18,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:35 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2511\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8481,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-04-04T12:45:57.159167Z","times_seen":72132,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.8521a0597c50611efdc6.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:35.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/nav-menu.8521a0597c50611efdc6.bundle.min.js HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:35 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1732\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5240,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5196)","md5":"d59ada857f43edb9541ca2b0bb88e897","sha1":"9a1a2e89f6e293fa8ec5d3c6eaabef25b836c441","sha256":"00a240ab46a72f1bacc80c5f1f7d7595620230d10027565a809de218d9fc1978","sha512":"e300440cb97200fbc00cf2006dd74cba5c134f6ef52527b5abe1806f165c69442ce5c4db4621ceedca91980c766585e7b6e5fd3c2c40f947505636e7c916b99f","ssdeep":"96:BLm3CQcqOf55/UEljUkkRk7PA2goL/V2VsVQKSGfV/xZdUyKfKAtZ2JWEfPvkW2e:hmSjqOf55/UEpUTW7vgoL91SEV/xZdUE","tlshash":"cbb1526272922977c58f816b77434a2df2322998740652ad7a79acef11f1ec033f1b34","first_seen":"2025-11-11T15:45:08.495138Z","last_seen":"2026-04-04T03:43:38.320899Z","times_seen":4156,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b4270182.smushcdn.com/4270182/wp-content/uploads/2025/11/investment-scams-image-300x300.png?lossy=2\u0026strip=1\u0026webp=1","fqdn":"b4270182.smushcdn.com","domain":"b4270182.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:35.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /4270182/wp-content/uploads/2025/11/investment-scams-image-300x300.png?lossy=2\u0026strip=1\u0026webp=1 HTTP/1.1\r\nHost: b4270182.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 45748\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4891896\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"bac5983a1c30fe29c5465ed81abdee23\"\r\nlast-modified: Sun, 23 Nov 2025 02:48:47 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 24 Dec 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=49510, smushRatio=7.6, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/23/2025 12:42:35\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4058e4ed1c4ee387f5f42eb9c1397125\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":45748,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bac5983a1c30fe29c5465ed81abdee23","sha1":"91e041f0f55cd20e9ad728b32a5f7d7fa214f01f","sha256":"8a66cfd3f24a72ad5554ca38ba46962f969429ab5fee93daaea3b7cd57d62404","sha512":"366becfd4fc0a3c846e110ec6f970a6022def1915d6e75a01479f5078207d71688827c59c0e86c5a08fdd153215caf94c9efc9c906e1084160acfb5d7e71a5b7","ssdeep":"768:FxGXM4MgUmu04oAHUcA4NQ7R8Y6RVW81nqfKe5FDyp5gtjEV4Egyuq7:FxGxpTu04oAHls6Y6bT1nqiQFHj/EgY7","tlshash":"b023f1f7d317084cb6f04b109e2d3db8897b7462ef2de504698a8b91c4ad1233766d6e","first_seen":"2025-11-23T12:43:08.201883Z","last_seen":"2025-11-23T12:43:08.201883Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/uploads/elementor/css/post-715.css?ver=1763655473","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-715.css?ver=1763655473 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Nov 2025 16:17:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1665\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14764,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5900)","md5":"8490e3f4885a9b1532de6e414e364d3d","sha1":"0140951ecc6e84d7c683c9c8974c95097a961e80","sha256":"02d705b6507fc84c7f7f88144f35e0e2316b586f4c175fc2ad5acfb599c056e9","sha512":"33f0d15d005b180b1346da340bb73ae57e4762bb26739945d1682c6471c9ea910e0891a6e3f38368e05034f5c7c405b55ce0367ad07a6ed3a719d2df2bb0ed5b","ssdeep":"192:dz08yZjpJ4HZjfTmADsUhF4ns3ODnrpUsE6c8vD8x3qns3BjW9XElyZIBJDD2jeh:d4JqhmDn19EnlXsElyZI/DYeIq1","tlshash":"ef62ed90bd438426b22f842f61a7e96c26289cde913979f7f4d46117f1f6e5237e0e04","first_seen":"2025-11-23T12:43:08.202975Z","last_seen":"2025-11-23T12:43:08.202975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2623\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6248,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"cd53af9dd3f0878807fb84a32212f8f3","sha1":"32b70d70b1431fb7699e145a286132fe3d885201","sha256":"b247bcd9d5bd94b74d6ea69670c5c60f104f6515f2d56f6971722cf43492be07","sha512":"f94191fc02a7e671945743bcb194e1e064a964c48137a7d62df4f681559fc1dfc81cbe13780f4b655b47dc03cd8d55df2fd1120ad1450f34929c8bf96671cae5","ssdeep":"96:BpfNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:rVNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"4dd153980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","first_seen":"2025-11-11T15:45:08.498293Z","last_seen":"2026-04-04T10:08:25.623092Z","times_seen":6561,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/varelaround/v21/w8gdH283Tvk__Lua32TysjIfp8uP.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/varelaround/v21/w8gdH283Tvk__Lua32TysjIfp8uP.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clonedfirmregistry.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22948\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Nov 2025 12:56:42 GMT\r\nexpires: Sat, 21 Nov 2026 12:56:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 171952\r\nlast-modified: Wed, 10 Sep 2025 17:05:22 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22948,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22948, version 1.0","md5":"43868dd7e63c31ae25f8d773cfdb7a3a","sha1":"9830ded0c45de18a5788051a7f3b0feb0e10d78a","sha256":"03871f86c86fc776f89d0cb947502f3957181b63327fecaec724bc39d082319f","sha512":"5e9658d210f7f014d01f5172f4991f3e74ab92cf388e2ebed096acc5433971b4208cfe4b1c557bf0682afe12b32c30953cea3c3cb2a61e8883154d04c20691c5","ssdeep":"384:JfPEir4qwsJ/VUGPRFa0g2eakI+LuL+I8CAdDPshYEC2tOo8jAjO:JfPEPsoGYjakD+ZQAOE+1KO","tlshash":"bca2e12dba19bea54fae36ed22d71619009e1dadf118d01cd99d29b30fb4733930c994","first_seen":"2025-09-11T18:45:47.841169Z","last_seen":"2026-04-04T06:50:35.298283Z","times_seen":6059,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":167,"dns":0,"connect":28,"send":0,"wait":17,"receive":1,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ptserif/v19/EJRSQgYoZZY2vCFuvAnt66qSVys.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/ptserif/v19/EJRSQgYoZZY2vCFuvAnt66qSVys.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clonedfirmregistry.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Nov 2025 00:31:35 GMT\r\nexpires: Sat, 21 Nov 2026 00:31:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 216659\r\nlast-modified: Thu, 04 Sep 2025 17:42:06 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29588, version 1.0","md5":"cd87c62c9c9c1728e4ce6069e20b1104","sha1":"0480db0094dec698acf12620a246bd9134766119","sha256":"bf23a7a4eebedbb87d4084a69496b29815914a18e339a00f5dc73a03c9c9328f","sha512":"e178b41b16c3d5f417530f28a9a6ba23d7bee8dcf9325ffa06a03fe0edd68654f1f801181c296bc7d81046fa4e8fe2b4f83e8d9c4a3990de397fc390e1c326d1","ssdeep":"768:qtH/eucpHv7uQbBXaNQyIlxW1cfu0Q0bdKSYJ0ZTPIt4eMz:qBeum9B23aTfu0DdLjIt6","tlshash":"fad2e1adb117b13e4c2cc6b66b1b9d65629026ce619ffad031e88134f5f61b11e11c64","first_seen":"2023-05-03T04:45:14Z","last_seen":"2026-04-04T12:12:43.40614Z","times_seen":8472,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":108,"dns":3,"connect":16,"send":0,"wait":43,"receive":5,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/css/widget-form.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-form.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1408\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6798,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6754)","md5":"57b8046132530f8f1aba5d4cb5c1e53e","sha1":"601fa126239a2b9182d787174456dcc53fb8fe0f","sha256":"778dc77226c9df3dd288037e053b675ff3de5e4ecadcecf6d0186f348890653f","sha512":"86595487907a26a5e3f8de06813b32750793ce4b6f601f8adc7138abab11d96479cd4985804b47ec2b3b260757e8d497e9aa0b1b5eebe36f095dc10a2b5c9163","ssdeep":"96:BKnuedCc+P7p6YWHZENaFqZERQZENapmzYTWCqz6P1TZM3AKA/AujMWJpS5vF9I0:LQEcME+EcdV4C5LT4jv","tlshash":"22e167f1bc12852b5927b8f9d5d528cc428866a08bc1c58b9c7c6459c3feaf1533678f","first_seen":"2025-11-11T19:34:52.112126Z","last_seen":"2026-04-04T07:48:11.477247Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 938\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10430,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10430), with no line terminators","md5":"c202159b2bdfe9c1a4c6892924d73c29","sha1":"9a4e62e8d8906a5633a3802a6ff19c32b2fd8758","sha256":"435b79a8888ff7638673937e863096e3b1e333f92ad3849defff18fdfe8d0bab","sha512":"e97c4293a16ce78a330d57475d4d47c910fc8ba8b2b82f7fa6bf7c9f187320a459ebe29f87f0136851449838de039aa7f092bfb6171b3c6b50b6b3b4e6a46452","ssdeep":"192:eKTrGZCLG+tl+A0zb+W6s5h6R6AHReKuLj6hXvR0:ey10","tlshash":"c822c3817d53814e1aff641b141b254ca1c9d4dee9bbecd5e8a6630386fbdc83b31928","first_seen":"2025-08-29T23:42:19.524989Z","last_seen":"2026-04-04T12:18:16.340483Z","times_seen":12064,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=Poppins:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Nov 2025 12:42:34 GMT\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21659,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17ded04af7b0636d4f8c934291f09ac8","sha1":"d7766b8a83cf1d92c52f7a94654999e4b033365e","sha256":"54985fb48cc0470e63eaaf30034b348ed6bd73cac3f6a759bc1a1c19387af7e7","sha512":"ce25e5ca2afca5d262b17c8d5c5667cccaebce41eacc6afb16f5cd89a838bfd3192564f9a28b450646f2a2fd76414c462f095065c3a45ca72ce31df9c257748d","ssdeep":"384:H3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:XEA3mkX","tlshash":"5fa27ad1087be114ab871cc122cf6d36ee0ea254b850e9786bfd1cd8ad97c654371b2d","first_seen":"2025-09-17T03:38:53.893526Z","last_seen":"2026-04-04T12:41:02.37282Z","times_seen":35274,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":62,"dns":0,"connect":20,"send":0,"wait":33,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b4270182.smushcdn.com/4270182/wp-content/uploads/2025/11/cropped-CFR-Website-Logo-Transparent-1.png?lossy=2\u0026strip=1\u0026webp=1","fqdn":"b4270182.smushcdn.com","domain":"b4270182.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /4270182/wp-content/uploads/2025/11/cropped-CFR-Website-Logo-Transparent-1.png?lossy=2\u0026strip=1\u0026webp=1 HTTP/1.1\r\nHost: b4270182.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19194\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4891896\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"055ffccf56ad32f89cab54a0a7d412df\"\r\nlast-modified: Sat, 22 Nov 2025 16:22:52 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Dec 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=23526, smushRatio=18.41, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/23/2025 12:42:34\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c3a40606768c970c8060425a147afbe1\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19194,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"055ffccf56ad32f89cab54a0a7d412df","sha1":"b37dbb6b71991fab43d1535e22eafc46f5cbff54","sha256":"d718b255dbe976d15e976f938ce39996c357886918bc6c9d95037b3b9a91e13b","sha512":"c12371206e295b46e050c8b4487e2211207140fbe3aec689657f6eb769676a03d49d448c817545d1048f54a4daa19975686676d2f03eeca830b7d92f27c1d07f","ssdeep":"384:tywT7YDXpTxHfyeSPyaaFK6waEl7h3IrCbeF4SB7GtlA5EXCgTFzPxu:tywT7kpTx/yzP1as6/a0seF4yGkqJru","tlshash":"9a82e06df64234bc46aba9f1073259663b8bf340d0b506a90593ff083648193afb5c75","first_seen":"2025-11-23T12:43:08.207094Z","last_seen":"2025-11-23T12:43:08.207094Z","times_seen":1,"resource_available":false,"data":null}},"time_used":717,"timings":{"blocked":263,"dns":0,"connect":0,"send":0,"wait":447,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21386\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":73735,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"a28b0a09e44a8d4a6b92dc177466510d","sha1":"3c80d00bdc95ebbf2dd392162d54764d2d638ec9","sha256":"faa0c40586080e3658a17938bfa85a41163f27c5fa4aa7e953fa23e47f88e4df","sha512":"03d1007500885ca134076fb789ede5ee4bad85e64cd6d51f1b2c707d6156ba69a3753abfb40b6ad9fb6b4582e163346f8b266fd1cbacabe869a2ec3bef7ed5ce","ssdeep":"1536:SCxmDuqHrrU0yQ5RSSYeAjA6c9CSTCgl83Fn9A4cR8+KHiA2+9XS/9OfaNQAzeLl:ny2VA9wAu","tlshash":"db73f9c53152f8b60bfb44da902b4406f22609b8740da4d5bff9dce594b4d8a133bb79","first_seen":"2025-10-21T21:24:49.238682Z","last_seen":"2026-04-04T08:21:08.951842Z","times_seen":7309,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 18 Jun 2025 05:53:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4769\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-04T12:42:36.869419Z","times_seen":195797,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:35.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:35 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 395\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":752,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (708)","md5":"f22859374f227fd915eb960469409dad","sha1":"54295ffbcbca79fb91f50b3d60ac0311f119c511","sha256":"0723f9bf9ae8db418e4513d4b548809c81856a7f2d54be4b34a93d1e3c54a288","sha512":"5e389202fb840f6464e418012f3c9dea9943f9485e7b5fe93c80acbaa1856f77d5403f4f061abd1c60a078f81a75faecda20d95e3f0d6a7785cb188ad3c95d85","ssdeep":"","tlshash":"c80120a030a2b8b605af40cb74c3056c25502df2740668a2b9cb84c12eb4f953342778","first_seen":"2025-11-11T20:38:15.182558Z","last_seen":"2026-04-04T07:48:11.475571Z","times_seen":982,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:04 GMT","end":"Mon, 19 Jan 2026 08:35:03 GMT"},"fingerprint":{"sha1":"4A:97:40:A8:11:17:BA:08:56:28:6E:0B:93:8B:64:13:1D:67:D4:2A","sha256":"A2:0A:13:FD:98:22:74:26:3F:C1:44:5C:92:27:22:17:A8:65:07:40:50:F9:14:02:11:E4:87:7F:C5:D2:F1:42"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clonedfirmregistry.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Nov 2025 00:38:32 GMT\r\nexpires: Sat, 21 Nov 2026 00:38:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 216242\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-04T12:49:59.926218Z","times_seen":306937,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":166,"dns":0,"connect":28,"send":0,"wait":19,"receive":3,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/2716.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 19:44:42 GMT","end":"Sat, 24 Jan 2026 19:44:41 GMT"},"fingerprint":{"sha1":"FD:D4:B7:E9:AC:7B:28:11:0D:96:A9:CC:26:88:07:21:A3:BD:51:DE","sha256":"E6:36:0F:D2:9B:17:E4:A8:11:A6:86:BE:23:8C:5A:3E:36:6A:2E:39:90:F1:28:C5:6D:5F:8B:4B:3E:FF:1B:12"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/2716.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 26 May 2025 13:07:40 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 27\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":500,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"133b77ff9fc321682fed3cde12d6355c","sha1":"4cadfe2e9f50307a51f9d040a916cd4c09baaaa8","sha256":"f39e7ecf003f57bad813ff5b686add8eca88b02f364e0ba946d1ddd8eb25e61e","sha512":"474176f5d483a166386b68f70c0ace7ea7e0bea33525e52bf7dc6d53c11b86ca00bcfdc37213c3fc423a7e109d63b1b8bc102e020a5cc99f0b8ae614837438f3","ssdeep":"","tlshash":"d5f054044776e7c787a545c4ed206d9d5723d0ae9e5920c863d30c9853e6e9f7416428","first_seen":"2023-04-06T18:33:48Z","last_seen":"2026-04-04T09:33:01.233371Z","times_seen":2502,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":53,"dns":27,"connect":7,"send":0,"wait":8,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b4270182.smushcdn.com/4270182/wp-content/uploads/2025/11/CFR-website-icon-150x150.png?lossy=2\u0026strip=1\u0026webp=1","fqdn":"b4270182.smushcdn.com","domain":"b4270182.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /4270182/wp-content/uploads/2025/11/CFR-website-icon-150x150.png?lossy=2\u0026strip=1\u0026webp=1 HTTP/1.1\r\nHost: b4270182.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5494\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4891896\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"8c62ca99aceb770bc8abb93f94856bd8\"\r\nlast-modified: Sat, 22 Nov 2025 16:22:53 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Dec 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=6038, smushRatio=9.01, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/23/2025 12:42:35\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b2446f52295b2c62b9c29f03aaecf7e8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5494,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c62ca99aceb770bc8abb93f94856bd8","sha1":"bd29be4783df62c9ab2b9a8b26309cff4e0fcad3","sha256":"c3ccc10eba0ec33c6acba894f28869f046d748d0929fcf188ead0027d447cda5","sha512":"1ccca8b40ad1aa9ef7bd5a0722f2dc4fbabfd093e01afd6991ee6f13571905223c35d3fdd5a5c4a5fffec9b3aee3462b8d37ceaba76ec2bfddd0976b08fd473e","ssdeep":"96:zAyD7ehD/KlCyfeyKI4eIVnIZ8DIMJ+I+vdl27n5BAjCh6tJjHjAuNHZm:zhDSpKlCAadxMdlGn5B67LVDm","tlshash":"2fb17e1f57a1fd51cfa84f1969ae488166bf21169c2082ce1516017c3f32cab6e449a7","first_seen":"2025-11-23T12:43:08.210223Z","last_seen":"2025-11-23T12:43:08.210223Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b4270182.smushcdn.com/4270182/wp-content/uploads/2025/11/CFR-Website-Logo-Transparent-350x150-1.png?lossy=2\u0026strip=1\u0026webp=1","fqdn":"b4270182.smushcdn.com","domain":"b4270182.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /4270182/wp-content/uploads/2025/11/CFR-Website-Logo-Transparent-350x150-1.png?lossy=2\u0026strip=1\u0026webp=1 HTTP/1.1\r\nHost: b4270182.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncontent-type: image/webp\r\ncontent-length: 24866\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4891896\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"278b9918c69593d66e60f8e977bef4e0\"\r\nlast-modified: Sat, 22 Nov 2025 16:22:49 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Dec 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=35853, smushRatio=30.64, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.40\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 11/23/2025 12:42:34\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 66686d9e30506e2d4d153ac945a97e6f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24866,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"278b9918c69593d66e60f8e977bef4e0","sha1":"d8f4a7b1cb87f762e2d27647121768821eb3cf35","sha256":"8f3d7d31340c294cd00055341acbbad93a41faff10410fb3685febaaa24b8f3e","sha512":"a9ae490a1be4a6805419d7c1327e498568fcb700eab1b9ff1a6dd78c81202ade1e572ed44a46bd03e1df16f6c82820610080ef1e5cce4f4213ac21f66fe29e9e","ssdeep":"768:FujON11QCLzfjFoARzYWML7LPdr+4WgB/N9hEXpBrVc809L:yO1FLzfjPzKFyWBNLE7mL","tlshash":"01b2e138d5f1f28b0f7ac5583bae7b88cff567bd12c61224416afe485119ab4600e1f9","first_seen":"2025-11-23T12:43:08.211137Z","last_seen":"2025-11-23T12:43:08.211137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":845,"timings":{"blocked":93,"dns":0,"connect":2,"send":0,"wait":478,"receive":85,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/cookieadmin/assets/css/consent.css?ver=1.1.3","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/css/consent.css?ver=1.1.3 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Aug 2025 11:57:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2439\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9507,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"596b429487a7f4fc929f90693b81a9fe","sha1":"8002c68a0f7db2f50063ae66176439d04053dcb7","sha256":"dad4a26bf621f102d13bf3e3f8bc412ccf983133a972e524a77ab2e17c5a3f36","sha512":"78780d328921eead53819afba722dbeb30277b1d158e49d2bebda60f1ea2898baf9e45470f0c6c584fbfc5e5f6dbb94f62a7c8ee3a3224706ed36d9fe557aae1","ssdeep":"192:F4K1enP2IS2CB2CM5OipPXm23f+bd7ABF:Fx1enP2H2CB2CM5OihXm23fU7O","tlshash":"fd1223163d9ca60c521b80d4e994d755962f5582fe0f4d9e5ab238bcc2c87c34ce2eee","first_seen":"2025-08-27T01:47:45.893774Z","last_seen":"2026-04-03T15:12:03.563319Z","times_seen":947,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6536\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":53644,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53644), with no line terminators","md5":"c4cab6ce02bfe39b6ca982696e560b67","sha1":"87b0108f3629c4c414c85de97cfb75317ad6adfb","sha256":"06e84209875d1e31571804879630569f122b42777432c1d13f4f5e582b350858","sha512":"d3998663072fc34aba7ae27f4d01887d398f5953dfd4c8cdebfb0b5646fedad182b28b4e90d6cf9de5743254b9295793819858d003583f62e01e15de69d370e6","ssdeep":"384:5srJS/vmyeUaEMoZ0qk0e/RmRC5Cz9TfikvmGkvmCFldlRaE2ks05ArOk:HLRdL2t7RllNX7s05Xk","tlshash":"9933fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c5239afece63b36c1b","first_seen":"2025-10-21T21:24:49.20435Z","last_seen":"2026-04-04T12:18:16.335208Z","times_seen":21055,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/uploads/elementor/css/post-497.css?ver=1763655473","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-497.css?ver=1763655473 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 20 Nov 2025 16:17:53 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2498\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":30124,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18275)","md5":"50759e7fbdd2c584deb454d7cf417f9e","sha1":"98e1bb509470543944426512290d9e21aa8dced0","sha256":"263067c3561c2c106cfe06bb4a19ab689823213deda3f2e61a0628b8582bfcb7","sha512":"630b8ed6edd3f337c7dc493b24d2aad2a0f464d50957745ef594c869f4bcb013b6c83002ae2cf239db80d3928a9adf73c32655ae66b08c055523717dce4f0547","ssdeep":"768:uQytcAChL9S+2D4LXBqf25cfjng3IjXnmj/1Cg/pkhWIry3Eqv+LKYyBYHqiXWBT:EI","tlshash":"a7d279993e23d029b57f042f658ba46c241ce8cacd2e95fbf4489213e1f6f2a7764714","first_seen":"2025-11-23T12:43:08.213209Z","last_seen":"2025-11-23T12:43:08.213209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=PT+Serif:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:58 GMT","end":"Mon, 19 Jan 2026 08:34:57 GMT"},"fingerprint":{"sha1":"56:14:7E:EF:FA:D2:CF:DD:3B:30:9C:AE:7A:C9:AD:9E:A7:87:3D:E9","sha256":"72:DD:0F:82:4D:8A:09:2D:BB:5B:E6:1B:6F:09:F8:1E:BD:BD:D3:3E:B8:A4:8C:B9:49:13:4D:DC:D7:EF:EA:77"}}},"request":{"raw":"GET /css?family=PT+Serif:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Nov 2025 12:42:34 GMT\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5870,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7240794c19e9eda4497115d05c020d01","sha1":"cab75368c4c745548d0ecb9d3f0ec2578f9a110c","sha256":"8da12683a13e8ab52c76be89ea3f19848832637e631d2a56bdd83bfb529872d1","sha512":"ba5f2842e4e9c975f6c424594c954e7e2430b1767776a3b9164a6fb5dc50dd8534ebe48c5b0c4a42bead040c021db251e9cbefa72e10cc4f300941b236502749","ssdeep":"96:ZYgEae9JYgEahCFZAYgEadJc+uyYgEaJNCYgpaUzJYgpa/FZAYgpaxJc+uyYgpae:+Oe9OOhQOV0ObrUzOrhrB0r/xGE3s1jH","tlshash":"acc10f92042b9940eb476dc127cfbe36ae0e92153404e97e7bfe1cd4eca6d665360b4c","first_seen":"2025-09-08T18:20:18.59824Z","last_seen":"2026-04-03T22:17:43.273416Z","times_seen":259,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":94,"dns":0,"connect":9,"send":0,"wait":31,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 21:14:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T12:49:15.258785Z","times_seen":685263,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-P36C83GM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"4E:9E:D1:61:E4:7D:C2:8A:B6:AD:D2:31:C7:07:01:E4:DB:A0:A7:A9","sha256":"C5:DD:D4:CA:97:B7:B5:8C:B4:99:E8:56:30:AC:1B:F0:FD:7C:5A:FD:19:ED:13:D0:27:D6:0B:76:C7:C7:A0:66"}}},"request":{"raw":"GET /gtag/js?id=GT-P36C83GM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nexpires: Sun, 23 Nov 2025 12:42:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143215\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430868,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"b13a0ec9a6c3fb7804694bb6ca49db2c","sha1":"6d3bb5337648d2a2aa7729c2e63c1f482dd70ab9","sha256":"d702d4ebae820c7c7d8c9992550bbbb247a3d5dee730309e206f336d252b666a","sha512":"4461b26c7a860c3ea2c1deb70019dfb3594ff8f64f67d6bdeab747881cb52c52a774d017ad9576804be0d18e6fc3f0f88fbad803af7d767c8e8f559253b61525","ssdeep":"6144:VJbPBUKitJeUI2XVUULUVWo6O7GQEO7QZ2ElVFBoOr+Lu:7bJDi2UnVUUtO7QZ/","tlshash":"40941ace73d674225396f078502f018ba57b28a2b45cc896f1c9cde12e74a9a4277f7c","first_seen":"2025-11-23T12:43:08.215181Z","last_seen":"2025-11-23T12:43:08.215181Z","times_seen":1,"resource_available":true,"data":null}},"time_used":601,"timings":{"blocked":238,"dns":0,"connect":11,"send":0,"wait":35,"receive":30,"ssl":284},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/all-in-one-seo-pack/dist/Lite/assets/table-of-contents.95d0dfce.js?ver=4.9.0","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/all-in-one-seo-pack/dist/Lite/assets/table-of-contents.95d0dfce.js?ver=4.9.0 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 11 Nov 2025 18:46:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 251\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":685,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (684)","md5":"4d435b2968cda40d69a5bc7cc5383f46","sha1":"7bf26b1edaac6db5943e6701ab82840c49db7d20","sha256":"4b69179a0538863821c36d742825a6a4fab601aa56483d7ac09c7e8cbb4a1a8e","sha512":"cb341f3ba2a329edbe05775aaf9e00544c2dbaceb664a5e2c343c429a688f978b216d3b4adfcf3053e383bd8444cc84752cceee6a4821e9bc8c71cc9cc62440e","ssdeep":"","tlshash":"bc012b54e190353104fd2e9ec9f235d2e74d2159718ac0293cf9cd0f1ab58aaf170ab3","first_seen":"2025-11-06T17:37:37.032769Z","last_seen":"2026-04-04T11:09:44.543573Z","times_seen":5979,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/themes/hello-biz/assets/css/theme.css?ver=1.2.0","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/themes/hello-biz/assets/css/theme.css?ver=1.2.0 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 10 Nov 2025 11:13:47 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2911\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11616,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (11609)","md5":"7f7609d2c822e88a28487bdc7954c14e","sha1":"05b522bd0510c463182bc0e337fdb3cf4b107eb2","sha256":"58173a5b4149a6179aed984a28e8eb7d5f3574f3e6a309112f857310bea19dd8","sha512":"826446a1693629c98339e6c7e7b72efff6121ad68c6b244777bff3978f599406bf1622211066635633d47d48a55e1f325697aa30e8024e90e706b52bf80dee27","ssdeep":"192:vDFHoyHNuL86+hKZBG9HUXhz/a84yDhgGbMrM6cg78pwLUNFpqwc:LloyHM4GQ1aWnOTNFpqb","tlshash":"0932ca539ad0316c653bc6253ac17fc935255315c6234bf4eb269bb8c6cf6221e3278d","first_seen":"2025-09-22T16:24:49.078243Z","last_seen":"2026-04-04T08:37:38.00071Z","times_seen":407,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 09:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T12:49:15.274165Z","times_seen":638661,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2251\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5667,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5667), with no line terminators","md5":"4913f164c19428cc6084ea9cd544892a","sha1":"651110f7a0047c49a4a1b5862f2d2f3a2bf467dc","sha256":"a31567b34498e4680f7b5cf5fe2d13bd9f7c30b79089c3533ee7aa1586290723","sha512":"f7c74091f8698537479ebe785fef83a61523b828f805047466acc61b3d48db39bbd098395f784f349eb392f6b8c514921a90dd6989905dfba914d5ed1b4e3fb7","ssdeep":"96:+6sN0Z9Z4JfrjqoiNDmEl8OWZp5dfL0mAleNzwVeLUVU2j2KBKGarNcl8/2:JsNGyrjpiN4594mf0IQ9v7G/2","tlshash":"75c152941694fd2b31e139d8e01b9734652ec0337c1af981fa32dced64e4ed183aa532","first_seen":"2025-10-21T21:24:49.261004Z","last_seen":"2026-04-04T11:24:28.005068Z","times_seen":17856,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 06 Feb 2025 22:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6812\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-04-04T12:45:57.183032Z","times_seen":217858,"resource_available":true,"data":null}},"time_used":440,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":440,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1442\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3721,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3720)","md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-04-04T12:20:26.846311Z","times_seen":44481,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 11 Aug 2023 22:18:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1687\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5520,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-04-04T12:45:57.140499Z","times_seen":147484,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6203\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24047,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24003)","md5":"a992d787f3776bdc23751c238189688e","sha1":"76e9d87298cc9a64029c830cb686738e054cf6ec","sha256":"6037f9ef9422224b7cc53d13cb876bd4e7fdb2a6720395db63cb33ec815a2135","sha512":"b744732f4bfe6ec5b7ad73965604d07ed5564267321943fc02053ffc474920b37aeb10f8d8bbbfa9fa765a088e9bbc9a0f006f6198d38082d8806654e86252fc","ssdeep":"384:7Gy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN7Kh:7R+EVxFm6cKikdHd7glQtHuGJswg/DT6","tlshash":"5fb2d9023163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","first_seen":"2025-11-11T15:45:08.550808Z","last_seen":"2026-04-04T10:08:25.611952Z","times_seen":6603,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/js/form.71055747203b48a65a24.bundle.min.js","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:35.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/form.71055747203b48a65a24.bundle.min.js HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:35 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4956\r\ndate: Sun, 23 Nov 2025 12:42:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19732)","md5":"d1fadfda0cfde2fa50655a6da0ed6a98","sha1":"486fefcb0e227b78364bd6bcc56cb8a6670a4f48","sha256":"543284d598ba0b012bae1a49f1e520addc012ab023759d5b33288429bba4f78d","sha512":"3dfa88e07530f04b49e1b880f92e4d202833f9d5afc7406c137774b37a38e22749154115a1e42fa3776ff320ec28348bea0f6388c243af5cc75f4b1fc8bbc08f","ssdeep":"384:9PfucUQ8HOfXXtaij86dYmpbaX0QY+iECkGWWhdNMCHr5w//sjKHqXt5fsbu8sUU:9PfucUQ8HOfXXtaij86dYmJaX0b+iECl","tlshash":"e79282a13161688b4a9e24bab893009cb70325bcb686704eb5fc08ef9774dc1733537b","first_seen":"2025-11-11T20:38:15.197102Z","last_seen":"2026-04-04T07:48:11.485827Z","times_seen":1013,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 21 Oct 2025 16:51:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 214\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-04-04T12:45:57.19499Z","times_seen":54211,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=3.33.1","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=3.33.1 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:33 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 12 Nov 2025 07:59:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 162\r\ndate: Sun, 23 Nov 2025 12:42:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7305ed8a30b2e9610fea4e383b7d1756","sha1":"24bef514e8dbd4dc0cbebb686639085dccbb9b4e","sha256":"6f0b2e96bd88c2d8512dfd204adaf2251376467a1f834a51c66ce85f0051979d","sha512":"cb9938e53724a35304cd932207fc9a255f4aa51ea111168e7fe4f9871435e5430a0377886243a4a62b3c2de92f143b88608a460086f6f482e024d251d29be11d","ssdeep":"","tlshash":"82c08c847a8fc830c03fb291088aae1c036ba8c34a90408aac12a00e0aedfe512dc002","first_seen":"2024-10-29T10:46:14.149107Z","last_seen":"2026-04-04T12:20:26.867757Z","times_seen":32222,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.1.3","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:33.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-content/plugins/cookieadmin/assets/js/consent.js?ver=1.1.3 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 23 Oct 2025 17:10:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4282\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18180,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (584)","md5":"55bf125302bcf8c093a69a2a70c98799","sha1":"3409bf8683c55120111c93ad1e6d296f24183724","sha256":"387b6f25925a4ac7a5d9f1c6b9a97839c1b305f27ab892fc6123926d1a47461f","sha512":"66d50acf0768d4de2fdb8b6741436932edd6996ba770568c0a995ffd62c501137c178a847e292628c5188e52de1096122a288927d4cbd0a1fd419348ca2929a0","ssdeep":"384:NCxrOeCPhR/iF/iiM05iJfiT3iFQJklrzKCQy64w/ibfiw3i75iVfiW7Bfij3ixw:8riJR6F6z0AJaTyFQJklrzKCQy64w6be","tlshash":"4282eca5fedc962c00e512f5e56a528db42c5022f806a89d3f3cb5f48ae0fd74cc5a5b","first_seen":"2025-10-23T23:07:23.868013Z","last_seen":"2026-04-02T07:02:06.934376Z","times_seen":426,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 30 Sep 2024 09:11:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1571\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-04T12:33:23.623476Z","times_seen":210045,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clonedfirmregistry.com/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"clonedfirmregistry.com","domain":"clonedfirmregistry.com","tld":"com"},"ip":{"addr":"162.0.235.148","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonedfirmregistry.com/","date":"2025-11-23T12:42:34.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clonedfirmregistry.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 09 Nov 2025 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"3F:D8:A2:03:4C:17:A9:36:4A:32:24:66:69:F7:61:74:A2:55:C4:2D","sha256":"DC:90:6B:94:02:26:73:68:8E:39:91:EE:C2:65:FD:67:35:94:0D:3B:5A:18:E8:57:FA:EB:5B:49:4C:20:9F:2F"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: clonedfirmregistry.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clonedfirmregistry.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=31557600\r\nexpires: Mon, 23 Nov 2026 18:42:34 GMT\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 15 Feb 2024 21:53:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3542\r\ndate: Sun, 23 Nov 2025 12:42:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-04T12:33:23.670752Z","times_seen":237005,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-23","alert":"Sinkholed","trigger":"clonedfirmregistry.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}