{"report_id":"c1bfb27c-bd80-4e5f-b2bc-c3ca5bdf084b","version":0,"status":"done","tags":[],"date":"2026-09-19T13:33:46Z","url":{"schema":"http","addr":"clashx.ai/","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":0,"asn":20473,"as":"The Constant Company, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"clashx.ai/","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"title":"ClashX 下载与 ClashFX 升级指南（macOS）","dom":{"size":1218,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"70fafbcabcf4f3d555819ff13fe9a514","sha1":"22ce692b055be9f062f00759b652110f345e63f5","sha256":"2d6f50ae41b4be73dbeadd3eae78ecebedee31925074297e0155dbc65b9f4c0b","sha512":"b7775c73958a2bdb0d7ff69de6ac7ee15050fbcdfa3566f28d3addc3bb366c21aa42f453e34a9edb24ec55facf2fbe8992dad393cb73bcc4a0a1a3375cf45f9d","ssdeep":"","tlshash":"e32111b3c011dc3af284a250ac49f12c84f6c319c7d83d90f8da81972e48f524ce765d","dom_hash":"domhash4cc88b8b1a0b25759b8f9b92997acaa5","first_seen":"2026-09-19T13:29:55.460743Z","last_seen":"2026-09-19T13:33:47.489726Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"clashx.ai/","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":0,"asn":20473,"as":"The Constant Company, LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T13:33:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"clashx.ai","ip":{"addr":"207.246.82.226","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T13:29:52.004983Z","last_seen":"2026-09-19T13:29:52.004983Z","alert_count":0,"request_count":9,"received_data":98954,"sent_data":3885,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sdk.51.la","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2005-01-17","domain_rank":347679,"first_seen":"2021-03-08T16:03:51Z","last_seen":"2026-09-15T19:52:54.737321Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":466,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"clashx.ai/","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T13:33:08.243Z","timestamp":1789824788243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clashx.ai","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:50:CB:8F:05:17:A8:F6:79:DD:10:49:C2:3C:6D:1C:76:20:D3:2D","sha256":"F6:17:A0:3B:B1:20:74:F3:9A:EC:4B:3A:36:D7:E6:AC:2F:84:0E:E9:E4:FF:7E:1B:CE:A4:DC:35:DD:03:C1:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clashx.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 13:33:08 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 21 Aug 2026 19:05:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a88a165-49ac\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18860,"size_decoded":5593,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (325)","md5":"042694c5720c8860179d1307688f3fb4","sha1":"323d209e48258005ea687e647f65bd2192c973e0","sha256":"519446665ab624911f9aa5a591e9233d65cc52ad41d51a15611978bf9c900ed6","sha512":"fdef645a78d983434a521b459a323b2cf6156ccff3af3aef967e9d9b4d609aa4dd5f19f974b403bbd6f9ce84853abb839f361d94dc33300da93e7e27428e7747","ssdeep":"384:kvzb8K9RvN+5mFdS94lWba2JjLKysBp+ZuDiGtDV:iPFS94lWba2Jj+Pp8uzr","tlshash":"1d82977164f69f2702a3a2c25995931e9e92f387d08b5542bddc07b89fcdc61a80b60f","first_seen":"2026-09-19T13:29:55.477972Z","last_seen":"2026-09-19T13:33:47.490526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":0,"dns":68,"connect":95,"send":0,"wait":104,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clashx.ai/assets/css/style.css","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clashx.ai/","date":"2026-09-19T13:33:09.038Z","timestamp":1789824789038,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clashx.ai","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:50:CB:8F:05:17:A8:F6:79:DD:10:49:C2:3C:6D:1C:76:20:D3:2D","sha256":"F6:17:A0:3B:B1:20:74:F3:9A:EC:4B:3A:36:D7:E6:AC:2F:84:0E:E9:E4:FF:7E:1B:CE:A4:DC:35:DD:03:C1:51"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: clashx.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clashx.ai/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 13:33:09 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 05 Aug 2026 00:27:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72837c-7f09\"\r\nexpires: Sun, 20 Sep 2026 01:33:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32521,"size_decoded":7769,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"cf32a6bde43b5f106ea2cdbb2fafe502","sha1":"bc601a189c99c0516923ba3ba5c76e093d2dd2c9","sha256":"91ca2e977b1d2ee09d3186fd4fb8825dff70f5dbcd20ffc78ebd7215f3148772","sha512":"1b741bf6b1f01c6cefb12c5f11fa0addd27235ddf2345521738c4aa8d7bf7b8fec83611d55d09e838a11b710ab377891a94607f7ec43e694aef817a4d4c21650","ssdeep":"384:11TGCUXRu6NKnF7QIZK4CzptwCOw5Wyexl504BDGYgZrElrr0QW:11HnF7HZK4CzptBOw5JexlG4BDGYjW","tlshash":"64e22193bb6491b4bc2b95786b97db97339ca142800ade797fe4100cdcc82f955a2b4c","first_seen":"2026-09-19T13:29:55.479722Z","last_seen":"2026-09-19T13:33:47.491315Z","times_seen":2,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sdk.51.la/js-sdk-pro.min.js","fqdn":"sdk.51.la","domain":"51.la","tld":"la"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clashx.ai/","date":"2026-09-19T13:33:09.040Z","timestamp":1789824789040,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /js-sdk-pro.min.js HTTP/1.1\r\nHost: sdk.51.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clashx.ai/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-19T16:41:45.638844Z","times_seen":18551995,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"sdk.51.la","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clashx.ai/assets/js/analytics.js","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clashx.ai/","date":"2026-09-19T13:33:09.042Z","timestamp":1789824789042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clashx.ai","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:50:CB:8F:05:17:A8:F6:79:DD:10:49:C2:3C:6D:1C:76:20:D3:2D","sha256":"F6:17:A0:3B:B1:20:74:F3:9A:EC:4B:3A:36:D7:E6:AC:2F:84:0E:E9:E4:FF:7E:1B:CE:A4:DC:35:DD:03:C1:51"}}},"request":{"raw":"GET /assets/js/analytics.js HTTP/1.1\r\nHost: clashx.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clashx.ai/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 13:33:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 05 Aug 2026 00:27:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a72837c-1488\"\r\nexpires: Sun, 20 Sep 2026 01:33:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5256,"size_decoded":2133,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bdefc125633946fb176a96d78977fa94","sha1":"afac659140fbcc64f4b17cf3566d642f8ecc81eb","sha256":"47a1ab28c451acbdb10c0756a3c7ec84e55160cde17308c6a0149bc9fb1a49fa","sha512":"e3114a6db354d06078629d97a54b4a5533a84dc59e712c583381b05b5a163312ba627b4e488190160a26644f29b77981897f0abde899032623e396936b760936","ssdeep":"96:cdyQ+Q5W4hRKHYIVGwKP3EqkO86xpVofPyfoi2LK2ZGPS5VzOjNMtFbjfAgdrPr:vQ+aW4hRKHYyGvDkO86xsfPk12LK2ZGU","tlshash":"32b123adb9b7527140736038973f6108712670c3398bdc25be6c46406f9dd2b62b6bce","first_seen":"2026-09-19T13:29:55.463833Z","last_seen":"2026-09-19T13:33:47.493892Z","times_seen":2,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clashx.ai/assets/js/seo.js","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clashx.ai/","date":"2026-09-19T13:33:09.045Z","timestamp":1789824789045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clashx.ai","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:50:CB:8F:05:17:A8:F6:79:DD:10:49:C2:3C:6D:1C:76:20:D3:2D","sha256":"F6:17:A0:3B:B1:20:74:F3:9A:EC:4B:3A:36:D7:E6:AC:2F:84:0E:E9:E4:FF:7E:1B:CE:A4:DC:35:DD:03:C1:51"}}},"request":{"raw":"GET /assets/js/seo.js HTTP/1.1\r\nHost: clashx.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clashx.ai/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 13:33:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 15:39:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d79c0-1972\"\r\nexpires: Sun, 20 Sep 2026 01:33:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6514,"size_decoded":2444,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"6a30ef5e61ea5fe2a96300ef3e5fd7c8","sha1":"0eec2005ba2f07295b662db38fc8a1bff68f1193","sha256":"dfef8505dd4ed7bed495566c26409edd7c912d6642f4bf55ec78ccf3221b0db4","sha512":"d8ba0bc804ea240918df0e0b1bda20136ddb9a965a715f161959b8c9857b5691481ee0f9eb8c267e1112735396815c90a3d3dd60ccedf74063648a0e13a7b51b","ssdeep":"96:R8GDqe+qTMGdgwyAdKwkG3iYEpydTDNky8WY0Ftrpa1seMoafHEy+lalOacQEzuV:Syqe+dSipiFtrXeDILO8AiACOMIGpB","tlshash":"2ad156ba7493a07156b770baceef9149b17000079805fc12bd8c952c2fc476e57b5bea","first_seen":"2026-09-19T13:29:55.465703Z","last_seen":"2026-09-19T13:33:47.494827Z","times_seen":2,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clashx.ai/assets/js/header.js","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clashx.ai/","date":"2026-09-19T13:33:09.046Z","timestamp":1789824789046,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clashx.ai","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:50:CB:8F:05:17:A8:F6:79:DD:10:49:C2:3C:6D:1C:76:20:D3:2D","sha256":"F6:17:A0:3B:B1:20:74:F3:9A:EC:4B:3A:36:D7:E6:AC:2F:84:0E:E9:E4:FF:7E:1B:CE:A4:DC:35:DD:03:C1:51"}}},"request":{"raw":"GET /assets/js/header.js HTTP/1.1\r\nHost: clashx.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clashx.ai/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 13:33:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 18:22:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d9ffd-d13\"\r\nexpires: Sun, 20 Sep 2026 01:33:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3347,"size_decoded":1569,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d323dd99d3aee580feae9faeb9694840","sha1":"785281b10ba07b548bf7738b32e50500474c269b","sha256":"42627b5a786eacc7143d47c108c3b906399a1c319e2a565f3cad0e55e56d5ad9","sha512":"5a0c6d5191925d3afdb49dd597165b967e6760a7cc7dbacd38c9c98ddb5456cdff6966d6046b6ee2826400e6f68702bb610323cd609604a1cc8b813b54f0b082","ssdeep":"","tlshash":"1a6135ca6897b03bc543b3781adf6101b8b215c38081da09b26c8d559fd476c63bacfa","first_seen":"2026-09-19T13:29:55.467023Z","last_seen":"2026-09-19T13:33:47.495553Z","times_seen":2,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clashx.ai/assets/js/footer.js","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clashx.ai/","date":"2026-09-19T13:33:09.049Z","timestamp":1789824789049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clashx.ai","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:50:CB:8F:05:17:A8:F6:79:DD:10:49:C2:3C:6D:1C:76:20:D3:2D","sha256":"F6:17:A0:3B:B1:20:74:F3:9A:EC:4B:3A:36:D7:E6:AC:2F:84:0E:E9:E4:FF:7E:1B:CE:A4:DC:35:DD:03:C1:51"}}},"request":{"raw":"GET /assets/js/footer.js HTTP/1.1\r\nHost: clashx.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clashx.ai/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 13:33:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 16:47:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a512223-17a9\"\r\nexpires: Sun, 20 Sep 2026 01:33:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6057,"size_decoded":2655,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (751)","md5":"ef3de73690afece58459cd18ed0bc497","sha1":"b3e9c710cb92943d456de64e5d29e8c3dbc08737","sha256":"c61966c17494f4426c65cddd3e2a8e465899da0f79bd38071595e476d58f494b","sha512":"d943c16012b3722c6aaac603e032ecab1530ea552e04e6727b138fd6087df5fb4974808aa75310c6d02017ef9df2cdc29b363ff8ed589ffc25a945fc0c089e03","ssdeep":"96:RuP3jZyd7cO7XIuOzIzMZ/Cgfbp/3mAQ84X5P3WxARPNDVdp9NUb9IH1cqz:A3jZyd+7Zagf4AQ8cPG6Zv9KbKHCW","tlshash":"69c132fa75ab58be8746c5cf7d4f5328a8a55027cd477c0971ac01041fca85b0b32afa","first_seen":"2026-09-19T13:29:55.476033Z","last_seen":"2026-09-19T13:33:47.496721Z","times_seen":2,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clashx.ai/assets/js/ads.js","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clashx.ai/","date":"2026-09-19T13:33:09.044Z","timestamp":1789824789044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clashx.ai","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:50:CB:8F:05:17:A8:F6:79:DD:10:49:C2:3C:6D:1C:76:20:D3:2D","sha256":"F6:17:A0:3B:B1:20:74:F3:9A:EC:4B:3A:36:D7:E6:AC:2F:84:0E:E9:E4:FF:7E:1B:CE:A4:DC:35:DD:03:C1:51"}}},"request":{"raw":"GET /assets/js/ads.js HTTP/1.1\r\nHost: clashx.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clashx.ai/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 13:33:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 14:01:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2d62bc-1d7c\"\r\nexpires: Sun, 20 Sep 2026 01:33:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7548,"size_decoded":2663,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f77e9b1bfd0edd711ffa74effda6a053","sha1":"f3ca8d5ca1591500f0b6aa31055e169e6b08fb27","sha256":"f5d388958e468bf406bd117fe08435f1f9fbb856cc57766db767d2452b8661bd","sha512":"6fe637d528e4e6e602421ff4f4401a93f9bd2c02963aafc2883f3868eb3e2395fd7aaa24192e084ff6aa70aa0f816432c5c844a7b30bcd75683fc82de8705f5e","ssdeep":"192:t1c4UQH3rKUNHS7AWtwfiK6xgCfi1sy6ooRIuMMEE/+4m:MyqyRu1q","tlshash":"93f1429a68e338374023a0fd5eaf8445b5346523214dcc86fd9cc3147f92d69f6aaadc","first_seen":"2026-09-19T13:29:55.471958Z","last_seen":"2026-09-19T13:33:47.498859Z","times_seen":2,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clashx.ai/assets/js/header-tools.js","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clashx.ai/","date":"2026-09-19T13:33:09.047Z","timestamp":1789824789047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clashx.ai","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:50:CB:8F:05:17:A8:F6:79:DD:10:49:C2:3C:6D:1C:76:20:D3:2D","sha256":"F6:17:A0:3B:B1:20:74:F3:9A:EC:4B:3A:36:D7:E6:AC:2F:84:0E:E9:E4:FF:7E:1B:CE:A4:DC:35:DD:03:C1:51"}}},"request":{"raw":"GET /assets/js/header-tools.js HTTP/1.1\r\nHost: clashx.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clashx.ai/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 13:33:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 10 Jul 2026 16:37:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a511fb8-3243\"\r\nexpires: Sun, 20 Sep 2026 01:33:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12867,"size_decoded":4403,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"417f0f5ca6474e02e7b24f04ce47a54d","sha1":"1be97a43638cfb9ae4c805f64986200fd33c2c1a","sha256":"9911514497a6264566f39f99aa50ce7b0cb68ab8e6c0e8d5f0a41d4f7158e7a3","sha512":"a8237b3529c1a850d2ad53fefdd42fe859a7a6336abac74fd51f0cacbfa8ce01e6d101abe7706c88193196c312022dff1410c3be8b441403b96d58467d7e3f29","ssdeep":"192:iNyZaQ8ljfIpJA/rJmoOMdgUP8tsT28j9eAAUuBO+jP1wYGJWQ5:iJTcoHdJkS1eAAUuBBWL5","tlshash":"574286ae78933537853392bdb7ef645435a510238506da04b9ac82046ff0e3857bedf9","first_seen":"2026-09-19T13:29:55.47411Z","last_seen":"2026-09-19T13:33:47.499724Z","times_seen":2,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clashx.ai/assets/js/main.js","fqdn":"clashx.ai","domain":"clashx.ai","tld":"ai"},"ip":{"addr":"207.246.82.226","port":443,"asn":20473,"as":"AS-VULTR","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clashx.ai/","date":"2026-09-19T13:33:09.050Z","timestamp":1789824789050,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clashx.ai","organization":""},"issuer":{"commonName":"ZeroSSL RSA DV SSL CA 2","organization":"ZeroSSL GmbH"},"validity":{"start":"Tue, 11 Aug 2026 00:00:00 GMT","end":"Mon, 09 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:50:CB:8F:05:17:A8:F6:79:DD:10:49:C2:3C:6D:1C:76:20:D3:2D","sha256":"F6:17:A0:3B:B1:20:74:F3:9A:EC:4B:3A:36:D7:E6:AC:2F:84:0E:E9:E4:FF:7E:1B:CE:A4:DC:35:DD:03:C1:51"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: clashx.ai\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://clashx.ai/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 19 Sep 2026 13:33:09 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 13 Jun 2026 04:41:29 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a2cdf79-cc2\"\r\nexpires: Sun, 20 Sep 2026 01:33:09 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3266,"size_decoded":1447,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b8845deb887f62d15819a3b688b2a592","sha1":"651146fe91ccb0d86c6f0679c5d3c48307148df5","sha256":"4688f1beb91cd11483e4845e3bd3381da65bb83090e38960ba620807692a5f94","sha512":"7f60136c419f8084fe0b7ee30b4a3634273c7997ab2335f5adde9b2d00dbf14c85c87f1dbf1dd9201f5c501292cbe0456cb48ec3ce835fdb2918a34462ca2ad1","ssdeep":"","tlshash":"f561891e74f62076807372ba979f9248b635500b3046cd163eacc7841f918796fa3f9d","first_seen":"2026-09-19T13:29:55.468122Z","last_seen":"2026-09-19T13:33:47.500402Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}