{"report_id":"da5b5595-e941-4187-b615-f83657d94de7","version":6,"status":"done","tags":[],"date":"2026-02-01T14:43:28Z","url":{"schema":"https","addr":"clipscoinrefer.com/","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"clipscoinrefer.com/","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"title":"CLIPSCOINREFER – Video Clips de Referidos","dom":{"size":40721,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"b4017a3ea1867081d4a570552e297ebd","sha1":"dd5b9868fa7402c5a7befceb9311703b7a498a95","sha256":"241e0f47c867b3ca31237850acee2d38f938c1f349441adb7016f7be36cba543","sha512":"ad08b5e99933fe0f1e513265d1ecac5c1cca13140dcde9e6163ffebef3e682de011847209397f13e625e2baa920681db0bf867471bd52190a332c0cb4386efab","ssdeep":"768:h7ZdypJg7mTN6Uh5R2OG1gfG9xEQyctAAUuo0sCt:hLyp67mT0+KOG1uG9xEQyctAAUk","tlshash":"9603f87290b85437265bc7e9a0b1b31daad8e513ca069675b0fd61a84fe5de300b360d","dom_hash":"domhash672e4b316230b1be93b09c90b360e4e8","first_seen":"2026-02-01T14:43:30.885238Z","last_seen":"2026-02-01T14:43:30.885238Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"clipscoinrefer.com/","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T14:43:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":3,"received_data":122889,"sent_data":1659,"comment":"","tags":null,"fingerprints":null},{"fqdn":"clipscoinrefer.com","ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2026-01-10","domain_rank":0,"first_seen":"2026-02-01T01:00:54.822605Z","last_seen":"2026-02-01T01:00:54.822605Z","alert_count":36,"request_count":36,"received_data":1477977,"sent_data":18285,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Contact Form 7:6.1.4","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Redux Framework:4.5.6","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Elementor:3.34.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":39961,"sent_data":538,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/wp-emoji-release.min.js?ver=29395f90ee25cd3deff6b858384e28a5","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-07T22:17:59.898124Z","times_seen":310539,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-archive-append.d13d2129.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acc6d3fc910ef28d9d8cbc5032f352f0","sha1":"b61270b0d319b6035d40d2f2f242ec94102c9c23","sha256":"d1290b004aeafa8c7389fda596d69f1c8fcde08871da509db59aae3b076d5225","sha512":"eaa2a96cf58166c83ef756343216459d7efe9385a50d62e8e09568c119a726dc25a7150db578ecf7bfa1a2f21937593ec8cea80203350fccb15ffd00a2c82ed5","ssdeep":"384:S4VLFExjhuofPVEMxEf0cKEWU9egGsAHoYykIdwqO4tiEcp+G2iORbqYGI8:SiLSFuofPVEMxEf0cKEWsegGslYMKt42","tlshash":"2062b790b3e4c8e8a2f118ecfc742b10727da463b545905e719d5dea4b2ed06f433a7a","size":15223,"data":"","first_seen":"2026-02-01T01:00:58.427027Z","last_seen":"2026-02-01T14:43:30.938588Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd4f92568df57028b6869a3c49b4246e","sha1":"ab445518fb649eb78bfd89998ce8fbc2af4fb604","sha256":"e7e70c07576af51ea369ededd6a50ec814f695924e09e7de7defe218ede09e9d","sha512":"c54bf16b27667f5fbf17992efe5cc7ff6c722f68eb417c480160f0109aa7c0c666d89bf5268dc42d612df3343ff3302b42c39b11a0b1889e3b7650020ff69071","ssdeep":"","tlshash":"9961b69ae7763ccbb2f900f2697a0e47eb614435d6c8d038c9bea3141cb5893c274b46","size":3440,"data":"","first_seen":"2026-02-01T01:00:58.451516Z","last_seen":"2026-02-01T14:43:30.964103Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-authentication.9f030737.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1202bb1e14f958f29c20b3dcf4d200a","sha1":"bdf4c7509a6fbb2c341c0010bb1db53d3ab2131a","sha256":"c9817393f9f2e750e003da4067ff141103007b149b015f3d923c795596d8dae8","sha512":"8eeb0a9541e2fb7315778b3f5ab4d1b3a807dee9cdbf7f523a4df1f3f739882151349271897295d8900ae69555e050389907e321d44f4d347478583ef3b7f9c8","ssdeep":"768:whL87iKNr+hJ+xPz2iPktl+Tu4Ak9KFVq6+uDJQ/b241SzeKQQSun/ooecARTjGK:q6+z+xL2iktljz2N2BnooecARTjB3RtF","tlshash":"29c284e3716a487105ef48fb287207817532445e7e0ac29c797c8cee6e5ec8762716bb","size":25726,"data":"","first_seen":"2026-01-17T00:22:21.972255Z","last_seen":"2026-02-01T14:43:30.934651Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-ajax.aeca5b15.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9f452658a39e95de9a20904826938108","sha1":"c11ffb379321e072750a65485b78e1f3beb1fb13","sha256":"90cf339870711cda77e831ddb57abdb101e5415fdfe995ac45334f03a3a837c9","sha512":"3eacd81b87d3903cf06e76f743f90d7c17666ed19a9092b8f7bfefbd720534e561d95bd86833fcb9a1c4ad1054742c7d71ed962a44c216450f37a45ec9228e3c","ssdeep":"","tlshash":"93f0ac9f67b0ade74a3204540076e3073296a941b221218043c8a1a81d74837e275be3","size":541,"data":"","first_seen":"2026-01-17T00:22:21.977534Z","last_seen":"2026-04-30T08:35:14.177651Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/inc/Elementor-widget/assets/slick/slick.min.js?ver=1.8.1","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-07T22:26:20.22749Z","times_seen":110537,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-i18n-js-after","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2b82ae3a03ab2c963fd3fb13ce38e73","sha1":"a04af3925a0e3ed98d134c1891d5e5cf2321a120","sha256":"a32d33f9751a54dd63fd54a46a03256ea22f15bddc2567ca311bfbacddcfdc05","sha512":"4b967163755dfa40db17e645447f4cbaf90cd18f7aee094d2019a960a8429ab607c8dc1873d0aee9e301924ef5e7141adfa8ab6c08de6acdffc865198091e33e","ssdeep":"","tlshash":"f0f012cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":530,"data":"","first_seen":"2025-12-15T11:56:19.822067Z","last_seen":"2026-07-31T16:37:33.876166Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-07T22:17:59.962213Z","times_seen":200717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45694b8fdd257ab87fa7e0c0ac44086d","sha1":"124a88b40a041d6a84700f49f0994d6325ea9ffe","sha256":"1c93e3ea0744ba86b9fa6ea97c02ede947973cf4638498f3876318d9bc911b08","sha512":"cc896451ab4dbb57194aac73394a12880382c32c66f70e048bce6005459b2c02618d84965fc8d5dc71d94dfc33a4b5cab2cbaa286054231ed8d4c4fc43d0882d","ssdeep":"","tlshash":"7fd0951582707d930750cdd2123afb7751ecf923f4129cb5516080c04474de25548551","size":250,"data":"","first_seen":"2026-02-01T14:43:30.967629Z","last_seen":"2026-02-01T14:43:30.967629Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/live-streaming/assets/dist/frontend.201c4830.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01deaf9fc867e0f8c8c3f6e3120beb12","sha1":"491fca14bec526455e9309a2d263c30957c46352","sha256":"df67e921c33846c0eba2d68ef0fdd7d13703197d7d089b959d361666a1e9fa58","sha512":"3bf67d748507f93802473da045e8e5506b92576d618f35709d5f151481c9b4933d9e92b516433f43ae59a93d1e35eae6874847484b0be022722be8257d02d113","ssdeep":"1536:H9J21ZUYevcAVY8Z+dMuQ7vGlNm7td7yt41Dy8oBlxvHy9C2NoeBDNJi4n3anX2i:dJ21AcAVZ7SI7tN886f4eWWv","tlshash":"e2b30984a224757642f716da52a9c541b3b50844b449c4b8b0fc8caf99bec9813ffff9","size":116337,"data":"","first_seen":"2025-10-30T03:20:14.675287Z","last_seen":"2026-05-26T01:17:22.01195Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/live-streaming/assets/dist/addmanagemnet.c9690fb4.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"50fd794c5e1887f99e4719750f6e4d2d","sha1":"f6efcacd03a3cf2be24fa6ff510f585569d914c8","sha256":"67ce563f94368059ec72e077987dc6a074752419eaece5da6d614a9b9b8ab7f5","sha512":"0488d9fa986e86359e5367e238d9aed46f4b6d3e77bf491a7e968a3cbc053fe905366b7a68a1507f02c4e69fbacd39028b709dbd1b1180ca5f5560e6883669b3","ssdeep":"384:G20l1sincaW+PsPi5VdIbQ5bpoVn/appih6XOA1hhqglobbyTvAywEx67:G20l1Rnca7ksuQ5NoVSpmWlhBloy7vwP","tlshash":"d442815a373b5476b2d4ccde92a786136a3057076511caadb02cfcee158af4233b5b31","size":12532,"data":"","first_seen":"2025-10-30T03:20:14.614971Z","last_seen":"2026-05-26T01:17:21.998038Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-bootstrap-component.6edf350c.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"24e6c31f0330a664979aefedef963626","sha1":"af4f5462c2909abe66cbaeb643c7988c1fd0403b","sha256":"6b449fa27a717cdd0c0faa3f40ead815913b3cfcb5044ad54dbdd5b404cd0c2c","sha512":"ce5d739cdb1d613decdd3cb4c0335b7c7ee86129400ede28dfaefd3e4d69bac7d38f0062fae4197d254de6498c2f4f3b7cd22b5055405c785a2e00018ec8369c","ssdeep":"","tlshash":"7581ee5573f2a1b31bea00bb82365546b5680946b94990d8e51c0cde3629cc37db3efb","size":3858,"data":"","first_seen":"2026-01-17T00:22:22.004903Z","last_seen":"2026-02-01T14:43:30.925049Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-generalslick.acb3ad7e.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3cf646885363b05e13024594e7348a43","sha1":"e212c374bf578a721bb4421a69f5b94874f6c704","sha256":"88d5fe3ed4ac338acaaa6c3458fb7c1920c7aacb69314c278aa33bfc1c30c82b","sha512":"e8a5dce3cc540617fab16836d2cbe68a4626c538d626c3ccbe88b707bde9026b81abf95751dd6aab75296390ca00edf855baa108e62a714ceee4960f57edf0f4","ssdeep":"768:TPM4Irw+68GLGkT0e44uYrRgbsDUYQbgkirYZFAh4jRAGYyv/zuuqiYdwtfwAqi6:TPM4Irw+68GLGkTT44uYrRgbsDUYQbgR","tlshash":"ab13d9dc318a14f3ac7a90e6522b330061437237fd13990cb6ad6ce56b2dd4be165af6","size":44265,"data":"","first_seen":"2026-01-17T00:22:21.912529Z","last_seen":"2026-02-01T14:43:30.921584Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-vendor.debbce91.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"6b91c9101d93c186bcd92c0a7ff90007","sha1":"cff899d99410d3927996e6a69779773958908470","sha256":"6f7a08fa3592318058a37bbeca57fd006217fd9d07d669439599c489f80e954a","sha512":"772b8c93b1484fd987d84a5431b172ac586e3dda795795a2079a8034e353d60b92629217ad4b5d8aaefb86b57db08d616a8049a7dcea8c6f81396240bf6055cb","ssdeep":"1536:lcx2nNy1m6ECvgpXBXqRZ5M/xA1kEzxmIrWmVDkyGsXjHeyacY:lAEGkEc6WmVDknsXj+l","tlshash":"5083f7593284b83306df89f6803b460bf2256d94754a812cb47cadde2a7dc867277f78","size":82149,"data":"","first_seen":"2026-01-17T00:22:21.945603Z","last_seen":"2026-02-01T14:43:30.949998Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/contact-form-7-js-translations","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"512cccf2070e44d8988f67dbac4bba87","sha1":"52f9ae0fac363687453523b05fe2339f38968ec5","sha256":"2c269e56428eebce18faa29d5467fd76c0fb68e8a066a91df1221be5d774c04a","sha512":"932085ff59260a81c7d6104898524d6b6effcd923d12bba8bbff3a78743e7504e68f6e9bf62d6589f4a51b3afe02276a62cd1712c57f736ac6199cfca05d35a1","ssdeep":"","tlshash":"0b21dc84dc78ca2280c152f638ab7e497138f960c26f5c06b20b454e1a61aacddf364d","size":1126,"data":"","first_seen":"2026-02-01T01:00:58.452965Z","last_seen":"2026-02-01T14:43:30.971111Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-general-ajax.7d8f48f2.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d189f1b705636b324dfc7788896dc33","sha1":"6a0b2e48d21bdd0c3626efed34e71307ead656f0","sha256":"b300f343440fcd41ee7786257002336933da399043fd37fb10bd5104cab328dc","sha512":"55210194dedaa9491d49c8555d65d253e2586aa875197da2a994296e66c576aec20eda4e05d3ae780c23f483c6d9280d7e54c5dc6dcdd7599f86673c9011da42","ssdeep":"384:nxi6BmfId1tyVxFRvFihayRyo0EWXeQxqUmI32a/qdfI5lbc3sOGL43zGTQ3y2RG:nkfVF904o0EWXeQxqUmI32a/sfI5lbca","tlshash":"7052b3a5f1e58cf002fa70ab31bd0681596105d7bc41d19c386e8fe81b7de87a1723ba","size":13303,"data":"","first_seen":"2026-01-17T00:22:21.999181Z","last_seen":"2026-02-01T14:43:30.945266Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/live-streaming-public-js-extra","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"22599ad5d71888e2cc469fd33444dfe6","sha1":"2479cb093b2288016198fc81f070de36ef0923da","sha256":"23d1954ade947ca383a73aa86d94b2eb6aa6c1cb5f9acc8a9b73eba9eb62a9e7","sha512":"fff6cb25c729a86b3958cd2ca8eebf9e1105abca6b0cc0e6c8b6c4e632860bce460ec24954e9bc7d0d4a81e6d5270d51bc0187d3752d84e7ee173aa4952e7677","ssdeep":"","tlshash":"08e09515c2707d930750cdf2123efb7751ecf923f4129cb5516080c044b4de25548551","size":328,"data":"","first_seen":"2026-02-01T14:43:30.972151Z","last_seen":"2026-02-01T14:43:30.972151Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-07T22:23:39.389794Z","times_seen":1009053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.4","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-07T22:16:01.916504Z","times_seen":232294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-component.f69e2981.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c73df8a8714d5f0125ab8bead004bc7f","sha1":"d8c1ec090cd46c7664ce971a04417157d33aaac7","sha256":"32363337339c408e8f7c561c1088d327fe24c375cf479218d79898faa75f41e0","sha512":"2b7cafb7c8ac0124eb7a1acbb29cb00c17d3180acfd4c7c7cf9264b8b4b52985a2f11d023b6f1fe42ed55e849c11b59e93aaa6275c8030cb1bdc94caa7753446","ssdeep":"192:W9yIo5g8JHy1yGIKB/eYGrY2Nzuwj9fDS3bKOYzufFSH2Xc4eDm/:W9yG8ly1yGIKB/srfdu4fEbKMG54eDm/","tlshash":"9002d847a104a5f102fe89b7f53d9b41fba2096b7802906cf83d4cef1869c553277ab9","size":8771,"data":"","first_seen":"2026-01-17T00:22:22.002326Z","last_seen":"2026-02-01T14:43:30.957263Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-07T22:17:59.916626Z","times_seen":203781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.4","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-07T22:16:01.937228Z","times_seen":225033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/streamit-main-js-extra","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"74164bf1ac756ecb3ed146473afa2457","sha1":"39613e636192eec11dc7da420a40126f02ba6677","sha256":"58f6daf2aaf87a43dc259f76e1c4a27e0ed71365f0abb254e31c2b79a895bb84","sha512":"1eb296d1d18d6a406ccefb1771ad49ef1d6f18c4e5c33d89e6b5cc497072e2996c081a07277e9d1dca1d0664702fc39891142e0d8facfc4eb9a82032fbe8ebe1","ssdeep":"","tlshash":"62517f02c638ca35b34b817afc77e65d39e5b295e90c60307dbf9aa8c366444229a35d","size":2562,"data":"","first_seen":"2026-02-01T14:43:30.973531Z","last_seen":"2026-02-01T14:43:30.973531Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-08-07T20:59:17.968472Z","times_seen":217962,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-main.ea129250.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"468bdf57895ac85fce7c2578b5ec6c6a","sha1":"6f926ef12a0fe1db7ebc036fb633c9e758a11d87","sha256":"69286991b4b989ade92af6f6fd19b41ca9e8d1f22430d729615300dfa4b4c135","sha512":"55f31a1106853ab3345227b21a4ebeb04a1555065a0bd57c81391a0f9e39616a67ba3cb7b935df95d7745301f5f35a70c0428de95b7775c6ce869e2cd473d93f","ssdeep":"","tlshash":"5f61b7ab35b90438a1a92d0fb37963b13eb4146b3e109152505d4eac9f7dcc1c1baf87","size":3441,"data":"","first_seen":"2026-01-17T00:22:21.995929Z","last_seen":"2026-02-01T14:43:30.955826Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-header.d4a6ec25.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca938a073c493ea08ffc3a3e58f7c396","sha1":"00452129965c36e6b1af0717adae3e965f528deb","sha256":"907ea8929f9bee6d41c29f93c1d4133b8aa9eabc1db8b69fdbe1a666a43aded5","sha512":"41751d6c41d9a1310eb4bab9889dd3568309d891f435795efdb32866f1f34eca7a66c62df0d8c8f091e5c4e3e5eb5ae2c2788b67c2bd5bc29e5ccb1d797c836f","ssdeep":"","tlshash":"0201d0e1f4940cfa40f548aa52d48292b73570c7b285912cb039cccb44aac845aa03bd","size":745,"data":"","first_seen":"2026-01-17T00:22:22.007058Z","last_seen":"2026-04-30T08:35:14.185542Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/contact-form-7-js-before","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"51f22c5189e7b2f2fd52544f5f4dda85","sha1":"ec8642d46ad2cb636f9bfedeb5256d55adae952e","sha256":"65750070ccabfaf6c90e97a7944d7f43a72bb0b73f5139858af549eaada9f763","sha512":"1ecf78193694b6be4b8d60f093a914f5cea01d35a55dcd2f1abf6555a004ff5c58099fda698ce9704890773f30d9150dc11e37396911f89da807be556cc412d1","ssdeep":"","tlshash":"30f08095d9a85c4514e6c6b5017c5314b114b517c62f5e56f34d004c5ff44b96908289","size":621,"data":"","first_seen":"2026-02-01T01:00:58.450264Z","last_seen":"2026-02-01T14:43:30.984051Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-07T22:23:39.421177Z","times_seen":924581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/assets/vendor/js/select2.js?ver=1.0","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c98b05dd4f3d7c693eb34690737f0d8","sha1":"6de10e74a992fca15e803d910d130f826631cb86","sha256":"f7244fff610595b944f76bf3080d74e3af42b5dd234f8f079e698cc39ac966b0","sha512":"e0cbdc1f071ba972941c1e8bc7765be4210056813dbbce2a37e65230ceacef3f08789ae2131ad5dcd0f9cd1cdef66c4d940049ea4f3ae0ffd597c9b449ddc3b5","ssdeep":"768:eLrL0yRTkmazJCf2B0eeKuWBcsGookOlxN3/fq0ZtjTTYovuYE4kpxcWQiIsoT:eQg2BneK38kOvBpXc9ST7","tlshash":"5c63b75c7a537231026f20e635ab140d22376b3e600a5668b068cded6dbec15736bf7e","size":73163,"data":"","first_seen":"2023-03-07T01:23:49Z","last_seen":"2026-08-07T18:35:05.304964Z","times_seen":8690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clipscoinrefer.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 23:52:35 GMT\r\nexpires: Wed, 27 Jan 2027 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 399033\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-07T22:23:56.20763Z","times_seen":958310,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/css/dist/block-library/style.min.css?ver=29395f90ee25cd3deff6b858384e28a5","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=29395f90ee25cd3deff6b858384e28a5 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 10 Jan 2026 21:35:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6962c63e-1d38f\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":119695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"693359d40ab420bb23aa1b4be239f162","sha1":"67719855e95b9befb5e16556455ea78f3b9d7d92","sha256":"b4cd2f5507698b3ebd388e2d1ed31bef9c5704a171ccd53720c27c66df2510c7","sha512":"3ea55e5e2d2cfa21f66701e322928f3199042b8d3eef8f611cae1ee5d931903fb69d39b5cbb72f493e84f477b56f44fb24badc73f2c298785a9f29eb72b6d8a5","ssdeep":"3072:SoeJBCCUQg5MG7x+qehvX02dclkWwbFpPu:mfUQg5MG7x+qehvX02dclkWiF0","tlshash":"7ec3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2025-12-02T22:14:51.412485Z","last_seen":"2026-08-07T11:26:11.898976Z","times_seen":21715,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/live-streaming/assets/dist/live-streaming-advertisement-manager.b8b46838.css","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/plugins/live-streaming/assets/dist/live-streaming-advertisement-manager.b8b46838.css HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Jan 2026 21:14:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6966b5b8-24db\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9435,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9434)","md5":"05e9c7525ae0a02fda5db3b5c3183aa1","sha1":"f0fe0937f0e59a04434dacf03db503202bacc1c7","sha256":"b8b46838fdb093a356b3f0ad0ebfc091d5b280efd06e40b749eeb8af6c95bb85","sha512":"0147029d0907087d35d61f5b6e5042e84cbc512a0b3adae2ba2e428f39c4ede8da0bbc59505d86384e23290149b0c93b3b14c2ffb3fdc1e40d19c9ddc1438f49","ssdeep":"192:bZeSoWPxcvxUhgo2HCQEtE5AIfh7MifACMopdv68Rg:BcvxPEIf1XACMopBNRg","tlshash":"5412852fa711202cf93fc06766d849ce1338d695e5a74afba59bbd91c2c72d320b2344","first_seen":"2025-10-04T13:23:35.944584Z","last_seen":"2026-05-26T01:17:22.007462Z","times_seen":11,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/streamit/includes//assets/css/streamit-content-frontend.css?ver=1.3.2","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/plugins/streamit/includes//assets/css/streamit-content-frontend.css?ver=1.3.2 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Jan 2026 21:14:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6966b5a4-40e\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1038,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"10f855ebcbee19321489905e43cc43aa","sha1":"b91ce26e0b1a8a355f551eddc5b9cf246360dcc9","sha256":"e134379389783ca82ba9c3157a29e079a484bb0a33c80587ec8516fadb2526d0","sha512":"1e03addcfc02bb9eb5e7c47a672623080c8149959d2fb293021e228293816e2e97fcfb86f2477f79d30893b111ccf012c8c1b27a6ce99ecfc288666ac298952e","ssdeep":"","tlshash":"29113a87d0536d83517abe02f56ad2096c6806db3fa7dc761cc32c48cf8a6a647a3442","first_seen":"2025-09-23T02:49:29.712437Z","last_seen":"2026-05-26T01:17:22.029556Z","times_seen":12,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/admin/assets/images/redux/favicon.ico","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/admin/assets/images/redux/favicon.ico HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1150\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\netag: \"69658ecf-47e\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"b19a41ea724b454b6ed825a2d1c5fd88","sha1":"1cc3cb2a0066cba5cb6f834120a2b54705d4704a","sha256":"5606b5b1b1d9e9f1072e110e7d7c8cdbb07bf914fee346e05c04a1ee58ac1411","sha512":"0df3fe884b3e4439f2790c3ad4a5a1b85b6dec0eb2b98b5551b37f082a4db37ce1a1f48582bbf143b65b1938b0403f3b0c1a85033a7cffb4db4672ea6c434f4b","ssdeep":"","tlshash":"8721ce4b514090b5c9a25f7107706d5d94ff5f52bcb4f6125ce2b06717330d92419723","first_seen":"2023-10-24T17:45:49Z","last_seen":"2026-07-20T22:51:30.99158Z","times_seen":13,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/inc/Elementor-widget/assets/slick/slick.css?ver=1.8.1","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/inc/Elementor-widget/assets/slick/slick.css?ver=1.8.1 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-6d5\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1749,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dc1cc064ab1d7f81a6d4152e6f2142dd","sha1":"066879f613cf5f2242598e60bcc31deca05a44c5","sha256":"12bbd6f481eafbf4ea1ad21cb2ea71e358eca143523f1448eceb37cd4d3cde4d","sha512":"61694c068def0ac92599fa8c0ca9da8547a1345d9113e517c2791d163381f4a0bb083eaae72f14cfa54f0a47a54b528e45596e89841344a6f9af29f8b0f77999","ssdeep":"","tlshash":"7231394806b38946841a80895fd7c64579eff05309299988bb801305dfcfbd8b9c6bb3","first_seen":"2023-05-15T15:03:25Z","last_seen":"2026-08-07T11:48:30.597954Z","times_seen":217,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/assets/images/logo.png","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/assets/images/logo.png HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 2036\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\netag: \"69658ecf-7f4\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2036,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 269 x 67, 8-bit colormap, non-interlaced","md5":"108705e9ebe0675451f821247b423397","sha1":"a462e4d3a5e5e36b8919ee0a3fe2e17daa2a64db","sha256":"b32435acf316046c2de3ff44ae7aeb5845d580e75f8fd689f7eb014a327c2cbf","sha512":"d2c6561544e534233cae16ad89c65a2acc926adbb5b97760b526a3d475df36d4eaf5e7ab0551d7c01a4c47ba5c15adb475fd2c594d5bdada970c0c2494b71a32","ssdeep":"","tlshash":"4f41eaf73cd785f7d69485f31204486e5b934bd70211871a81070ba5c5993b98624a1b","first_seen":"2023-10-24T17:45:49Z","last_seen":"2026-07-20T22:51:30.909107Z","times_seen":7,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":291,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.4","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.4 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 21:08:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6966b461-30e0\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-07T22:16:01.937228Z","times_seen":225033,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.4","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.4 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 21:08:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6966b461-348c\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-07T22:16:01.916504Z","times_seen":232294,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-generalslick.acb3ad7e.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-generalslick.acb3ad7e.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-ace9\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44265,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20056)","md5":"3cf646885363b05e13024594e7348a43","sha1":"e212c374bf578a721bb4421a69f5b94874f6c704","sha256":"88d5fe3ed4ac338acaaa6c3458fb7c1920c7aacb69314c278aa33bfc1c30c82b","sha512":"e8a5dce3cc540617fab16836d2cbe68a4626c538d626c3ccbe88b707bde9026b81abf95751dd6aab75296390ca00edf855baa108e62a714ceee4960f57edf0f4","ssdeep":"768:TPM4Irw+68GLGkT0e44uYrRgbsDUYQbgkirYZFAh4jRAGYyv/zuuqiYdwtfwAqi6:TPM4Irw+68GLGkTT44uYrRgbsDUYQbgR","tlshash":"ab13d9dc318a14f3ac7a90e6522b330061437237fd13990cb6ad6ce56b2dd4be165af6","first_seen":"2026-01-17T00:22:21.912529Z","last_seen":"2026-02-01T14:43:30.921584Z","times_seen":3,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-iconly.woff2?1758177401947","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-iconly.woff2?1758177401947 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-main.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15496\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\netag: \"69658ecf-3c88\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15496,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15496, version 1.0","md5":"d1e02fd0f69e8703460503043958c04a","sha1":"4eab2917a9f8aeca81355ce1e56f713f31e607c0","sha256":"1957f35e033f92bf0920a48abe06dd787b169b16903d41385d6a0b767358906c","sha512":"312f23ef76a9827b896aa969a0b4f2639f60d79e680dd67c23184f717ad122e9fdd3da1c9d87c4aa5b5ba1cbe505989b44b669c26f305fd4f63a8a2f12b6a38f","ssdeep":"192:CD3GVuEFrQjYdoCvznSCIUOb13iz8F+aTqz+U4hNfL7w1KLYaTy+WlRaLCNFVe9R:KvvYnSCIl9izmql4T7w1s9Eiic9bAT6D","tlshash":"2362c02da93a4f1a2d3ad93d0e6173328e1dc116f280508e8784f4eea74725ed3752b7","first_seen":"2026-01-17T00:22:21.976626Z","last_seen":"2026-04-30T08:35:14.183299Z","times_seen":4,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clipscoinrefer.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 23:52:35 GMT\r\nexpires: Wed, 27 Jan 2027 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 399033\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-07T22:23:56.20763Z","times_seen":958310,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":105,"dns":1,"connect":14,"send":0,"wait":15,"receive":21,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-bootstrap-component.6edf350c.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-bootstrap-component.6edf350c.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-generalslick.acb3ad7e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-f12\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3858,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3785)","md5":"24e6c31f0330a664979aefedef963626","sha1":"af4f5462c2909abe66cbaeb643c7988c1fd0403b","sha256":"6b449fa27a717cdd0c0faa3f40ead815913b3cfcb5044ad54dbdd5b404cd0c2c","sha512":"ce5d739cdb1d613decdd3cb4c0335b7c7ee86129400ede28dfaefd3e4d69bac7d38f0062fae4197d254de6498c2f4f3b7cd22b5055405c785a2e00018ec8369c","ssdeep":"","tlshash":"7581ee5573f2a1b31bea00bb82365546b5680946b94990d8e51c0cde3629cc37db3efb","first_seen":"2026-01-17T00:22:22.004903Z","last_seen":"2026-02-01T14:43:30.925049Z","times_seen":3,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1768163507","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1768163507 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 11 Jan 2026 20:31:47 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696408b3-ade\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2782,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-08-07T21:20:45.794577Z","times_seen":32102,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/live-streaming/assets/dist/addmanagemnet.c9690fb4.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/plugins/live-streaming/assets/dist/addmanagemnet.c9690fb4.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 21:14:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6966b5b8-30f4\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12532,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (12480)","md5":"50fd794c5e1887f99e4719750f6e4d2d","sha1":"f6efcacd03a3cf2be24fa6ff510f585569d914c8","sha256":"67ce563f94368059ec72e077987dc6a074752419eaece5da6d614a9b9b8ab7f5","sha512":"0488d9fa986e86359e5367e238d9aed46f4b6d3e77bf491a7e968a3cbc053fe905366b7a68a1507f02c4e69fbacd39028b709dbd1b1180ca5f5560e6883669b3","ssdeep":"384:G20l1sincaW+PsPi5VdIbQ5bpoVn/appih6XOA1hhqglobbyTvAywEx67:G20l1Rnca7ksuQ5NoVSpmWlhBloy7vwP","tlshash":"d442815a373b5476b2d4ccde92a786136a3057076511caadb02cfcee158af4233b5b31","first_seen":"2025-10-30T03:20:14.614971Z","last_seen":"2026-05-26T01:17:21.998038Z","times_seen":9,"resource_available":true,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-ajax.aeca5b15.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-ajax.aeca5b15.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-generalslick.acb3ad7e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-21d\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":541,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (483)","md5":"9f452658a39e95de9a20904826938108","sha1":"c11ffb379321e072750a65485b78e1f3beb1fb13","sha256":"90cf339870711cda77e831ddb57abdb101e5415fdfe995ac45334f03a3a837c9","sha512":"3eacd81b87d3903cf06e76f743f90d7c17666ed19a9092b8f7bfefbd720534e561d95bd86833fcb9a1c4ad1054742c7d71ed962a44c216450f37a45ec9228e3c","ssdeep":"","tlshash":"93f0ac9f67b0ade74a3204540076e3073296a941b221218043c8a1a81d74837e275be3","first_seen":"2026-01-17T00:22:21.977534Z","last_seen":"2026-04-30T08:35:14.177651Z","times_seen":4,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-authentication.9f030737.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-authentication.9f030737.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-main.ea129250.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-647e\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25726,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25658)","md5":"e1202bb1e14f958f29c20b3dcf4d200a","sha1":"bdf4c7509a6fbb2c341c0010bb1db53d3ab2131a","sha256":"c9817393f9f2e750e003da4067ff141103007b149b015f3d923c795596d8dae8","sha512":"8eeb0a9541e2fb7315778b3f5ab4d1b3a807dee9cdbf7f523a4df1f3f739882151349271897295d8900ae69555e050389907e321d44f4d347478583ef3b7f9c8","ssdeep":"768:whL87iKNr+hJ+xPz2iPktl+Tu4Ak9KFVq6+uDJQ/b241SzeKQQSun/ooecARTjGK:q6+z+xL2iktljz2N2BnooecARTjB3RtF","tlshash":"29c284e3716a487105ef48fb287207817532445e7e0ac29c797c8cee6e5ec8762716bb","first_seen":"2026-01-17T00:22:21.972255Z","last_seen":"2026-02-01T14:43:30.934651Z","times_seen":3,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/wp-emoji-release.min.js?ver=29395f90ee25cd3deff6b858384e28a5","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=29395f90ee25cd3deff6b858384e28a5 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 10 Jan 2026 21:35:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6962c63e-58ea\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-07T22:17:59.898124Z","times_seen":310539,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-archive-append.d13d2129.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-archive-append.d13d2129.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-main.ea129250.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-3b77\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15223,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6417)","md5":"acc6d3fc910ef28d9d8cbc5032f352f0","sha1":"b61270b0d319b6035d40d2f2f242ec94102c9c23","sha256":"d1290b004aeafa8c7389fda596d69f1c8fcde08871da509db59aae3b076d5225","sha512":"eaa2a96cf58166c83ef756343216459d7efe9385a50d62e8e09568c119a726dc25a7150db578ecf7bfa1a2f21937593ec8cea80203350fccb15ffd00a2c82ed5","ssdeep":"384:S4VLFExjhuofPVEMxEf0cKEWU9egGsAHoYykIdwqO4tiEcp+G2iORbqYGI8:SiLSFuofPVEMxEf0cKEWsegGslYMKt42","tlshash":"2062b790b3e4c8e8a2f118ecfc742b10727da463b545905e719d5dea4b2ed06f433a7a","first_seen":"2026-02-01T01:00:58.427027Z","last_seen":"2026-02-01T14:43:30.938588Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.4","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.4 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Jan 2026 21:08:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6966b461-b83\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-08-07T21:51:43.531819Z","times_seen":138998,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-main.css","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-main.css HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-8f96c\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":588140,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (60684)","md5":"317853b948bdc8128d862a344462493e","sha1":"6b4ff78d4fa6e019d1f93762ee41bd52172c4a79","sha256":"57a1f08ee24d2634c594343f5bc7d3b3155191e604a15f6963fa57aa02242418","sha512":"fa838351008e576094fbbe5e26d6f26251c016d1d3d68c150a396b0de8f80d18ffd66e53ee789b73619e61b245b8cf68b8082103142054e55e29bbebe871b4bd","ssdeep":"6144:ODnj9Dfpp4KSmjL5CV27uzlfZ5H4RBCqp434nQLImbw1itt:OxuVH4RBCqpe9","tlshash":"c6c4f8a2f150357c2da7d258bd94beec2a6bf415ea1109a6f003b71806ce7e709736cd","first_seen":"2026-01-17T00:22:21.975159Z","last_seen":"2026-02-01T14:43:30.941408Z","times_seen":3,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/inc/Elementor-widget/assets/slick/slick-theme.css?ver=1.8.1","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/inc/Elementor-widget/assets/slick/slick-theme.css?ver=1.8.1 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-a9e\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2718,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"33b562423309aa61a517f60f6740077e","sha1":"b0e4b20af57fe1f0ec6d5fc8d75b7208d9d20aee","sha256":"96531fdf9f918d40062020482e135265dbfb26bf92fbe8dfa8aa87e5a63af049","sha512":"78f21f897c9969657756196b2d03e2c80f135c1b1540bf6e230479864921bf958ca2dab069842f83ec9a236a21ee7a3fb721daa2685f44b93228ca8a7b40a718","ssdeep":"","tlshash":"3d51dda869b3a742501a90903bd7475077cb745316298cacfb91638c9fcd0d8bad97c9","first_seen":"2025-09-23T02:49:29.854727Z","last_seen":"2026-05-26T01:17:22.044314Z","times_seen":6,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 10 Jan 2026 21:35:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6962c63e-15601\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-07T22:23:39.389794Z","times_seen":1009053,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-header.d4a6ec25.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-header.d4a6ec25.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-main.ea129250.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-2e9\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":745,"size_decoded":0,"mime_type":"application/javascript","magic":"C++ source, ASCII text, with very long lines (685)","md5":"ca938a073c493ea08ffc3a3e58f7c396","sha1":"00452129965c36e6b1af0717adae3e965f528deb","sha256":"907ea8929f9bee6d41c29f93c1d4133b8aa9eabc1db8b69fdbe1a666a43aded5","sha512":"41751d6c41d9a1310eb4bab9889dd3568309d891f435795efdb32866f1f34eca7a66c62df0d8c8f091e5c4e3e5eb5ae2c2788b67c2bd5bc29e5ccb1d797c836f","ssdeep":"","tlshash":"0201d0e1f4940cfa40f548aa52d48292b73570c7b285912cb039cccb44aac845aa03bd","first_seen":"2026-01-17T00:22:22.007058Z","last_seen":"2026-04-30T08:35:14.185542Z","times_seen":4,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-general-ajax.7d8f48f2.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-general-ajax.7d8f48f2.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-main.ea129250.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-33f7\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13303,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (6110)","md5":"4d189f1b705636b324dfc7788896dc33","sha1":"6a0b2e48d21bdd0c3626efed34e71307ead656f0","sha256":"b300f343440fcd41ee7786257002336933da399043fd37fb10bd5104cab328dc","sha512":"55210194dedaa9491d49c8555d65d253e2586aa875197da2a994296e66c576aec20eda4e05d3ae780c23f483c6d9280d7e54c5dc6dcdd7599f86673c9011da42","ssdeep":"384:nxi6BmfId1tyVxFRvFihayRyo0EWXeQxqUmI32a/qdfI5lbc3sOGL43zGTQ3y2RG:nkfVF904o0EWXeQxqUmI32a/sfI5lbca","tlshash":"7052b3a5f1e58cf002fa70ab31bd0681596105d7bc41d19c386e8fe81b7de87a1723ba","first_seen":"2026-01-17T00:22:21.999181Z","last_seen":"2026-02-01T14:43:30.945266Z","times_seen":3,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/live-streaming/assets/dist/live-streaming-frontend.e53dae1f.css","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/plugins/live-streaming/assets/dist/live-streaming-frontend.e53dae1f.css HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Jan 2026 21:14:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6966b5b8-d74b\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55115,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55114)","md5":"a2af87b65e01767912a9cb2c8aca002d","sha1":"098b2d7d355048a03d48742605bd4c28ff75abf2","sha256":"e53dae1f52be27795443d5927d87a61aa4d713a8902b48b3bae53d0b3207ce2f","sha512":"855b9b757f0bfb0163c1b184d4ac8d8cc6a6dad540c9ee5b8c7af5812a17f3898e60dca37d4b42006c542f46a1087e0688ef0ff41a03da573c408c6590637da7","ssdeep":"768:3b8JZLDNzgbZmv3PEWmyuUbxfaGgcadC4AJEfF46O22:rYgXeuZU4Q6O3","tlshash":"fa33d959d310203eb4178a3557e48feca538d842eb634abfe182bd58c6d7af5123e748","first_seen":"2025-10-30T03:20:14.683038Z","last_seen":"2026-05-26T01:17:22.05993Z","times_seen":9,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/assets/vendor/js/select2.js?ver=1.0","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/assets/vendor/js/select2.js?ver=1.0 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-11dcb\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73163,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30007), with LF, NEL line terminators","md5":"c6181ebf30818d097265397874eb5585","sha1":"ece00dfaea97477e5fec0e254e5b427e1792bc5b","sha256":"6f639cc47abafb3282f79ac5e6fa82ad9a213ba1150d7c43fa7466c5a5d10f3a","sha512":"4dcb6e839ee663f4d65b5eb28edf2247b4413299863e8e6e087a17f20e563bed5255d1a64d6aaffbc9306592bfb5f26cf89e91d48ca50caa0de05dc40034e010","ssdeep":"768:eLrL0yRTkmazJCf2B0eeKuWBcsGYpmYAzAr/fq0ZtjTTYovuYEqxkpxcWQiIsoT:eQg2BneK3EepXcqyST7","tlshash":"b273a64d7957733006af20e624ab1509223aab3d500a46acb468cdec7dbfc157267f7e","first_seen":"2026-02-01T14:43:30.947725Z","last_seen":"2026-05-07T21:47:25.328339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/inc/Elementor-widget/assets/slick/slick.min.js?ver=1.8.1","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/inc/Elementor-widget/assets/slick/slick.min.js?ver=1.8.1 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-a76f\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-07T22:26:20.22749Z","times_seen":110537,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-vendor.debbce91.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-vendor.debbce91.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-main.ea129250.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-140e5\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82149,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44484)","md5":"6b91c9101d93c186bcd92c0a7ff90007","sha1":"cff899d99410d3927996e6a69779773958908470","sha256":"6f7a08fa3592318058a37bbeca57fd006217fd9d07d669439599c489f80e954a","sha512":"772b8c93b1484fd987d84a5431b172ac586e3dda795795a2079a8034e353d60b92629217ad4b5d8aaefb86b57db08d616a8049a7dcea8c6f81396240bf6055cb","ssdeep":"1536:lcx2nNy1m6ECvgpXBXqRZ5M/xA1kEzxmIrWmVDkyGsXjHeyacY:lAEGkEc6WmVDknsXj+l","tlshash":"5083f7593284b83306df89f6803b460bf2256d94754a812cb47cadde2a7dc867277f78","first_seen":"2026-01-17T00:22:21.945603Z","last_seen":"2026-02-01T14:43:30.949998Z","times_seen":3,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 01 Feb 2026 14:43:07 GMT\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39275,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ee411c8b4cefff421425522a9ed4faaa","sha1":"c5863492b7aad1c232c6abebc9bc72b06ae9f7d3","sha256":"ae593ce2de5796f115ee25585994fedad73e78972c533371f20b752500795fbe","sha512":"2a0e221d04ab0a26bfac20bba13783fea49e1331b2a74aeff703af12f60ed6680e9145430a80e0414e380b986a1993b4ba7fcf0bce2ba842ef0264ea0a418300","ssdeep":"768:zaVyIAa3LZl1DSDjDGDUDB4DiLDZD1D5CJmwBUiRDfMTcfFBhiEymDcTYeBai75N:9r0rAwyl","tlshash":"ea0310a1041b50409b834ce223cebf34fe1f92517141d0b9abfdab6badcbc66526935d","first_seen":"2025-11-21T14:36:25.95929Z","last_seen":"2026-02-13T05:16:35.497277Z","times_seen":13,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":161,"dns":87,"connect":8,"send":0,"wait":19,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:01 GMT","end":"Mon, 06 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"32:D1:51:F3:25:53:74:EC:B9:1B:D7:7E:15:C3:08:AE:8D:84:63:44","sha256":"7C:E5:93:66:E3:68:18:E9:BB:F3:0A:10:43:B7:30:2F:55:66:99:2C:37:0C:EE:D9:DA:5C:8D:5E:49:17:7B:F6"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://clipscoinrefer.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 27 Jan 2026 23:52:35 GMT\r\nexpires: Wed, 27 Jan 2027 23:52:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 399033\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-07T22:23:56.20763Z","times_seen":958310,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":151,"dns":2,"connect":31,"send":0,"wait":15,"receive":5,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T14:43:06.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-cache-enabled: True\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nlink: \u003chttps://clipscoinrefer.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Contact Form 7:6.1.4","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"Redux Framework:4.5.6","description":"Redux Framework is a modular PHP library that allows developers to create customisable settings panels and controls for WordPress projects, providing a consistent user interface for managing options and settings.","website":"https://redux.io","common_platform_enumeration":"","icon":"Redux Framework.svg","categories":["WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Elementor:3.34.1","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":40734,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8832), with CRLF, LF line terminators","md5":"ee2965197fda07bf4eb601e01ba4dfd4","sha1":"b96866f7e5eb54b1b22028af45b27fffd1d097c8","sha256":"61efd3cb05f92bdd29d18d9ff1e8cec32c2b8e09794fb250cff1cfcc5a3b7fea","sha512":"f5d07f54600b0b57482897cb1b46788eda829d0eaf78e799aa7f93f8a1bfa7a6f7c72e3621dc6942b983a96c7360e74568a04535ab9633fb4ff0d19c6e1a8d7c","ssdeep":"768:PCZdypJ61OLAZjLMaR7mTy6gs5U2OG1gfG9xEQyctAAUuo0sCx:Payp81OLAZjLMaR7mT7tlOG1uG9xEQyS","tlshash":"9e03e772a0f84473266bc7e9a0b1b71daad8e513ca069675b0fc61ac4fd5de300b760d","first_seen":"2026-02-01T14:43:30.9524Z","last_seen":"2026-02-01T14:43:30.9524Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1295,"timings":{"blocked":500,"dns":61,"connect":144,"send":0,"wait":288,"receive":0,"ssl":299},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 10 Jan 2026 21:35:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6962c63e-3509\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-07T22:23:39.421177Z","times_seen":924581,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/plugins/live-streaming/assets/dist/frontend.201c4830.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/plugins/live-streaming/assets/dist/frontend.201c4830.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 21:14:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6966b5b8-1c671\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116337,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"01deaf9fc867e0f8c8c3f6e3120beb12","sha1":"491fca14bec526455e9309a2d263c30957c46352","sha256":"df67e921c33846c0eba2d68ef0fdd7d13703197d7d089b959d361666a1e9fa58","sha512":"3bf67d748507f93802473da045e8e5506b92576d618f35709d5f151481c9b4933d9e92b516433f43ae59a93d1e35eae6874847484b0be022722be8257d02d113","ssdeep":"1536:H9J21ZUYevcAVY8Z+dMuQ7vGlNm7td7yt41Dy8oBlxvHy9C2NoeBDNJi4n3anX2i:dJ21AcAVZ7SI7tN886f4eWWv","tlshash":"e2b30984a224757642f716da52a9c541b3b50844b449c4b8b0fc8caf99bec9813ffff9","first_seen":"2025-10-30T03:20:14.675287Z","last_seen":"2026-05-26T01:17:22.01195Z","times_seen":9,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-main.ea129250.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-main.ea129250.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-d71\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3441,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3383)","md5":"468bdf57895ac85fce7c2578b5ec6c6a","sha1":"6f926ef12a0fe1db7ebc036fb633c9e758a11d87","sha256":"69286991b4b989ade92af6f6fd19b41ca9e8d1f22430d729615300dfa4b4c135","sha512":"55f31a1106853ab3345227b21a4ebeb04a1555065a0bd57c81391a0f9e39616a67ba3cb7b935df95d7745301f5f35a70c0428de95b7775c6ce869e2cd473d93f","ssdeep":"","tlshash":"5f61b7ab35b90438a1a92d0fb37963b13eb4146b3e109152505d4eac9f7dcc1c1baf87","first_seen":"2026-01-17T00:22:21.995929Z","last_seen":"2026-02-01T14:43:30.955826Z","times_seen":3,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-component.f69e2981.js","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:08.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/dist/streamit-theme-component.f69e2981.js HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/wp-content/themes/streamit/static/dist/streamit-theme-main.ea129250.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-2243\"\r\nexpires: Mon, 01 Feb 2027 14:43:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8771,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8483)","md5":"c73df8a8714d5f0125ab8bead004bc7f","sha1":"d8c1ec090cd46c7664ce971a04417157d33aaac7","sha256":"32363337339c408e8f7c561c1088d327fe24c375cf479218d79898faa75f41e0","sha512":"2b7cafb7c8ac0124eb7a1acbb29cb00c17d3180acfd4c7c7cf9264b8b4b52985a2f11d023b6f1fe42ed55e849c11b59e93aaa6275c8030cb1bdc94caa7753446","ssdeep":"192:W9yIo5g8JHy1yGIKB/eYGrY2Nzuwj9fDS3bKOYzufFSH2Xc4eDm/:W9yG8ly1yGIKB/srfdu4fEbKMG54eDm/","tlshash":"9002d847a104a5f102fe89b7f53d9b41fba2096b7802906cf83d4cef1869c553277ab9","first_seen":"2026-01-17T00:22:22.002326Z","last_seen":"2026-02-01T14:43:30.957263Z","times_seen":3,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/style.css?ver=29395f90ee25cd3deff6b858384e28a5","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/style.css?ver=29395f90ee25cd3deff6b858384e28a5 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-44b\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1099,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (500)","md5":"07b94ed2ec19ebffc05330a1ab574f31","sha1":"fe24c9cd09d84a372d8b5452bfa2e95ae4c86005","sha256":"49fb0b103c011245236257f0209f69ce03a10f56759122d04cedc57bd663dca1","sha512":"886edbf4f21dcaf820350f45edba80d6643c994fe20e608cacfb4703a35c7fc7bcacbaa77a6b1577cc3e14b0fce4ac4fb6f5f861508325dd0493ae3855155325","ssdeep":"","tlshash":"ad11ee1fa361427536e246a276aa260ebf574a2263d844a8b5cec509836a32e81b5944","first_seen":"2026-01-17T00:22:21.991137Z","last_seen":"2026-02-01T14:43:30.959229Z","times_seen":3,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-content/themes/streamit/static/assets/vendor/css/select2.css?ver=29395f90ee25cd3deff6b858384e28a5","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-content/themes/streamit/static/assets/vendor/css/select2.css?ver=29395f90ee25cd3deff6b858384e28a5 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 13 Jan 2026 00:16:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69658ecf-3f87\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16263,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16263), with no line terminators","md5":"264bcf0d117a05d527c0ad234b9d290e","sha1":"463a5e95c0f3b693eb5fe4f78dc2d57335d44f91","sha256":"a64bd479f8dafd4a1d89aac51b7be7bdc36cbb0150782d5cf67cb82fb10dca2c","sha512":"a1b7796234fad6b5c4aa361dadef033cc8e632215894d2f8c7ccb2db651d45d92d21c3c6a3c888724ea856f9bcf6d6e5c7e9bd4be70916f52a4e9b0dc6cf9302","ssdeep":"192:1EaNSrenTfc3aq6J5wV1Q9CPxWqAUJKk3BcH9t3N:1keTfXnS1Q9sWqbxRcdpN","tlshash":"9372d935becc2239b0bf8e7f6cf2b4946629dd5fc4111b9ab8e9e154c8e04540a4b60f","first_seen":"2023-04-05T21:20:11Z","last_seen":"2026-08-06T20:32:04.349589Z","times_seen":3573,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 10 Jan 2026 21:35:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6962c63e-161d\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-07T22:17:59.916626Z","times_seen":203781,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"clipscoinrefer.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"clipscoinrefer.com","domain":"clipscoinrefer.com","tld":"com"},"ip":{"addr":"34.174.215.104","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clipscoinrefer.com/","date":"2026-02-01T14:43:07.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.clipscoinrefer.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 20:40:19 GMT","end":"Fri, 10 Apr 2026 20:40:18 GMT"},"fingerprint":{"sha1":"75:A6:2E:71:B4:24:95:7F:D2:BD:2C:E9:23:A5:02:52:55:3B:E5:A9","sha256":"FA:68:91:44:1C:48:85:66:94:0F:20:EF:64:4F:AA:4B:02:3A:DF:C6:14:EB:B9:00:4A:F9:81:50:6A:A1:94:42"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: clipscoinrefer.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://clipscoinrefer.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 14:43:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 10 Jan 2026 21:35:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6962c63e-14c2\"\r\nexpires: Mon, 01 Feb 2027 14:43:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-07T22:17:59.962213Z","times_seen":200717,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"clipscoinrefer.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}