{"report_id":"f854385d-5b45-45c2-ad9c-a34808a21a0b","version":0,"status":"done","tags":["netflix","phishing"],"date":"2026-06-30T23:27:11Z","url":{"schema":"http","addr":"clonmove.vercel.app/","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"clonmove.vercel.app/login","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"title":"Netflix","dom":{"size":15535,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14199)","md5":"3d0079e75149ea6a284cbf42d7fb00c1","sha1":"0cd289c7082e85bfabef1f4a453ce7e42b1052b6","sha256":"53bedac029360c920b18193ce8a280690d4f0917cdd11a68a62b70613807511c","sha512":"48ff6b3dd9fb7eac50190988aeb1d73deda4f9bb7020f20b8c7ea10e19bfc41e88b80f749aff84df80bdfad9f93003d2deddece6f488d539b732774e9946a39e","ssdeep":"96:n485pFNpy2fGtTzEArwU4BsAuezfbjTeo8M/KqKFl86553tQJn1TSDRZxD5:4Q1fGtTTQBsDofbjK9c6x9","tlshash":"7e62dc84a8615e762d137ea647ccdf1cc11b90d249ef1a9e3edf004e06c2bda1bb6746","dom_hash":"domhash7d6a25c4683944a4617b9023740d67c8","first_seen":"2026-06-03T15:19:46.372241Z","last_seen":"2026-06-30T23:27:15.024758Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"clonmove.vercel.app/","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T23:27:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"clonmove.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"clonmove.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-13T02:02:58.126153Z","last_seen":"2026-06-26T01:09:44.08481Z","alert_count":32,"request_count":8,"received_data":2129662,"sent_data":4075,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"api.themoviedb.org","ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-09-15","domain_rank":213872,"first_seen":"2019-12-15T07:00:19Z","last_seen":"2026-06-29T22:59:54.877275Z","alert_count":0,"request_count":10,"received_data":69858,"sent_data":6893,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-28T22:19:26.805281Z","alert_count":0,"request_count":3,"received_data":25882,"sent_data":1682,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":25092,"sent_data":687,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"clonmove.vercel.app/assets/index-CYcpPJfg.js","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2fe746a1cf0333ed2738bc609fd3e70","sha1":"bfcc71b78efb83f8dd5e9e30686903048c7c2d45","sha256":"9a7f5b40b0e687d5a69545bf8c8de86d083f6a4e34626ec6baa7f5d84daaa7ff","sha512":"e242881c1072fa48368bf5e5ecea4694740cc2c9d25490132db4c69ab9f063f477b25772424fafafff9363c49323e452d211f0f83b96aaa2b034c863f4397e02","ssdeep":"12288:QRzAaVrTeDh3THyDaruSk5HaQi2YQfTbUZaMavJei2sBSfk0zHUND5ezBmdSqqCA:Q8dXk5+skPy5pXqdsAvEntYQ+","tlshash":"d9e44abc329679330bd145f6642f404bf3299556780e4198b42cc8ea2d7994a62ffff8","size":698227,"data":"","first_seen":"2026-06-03T15:19:46.379875Z","last_seen":"2026-06-30T23:27:15.025807Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Logged Out","filename":"https://clonmove.vercel.app/assets/index-CYcpPJfg.js","line_number":3032,"column_number":41593}]},"http":[{"url":{"schema":"https","addr":"clonmove.vercel.app/assets/index-CYcpPJfg.js","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.058Z","timestamp":1782862006058,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /assets/index-CYcpPJfg.js HTTP/1.1\r\nHost: clonmove.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25607\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-CYcpPJfg.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\netag: \"f4656db2661779a90323a81c0eaf5df8\"\r\nlast-modified: Tue, 30 Jun 2026 16:19:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q8xkn-1782862006062-a83fa5a35af5\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 196229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":698227,"size_decoded":197028,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35290)","md5":"f2fe746a1cf0333ed2738bc609fd3e70","sha1":"bfcc71b78efb83f8dd5e9e30686903048c7c2d45","sha256":"9a7f5b40b0e687d5a69545bf8c8de86d083f6a4e34626ec6baa7f5d84daaa7ff","sha512":"e242881c1072fa48368bf5e5ecea4694740cc2c9d25490132db4c69ab9f063f477b25772424fafafff9363c49323e452d211f0f83b96aaa2b034c863f4397e02","ssdeep":"12288:QRzAaVrTeDh3THyDaruSk5HaQi2YQfTbUZaMavJei2sBSfk0zHUND5ezBmdSqqCA:Q8dXk5+skPy5pXqdsAvEntYQ+","tlshash":"d9e44abc329679330bd145f6642f404bf3299556780e4198b42cc8ea2d7994a62ffff8","first_seen":"2026-06-03T15:19:46.379875Z","last_seen":"2026-06-30T23:27:15.025807Z","times_seen":7,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"clonmove.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.themoviedb.org/3/movie/popular?language=en-US\u0026page=1","fqdn":"api.themoviedb.org","domain":"themoviedb.org","tld":"org"},"ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.818Z","timestamp":1782862006818,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.themoviedb.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:49:1F:52:33:E0:7C:B7:E0:00:03:0D:36:EB:75:9D:26:75:B8:E0","sha256":"31:E4:5A:91:54:2F:11:CA:92:C2:9C:79:7C:E5:BD:F5:E9:CF:6D:4C:02:CD:63:F2:33:02:5E:C2:43:D6:E5:9B"}}},"request":{"raw":"OPTIONS /3/movie/popular?language=en-US\u0026page=1 HTTP/1.1\r\nHost: api.themoviedb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://clonmove.vercel.app/\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\nserver: openresty\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-headers: Authorization,Content-Type,X-Requested-With,Accept,Origin,If-Modified-Since,Cache-Control,Range,User-Agent,DNT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,DELETE,OPTIONS\r\nx-amz-cf-id: hfKCOknHNaM_5yfE95SwvvwcZQh7OCvD_Ug9kJuclSwpoOnSRhF_lQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":694,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonmove.vercel.app/","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T23:26:45.729Z","timestamp":1782862005729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: clonmove.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 53971\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 30 Jun 2026 23:26:45 GMT\r\netag: \"a991b3f4b8f49f97b3af422087a39497\"\r\nlast-modified: Tue, 30 Jun 2026 08:27:14 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q8xkn-1782862005791-81cf2767a688\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 687\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":687,"size_decoded":1418,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a991b3f4b8f49f97b3af422087a39497","sha1":"4109ae84dbf2dd975ba5a3ef17d7f3283c652db2","sha256":"c5ce854bf9b2fc58ed19c0a2dfea081c386a6f11f943111b217d66080703af2a","sha512":"680bd2835cf8fdd13584347867608736105e2c7804f88e0fa25b110b6abee7485656f8e6f6d81bb2438c9cdd2ac7829f192174c3f336eccc94de71450edc35a3","ssdeep":"","tlshash":"4a01d34148e0895a537003303ee0f1048a56fb47934c5d58b15620ec5fc5bc6ceef6f4","first_seen":"2026-06-03T15:19:46.386621Z","last_seen":"2026-06-30T23:27:15.027491Z","times_seen":7,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":27,"connect":1,"send":0,"wait":10,"receive":11,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"clonmove.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.themoviedb.org/3/movie/upcoming?language=en-US\u0026page=1","fqdn":"api.themoviedb.org","domain":"themoviedb.org","tld":"org"},"ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.775Z","timestamp":1782862006775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.themoviedb.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:49:1F:52:33:E0:7C:B7:E0:00:03:0D:36:EB:75:9D:26:75:B8:E0","sha256":"31:E4:5A:91:54:2F:11:CA:92:C2:9C:79:7C:E5:BD:F5:E9:CF:6D:4C:02:CD:63:F2:33:02:5E:C2:43:D6:E5:9B"}}},"request":{"raw":"GET /3/movie/upcoming?language=en-US\u0026page=1 HTTP/1.1\r\nHost: api.themoviedb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiIxZDkyZGJlM2VhZGRlOWE3YTZmZmRjZGI4Y2EwZTg2MiIsIm5iZiI6MTc1NDM5MDUwNi40ODcsInN1YiI6IjY4OTFkZmVhZjc0MTA0NTU2YTI2Mjg4ZCIsInNjb3BlcyI6WyJhcGlfcmVhZCJdLCJ2ZXJzaW9uIjoxfQ.CI-LhPOhU09HkuBwvUkSxSNl4fQx5HEtl9zqiXSJT2k\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json;charset=utf-8\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-expose-headers: *\r\ndate: Tue, 30 Jun 2026 23:26:47 GMT\r\ncontent-encoding: gzip\r\nx-task-id: f794eb46cd4040b9b78f4f75db66a66b\r\nserver: openresty\r\nx-gateway-cache-status: HIT\r\netag: W/\"e1e5a3c415f2958ca46cb652aa4aea4f\"\r\ncache-control: public, max-age=19044\r\nx-az: us-east-1b\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\nx-amz-cf-id: svVUQdeJj98M7lb0hNsLNOGBeRjERYMT6cO8E-TgLIAXsngH-PMAfA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":12103,"size_decoded":5480,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e8ddb7bab3ce7f2d19f2f3c6ee368960","sha1":"81a1759297fd41bbc2c7fe85f6b4e6c2f4802788","sha256":"e1e5a3c415f2958ca46cb652aa4aea4f0b17997da6b5b144aeb8d7061d390b49","sha512":"448217992f9c22d44d0317a72dd21408562dc1c261b5a5ef2a769064992d3e4535e25175d8048dd6e814302e9bb89721bf795ebb245bac573d04e7d083d8b5a6","ssdeep":"192:YjTUOJchgqbfNZrrJ1EDO8PVpPa93+oihSnbu0gy3tbJW:UTUCsfTmbPv9Thi60zbJW","tlshash":"ee42b60967482f3fe72b8341f44f2dcb97bc21d1b2889e419ad5c65c66cbef6813149a","first_seen":"2026-06-30T23:27:15.028351Z","last_seen":"2026-06-30T23:27:15.028351Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.themoviedb.org/3/movie/upcoming?language=en-US\u0026page=1","fqdn":"api.themoviedb.org","domain":"themoviedb.org","tld":"org"},"ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.820Z","timestamp":1782862006820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.themoviedb.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:49:1F:52:33:E0:7C:B7:E0:00:03:0D:36:EB:75:9D:26:75:B8:E0","sha256":"31:E4:5A:91:54:2F:11:CA:92:C2:9C:79:7C:E5:BD:F5:E9:CF:6D:4C:02:CD:63:F2:33:02:5E:C2:43:D6:E5:9B"}}},"request":{"raw":"OPTIONS /3/movie/upcoming?language=en-US\u0026page=1 HTTP/1.1\r\nHost: api.themoviedb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://clonmove.vercel.app/\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\nserver: openresty\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-headers: Authorization,Content-Type,X-Requested-With,Accept,Origin,If-Modified-Since,Cache-Control,Range,User-Agent,DNT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,DELETE,OPTIONS\r\nx-amz-cf-id: NRniO5KtsxWfeUDTffouee0dURTFIMyZyxg6YzuyuUwEqPYHvhZKew==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":694,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.779Z","timestamp":1782862006779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 03:05:25 GMT\r\nexpires: Fri, 25 Jun 2027 03:05:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 505281\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-07T22:23:39.404337Z","times_seen":273540,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonmove.vercel.app/assets/hero_banner-DUZNtQhX.jpg","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.767Z","timestamp":1782862006767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /assets/hero_banner-DUZNtQhX.jpg HTTP/1.1\r\nHost: clonmove.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25604\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hero_banner-DUZNtQhX.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\netag: \"9cc245c74a1f301c4784aff6d44483a9\"\r\nlast-modified: Tue, 30 Jun 2026 16:20:02 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jzvz2-1782862006770-305ee53ea94a\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 964611\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":964611,"size_decoded":965368,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3","md5":"9cc245c74a1f301c4784aff6d44483a9","sha1":"6a47188bad4c5c062cd8b48b2fca28a477577528","sha256":"ae84ec162c9052b6ee1a4a17aeca3358f2c46f22d964dc5d73a43282376564dd","sha512":"a091a40811c1d64175c9d9718e52c56e06030a9cab0df5fac41cce80537b0f19c177265fe476f6cbb5a4ac03c2fdfcca1185038a7fc8f530df44e9a08a2cf15a","ssdeep":"24576:VKRpB1DYLj/IFIMGCD4vPx2q/l+Z/TCsSXR5zCd2guYesK:VcpnD88F5QUqOi/ud2jKK","tlshash":"1825237a5023c30de9ebd372b5cc1144aa294a09d5ebfee6f068a941fdd140df9ac8c5","first_seen":"2024-07-21T00:20:39Z","last_seen":"2026-07-31T15:42:35.465326Z","times_seen":79,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"clonmove.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.themoviedb.org/3/movie/now_playing?language=en-US\u0026page=1","fqdn":"api.themoviedb.org","domain":"themoviedb.org","tld":"org"},"ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.806Z","timestamp":1782862006806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.themoviedb.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:49:1F:52:33:E0:7C:B7:E0:00:03:0D:36:EB:75:9D:26:75:B8:E0","sha256":"31:E4:5A:91:54:2F:11:CA:92:C2:9C:79:7C:E5:BD:F5:E9:CF:6D:4C:02:CD:63:F2:33:02:5E:C2:43:D6:E5:9B"}}},"request":{"raw":"OPTIONS /3/movie/now_playing?language=en-US\u0026page=1 HTTP/1.1\r\nHost: api.themoviedb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://clonmove.vercel.app/\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\nserver: openresty\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-headers: Authorization,Content-Type,X-Requested-With,Accept,Origin,If-Modified-Since,Cache-Control,Range,User-Agent,DNT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,DELETE,OPTIONS\r\nx-amz-cf-id: G1wl-9J9ij2GMSgPz-m1uxGSlVpYi38VNbSFveExIISACRE2qEDYPw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":694,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonmove.vercel.app/netflix.png","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:47.509Z","timestamp":1782862007509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /netflix.png HTTP/1.1\r\nHost: clonmove.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 53973\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 30 Jun 2026 23:26:47 GMT\r\netag: \"a991b3f4b8f49f97b3af422087a39497\"\r\nlast-modified: Tue, 30 Jun 2026 08:27:14 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::x546k-1782862007512-79cb204d26de\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 687\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":687,"size_decoded":1418,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a991b3f4b8f49f97b3af422087a39497","sha1":"4109ae84dbf2dd975ba5a3ef17d7f3283c652db2","sha256":"c5ce854bf9b2fc58ed19c0a2dfea081c386a6f11f943111b217d66080703af2a","sha512":"680bd2835cf8fdd13584347867608736105e2c7804f88e0fa25b110b6abee7485656f8e6f6d81bb2438c9cdd2ac7829f192174c3f336eccc94de71450edc35a3","ssdeep":"","tlshash":"4a01d34148e0895a537003303ee0f1048a56fb47934c5d58b15620ec5fc5bc6ceef6f4","first_seen":"2026-06-03T15:19:46.386621Z","last_seen":"2026-06-30T23:27:15.027491Z","times_seen":7,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"clonmove.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"clonmove.vercel.app/assets/index-pJXwQDAw.css","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.060Z","timestamp":1782862006060,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /assets/index-pJXwQDAw.css HTTP/1.1\r\nHost: clonmove.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25607\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-pJXwQDAw.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\netag: \"e8deb356fb65af6b9b41da4680fe6cd6\"\r\nlast-modified: Tue, 30 Jun 2026 16:19:58 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ndc52-1782862006064-0469b32b4965\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2934\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10345,"size_decoded":3718,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10344)","md5":"0d65b1d0a1f21e091ab5af07a8c2e6b0","sha1":"100b361fb04ec3e95a1778d02d6f26274072a289","sha256":"f2ca4e5fa9cb7941edc82819f580c8c35cc7ca02c6ea29f1f5433a182a8930f5","sha512":"9d6bccefd45b525cf3bead000f85d02b5f43f06c41b011ebcde73735beaa2e25ee09d62cadf270aac284f545117a88b95b3232bbe8f07e5813e9a79a7b35bffc","ssdeep":"192:ZLhijsX0Ykav5tC7T+ojMgrSOukvCDirsojKTPzw7sA:VL0YkoC7T7Mg5/vCusAKTPwF","tlshash":"f12285127648353eb03bd468b4e227ce3028a111e77b57eda967b578c9cf2f20632759","first_seen":"2026-06-03T15:19:46.375433Z","last_seen":"2026-06-30T23:27:15.031308Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"clonmove.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"clonmove.vercel.app/assets/logo-COGC8jhl.png","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.765Z","timestamp":1782862006765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /assets/logo-COGC8jhl.png HTTP/1.1\r\nHost: clonmove.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25604\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-COGC8jhl.png\"\r\ncontent-type: image/png\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\netag: \"228c2f58cd562b7e10865e4a04bb2c0f\"\r\nlast-modified: Tue, 30 Jun 2026 16:20:02 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q8xkn-1782862006769-2ea052e859bd\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 11791\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11791,"size_decoded":12539,"mime_type":"image/png","magic":"PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced","md5":"228c2f58cd562b7e10865e4a04bb2c0f","sha1":"cc6b026ce979663e73841e0a51d9a909751fc525","sha256":"697ade7fdeaaebbc1c9244c8dc210c35d1d72f5e1c4578979be040fcf1194d63","sha512":"6b7bbb6bd9b255f9e5e86146a41d9407cf0b32b32a45bdabfe3760520cc77e9e36a34710390bbffeadc64a4bc85879a7ab9fc369ccd6ce19c2cf793f73139c59","ssdeep":"192:+SDS0tKg9E05TjAwEx0Ae6nJD5HqiWHO+mAZZydzbNGEemI2tXUg0lClDlIcVYBF:hJXE05Bk0JyJ5fj+HZydz8XmI2tXUgRi","tlshash":"2f32d05bc290926e380c3589095f4622a743b22e12d3371585cff8ddd860e6f5f449f8","first_seen":"2023-05-01T10:57:58Z","last_seen":"2026-08-03T15:36:56.299228Z","times_seen":2631,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"clonmove.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.themoviedb.org/3/movie/popular?language=en-US\u0026page=1","fqdn":"api.themoviedb.org","domain":"themoviedb.org","tld":"org"},"ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.774Z","timestamp":1782862006774,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.themoviedb.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:49:1F:52:33:E0:7C:B7:E0:00:03:0D:36:EB:75:9D:26:75:B8:E0","sha256":"31:E4:5A:91:54:2F:11:CA:92:C2:9C:79:7C:E5:BD:F5:E9:CF:6D:4C:02:CD:63:F2:33:02:5E:C2:43:D6:E5:9B"}}},"request":{"raw":"GET /3/movie/popular?language=en-US\u0026page=1 HTTP/1.1\r\nHost: api.themoviedb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiIxZDkyZGJlM2VhZGRlOWE3YTZmZmRjZGI4Y2EwZTg2MiIsIm5iZiI6MTc1NDM5MDUwNi40ODcsInN1YiI6IjY4OTFkZmVhZjc0MTA0NTU2YTI2Mjg4ZCIsInNjb3BlcyI6WyJhcGlfcmVhZCJdLCJ2ZXJzaW9uIjoxfQ.CI-LhPOhU09HkuBwvUkSxSNl4fQx5HEtl9zqiXSJT2k\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json;charset=utf-8\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-expose-headers: *\r\ndate: Tue, 30 Jun 2026 23:26:47 GMT\r\ncontent-encoding: gzip\r\nx-task-id: eb9a68ce538a429b9721858302ea7de6\r\nserver: openresty\r\nx-gateway-cache-status: HIT\r\netag: W/\"f47111fe771145fb75ebe5a431dcaa54\"\r\ncache-control: public, max-age=10220\r\nx-az: us-east-1a\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\nx-amz-cf-id: jBjHe0IYydOXQN3q1WiLbZhhyJZuxvbkMH6m9LxzjP8FI9wGJZ4P1A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12354,"size_decoded":5647,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"680aef295311fde329c0522be4394d4a","sha1":"2a0bc80155f284597ab13e626f6704f65945c1ff","sha256":"f47111fe771145fb75ebe5a431dcaa545a700c88cc2efc5ed51281c0502044b5","sha512":"494d35d7d0c19e87d5953d4ad16ad394807ec7acce8b318f8c1ed268269f4c7dfd2c5f0beaea370cd9d2d0be183103e1dea497a0fc5c202990b27fd3d2972d51","ssdeep":"192:KxY6/TSt5hgESxmIb9IO/6qdi4MEnZT2I5dDH6VkCZ6V02T+BD:XITZftDuEnJ2IcznBD","tlshash":"8942b70553182f7eeb2b9241f80e2ccad7b821d5f1889d01ded5cb6c62cbef2523559a","first_seen":"2026-06-30T23:27:15.033298Z","last_seen":"2026-07-01T04:23:59.509842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.themoviedb.org/3/movie/top_rated?language=en-US\u0026page=1","fqdn":"api.themoviedb.org","domain":"themoviedb.org","tld":"org"},"ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.820Z","timestamp":1782862006820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.themoviedb.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:49:1F:52:33:E0:7C:B7:E0:00:03:0D:36:EB:75:9D:26:75:B8:E0","sha256":"31:E4:5A:91:54:2F:11:CA:92:C2:9C:79:7C:E5:BD:F5:E9:CF:6D:4C:02:CD:63:F2:33:02:5E:C2:43:D6:E5:9B"}}},"request":{"raw":"OPTIONS /3/movie/top_rated?language=en-US\u0026page=1 HTTP/1.1\r\nHost: api.themoviedb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://clonmove.vercel.app/\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\nserver: openresty\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-headers: Authorization,Content-Type,X-Requested-With,Accept,Origin,If-Modified-Since,Cache-Control,Range,User-Agent,DNT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,DELETE,OPTIONS\r\nx-amz-cf-id: ThZo0HbIk-YqJwARM-LsmndNCbGl6jLmNCvUNDFywfoEFD_pdwxFIw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":694,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.619Z","timestamp":1782862006619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 02:57:02 GMT\r\nexpires: Fri, 25 Jun 2027 02:57:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 505784\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-07T22:23:39.39133Z","times_seen":388704,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":5,"connect":31,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.themoviedb.org/3/movie/top_rated?language=en-US\u0026page=1","fqdn":"api.themoviedb.org","domain":"themoviedb.org","tld":"org"},"ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.776Z","timestamp":1782862006776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.themoviedb.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:49:1F:52:33:E0:7C:B7:E0:00:03:0D:36:EB:75:9D:26:75:B8:E0","sha256":"31:E4:5A:91:54:2F:11:CA:92:C2:9C:79:7C:E5:BD:F5:E9:CF:6D:4C:02:CD:63:F2:33:02:5E:C2:43:D6:E5:9B"}}},"request":{"raw":"GET /3/movie/top_rated?language=en-US\u0026page=1 HTTP/1.1\r\nHost: api.themoviedb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiIxZDkyZGJlM2VhZGRlOWE3YTZmZmRjZGI4Y2EwZTg2MiIsIm5iZiI6MTc1NDM5MDUwNi40ODcsInN1YiI6IjY4OTFkZmVhZjc0MTA0NTU2YTI2Mjg4ZCIsInNjb3BlcyI6WyJhcGlfcmVhZCJdLCJ2ZXJzaW9uIjoxfQ.CI-LhPOhU09HkuBwvUkSxSNl4fQx5HEtl9zqiXSJT2k\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json;charset=utf-8\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-expose-headers: *\r\ndate: Tue, 30 Jun 2026 23:26:47 GMT\r\nx-task-id: 1fbac4e3461245c8997ef10b73b42514\r\netag: W/\"8e28133932456fef13f3e974745b8750\"\r\nserver: openresty\r\nx-gateway-cache-status: HIT\r\ncache-control: public, max-age=23709\r\nx-az: us-east-1c\r\ncontent-encoding: gzip\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\nx-amz-cf-id: x5w2LXSOe8wVDF8otLtLXKy_sUot1lG9M4SpZsWeuB9bykFWOzZmHw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":13327,"size_decoded":6133,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"95e862f0951321251d4b309b34cbc2d2","sha1":"d5c052d9540d9a2436d4c4999c95473d7a332589","sha256":"ec1ebecee56dd026e018b7e4a80837df78b417c7a4b72cad75d2361a28cba9a0","sha512":"b16eccd5058292ab7507d4c3378e3f4e7d969a7d59dcc502841d397b0190ba666ec858b1e35c66697b7c46c732f4155e9d113ab7f5e182083684831b60db0e51","ssdeep":"192:oOyGGSxmfh7A1MRfOvh/cCvYZLAgEtQfCenv56VG1ifiGyVxNd3sd:oPEUdzRce6YZbEtQfXv5QGAQd3K","tlshash":"0352e61913082f7ee71b9351f50f2dcaabb815e5b1c8d90299d5862c16cfef2523a09e","first_seen":"2026-06-30T23:27:15.035072Z","last_seen":"2026-07-01T04:23:59.451725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.107Z","timestamp":1782862006107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 30 Jun 2026 23:26:46 GMT\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24408,"size_decoded":1746,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dd85fe88df39b12a2197f23e703731c9","sha1":"69a7e7d99d2d8116f90a674e7336096c3cc85e25","sha256":"bc33c30c118f9d49da8c60f35a97061f8cf02a66f23433e51f18e4a9b502425f","sha512":"ff9f58ff81a620e925fa37f249dabea11948dfde336b877b0e0048753ff0446c206d1c0356d93939988df489a2a0f02cecbc01c9e7a08adbbe1e00dd3cd6eaad","ssdeep":"384:E5g3w3s3VR9xqWSUq+DnLami0A0BNBOi/mkX:5EA3mkX","tlshash":"4cb2ab92087be114ab871cc122cf7d36ee0ea254b850d978abfd1cd8ad97c66437172d","first_seen":"2025-11-26T00:25:13.566051Z","last_seen":"2026-06-30T23:27:15.036551Z","times_seen":26,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":7,"connect":17,"send":0,"wait":36,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonmove.vercel.app/background_banner.jpg","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.770Z","timestamp":1782862006770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /background_banner.jpg HTTP/1.1\r\nHost: clonmove.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/assets/index-pJXwQDAw.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25604\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"background_banner.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\netag: \"30c93e677881facfc27d1ef973fef5d9\"\r\nlast-modified: Tue, 30 Jun 2026 16:20:02 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::x546k-1782862006773-7e70216f787d\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 333350\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":333350,"size_decoded":334104,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"30c93e677881facfc27d1ef973fef5d9","sha1":"8b6878e0493e0bba031f8e9e44c8f510a9955f40","sha256":"40ad65e02e710a4e86b8a95c8c638998d7c6472c908a647d30ede555d4b8dea8","sha512":"5eb7f88c75bb631477197128c15ccf16b0d7a540b81aff24d23f5447723af5e7d4ca69db51a5fac4ffe294d5911eb214a86ef84791208ef7aeaed16eb8d5dbdf","ssdeep":"6144:qEzABzifFIKbQPr9YiSebuiPrvl7uOsPOsQKVvbNFwWR82NFWVTKgDZPlskH0UG:rgzQ3uCiSeJrRCRLFNaWWIWVkUG","tlshash":"bd6423e9f405c9785cb56f79c868da4dbaab9083a15d0e5b94080e07e3e8fa4501ff37","first_seen":"2023-12-05T08:26:21Z","last_seen":"2026-07-31T15:42:35.447416Z","times_seen":215,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"clonmove.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.themoviedb.org/3/movie/now_playing?language=en-US\u0026page=1","fqdn":"api.themoviedb.org","domain":"themoviedb.org","tld":"org"},"ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.771Z","timestamp":1782862006771,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.themoviedb.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:49:1F:52:33:E0:7C:B7:E0:00:03:0D:36:EB:75:9D:26:75:B8:E0","sha256":"31:E4:5A:91:54:2F:11:CA:92:C2:9C:79:7C:E5:BD:F5:E9:CF:6D:4C:02:CD:63:F2:33:02:5E:C2:43:D6:E5:9B"}}},"request":{"raw":"GET /3/movie/now_playing?language=en-US\u0026page=1 HTTP/1.1\r\nHost: api.themoviedb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiIxZDkyZGJlM2VhZGRlOWE3YTZmZmRjZGI4Y2EwZTg2MiIsIm5iZiI6MTc1NDM5MDUwNi40ODcsInN1YiI6IjY4OTFkZmVhZjc0MTA0NTU2YTI2Mjg4ZCIsInNjb3BlcyI6WyJhcGlfcmVhZCJdLCJ2ZXJzaW9uIjoxfQ.CI-LhPOhU09HkuBwvUkSxSNl4fQx5HEtl9zqiXSJT2k\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json;charset=utf-8\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-expose-headers: *\r\ndate: Tue, 30 Jun 2026 23:26:47 GMT\r\ncontent-encoding: gzip\r\nx-task-id: 4c4f78d1a74d43808dc4178e225e46cd\r\nserver: openresty\r\nx-gateway-cache-status: HIT\r\netag: W/\"986f8401f6bf974ac2189d6dd7ea2fb5\"\r\ncache-control: public, max-age=9350\r\nx-az: us-east-1b\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-allow-origin: *\r\nx-amz-cf-id: 5zXlTpeh-LMDDJeIvidYfUJ2OJP-aoN4S9wkP3XxuA9J4BKLaYC2-g==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":12239,"size_decoded":5522,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bdf56c587aac9f0dc0c026c5b23a6ecb","sha1":"6f4c7b8a1ec856800eba330e0f3922c9269b77e5","sha256":"986f8401f6bf974ac2189d6dd7ea2fb5bc3325ab51fdb2df1f741e6293ae8e2a","sha512":"8971ca09e83d094f0dc33322a12a3b9e6ccb845165c956637117b38e97875e39e7b6aebf15a2c48bde712f5b9e85451a6f203f39d48f50d0a9f432b9f662a84a","ssdeep":"192:ngxY6/TkH5hgESxmiblIR/6qdi6CZjVr2THf7qv9NZrNqt:NITjfT6MqqVTy","tlshash":"0842b70553182f7feb2f8242f84e2dca97a821d5f288d9019ed5cb6c52cbdf2523545b","first_seen":"2026-06-30T23:27:15.03786Z","last_seen":"2026-06-30T23:27:15.03786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.themoviedb.org/3/movie/top_rated?language=en-US\u0026page=1","fqdn":"api.themoviedb.org","domain":"themoviedb.org","tld":"org"},"ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.808Z","timestamp":1782862006808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.themoviedb.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:49:1F:52:33:E0:7C:B7:E0:00:03:0D:36:EB:75:9D:26:75:B8:E0","sha256":"31:E4:5A:91:54:2F:11:CA:92:C2:9C:79:7C:E5:BD:F5:E9:CF:6D:4C:02:CD:63:F2:33:02:5E:C2:43:D6:E5:9B"}}},"request":{"raw":"OPTIONS /3/movie/top_rated?language=en-US\u0026page=1 HTTP/1.1\r\nHost: api.themoviedb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization\r\nReferer: https://clonmove.vercel.app/\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\nserver: openresty\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\naccess-control-max-age: 600\r\nalt-svc: h3=\":443\"; ma=86400\r\naccess-control-allow-headers: Authorization,Content-Type,X-Requested-With,Accept,Origin,If-Modified-Since,Cache-Control,Range,User-Agent,DNT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,POST,DELETE,OPTIONS\r\nx-amz-cf-id: IeD1CN8yKNic8CH1ffwI21flvdncr5Mk8kQ9gnjxIOMM6Vc5onP73Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":694,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T22:24:30.70154Z","times_seen":17768422,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.728Z","timestamp":1782862006728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Jun 2026 23:00:19 GMT\r\nexpires: Wed, 30 Jun 2027 23:00:19 GMT\r\ncache-control: public, max-age=31536000\r\nage: 1587\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":7816,"size_decoded":8626,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-07T22:23:39.390587Z","times_seen":294108,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonmove.vercel.app/assets/hero_title-CeCXMd-8.png","fqdn":"clonmove.vercel.app","domain":"clonmove.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.769Z","timestamp":1782862006769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /assets/hero_title-CeCXMd-8.png HTTP/1.1\r\nHost: clonmove.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 25604\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hero_title-CeCXMd-8.png\"\r\ncontent-type: image/png\r\ndate: Tue, 30 Jun 2026 23:26:46 GMT\r\netag: \"f21c0c782e96920e46cb629ea5e2884c\"\r\nlast-modified: Tue, 30 Jun 2026 16:20:02 GMT\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7d6vr-1782862006771-3fed7b7d1f94\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 103905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103905,"size_decoded":104660,"mime_type":"image/png","magic":"PNG image data, 650 x 260, 8-bit/color RGBA, non-interlaced","md5":"f21c0c782e96920e46cb629ea5e2884c","sha1":"bf7d5c9189aee10aed7bcac9fe5a63bf87b991d3","sha256":"8fa659e8debe904ad4f1942cb834cf7415798381348a427070a79c0baf24c8ae","sha512":"c19443bc1215f01681701a4948a756908c6f35e66208949add0eaa5db24012f7dc067a60a35fe746859d7c533224c3ac0eada01cf31848937f7c2f71d149d2e5","ssdeep":"1536:A9hwDhI/Tio3w7EUIDe1Q/9f6CfoN80mhvu6k37YbA6/BooahjDHVPLcUHxytMd6:AD2GTe1QFCr80MG6a6JXA1P9oW3A","tlshash":"3ea30222e3aad0af0ee725f9911a3f367873104b99d40875d9efd90815defdc90d0899","first_seen":"2024-07-21T00:20:39Z","last_seen":"2026-07-31T15:42:35.456941Z","times_seen":82,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-30","alert":"Phishing Block","trigger":"clonmove.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"clonmove.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.themoviedb.org/3/movie/top_rated?language=en-US\u0026page=1","fqdn":"api.themoviedb.org","domain":"themoviedb.org","tld":"org"},"ip":{"addr":"143.204.238.50","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://clonmove.vercel.app/","date":"2026-06-30T23:26:46.773Z","timestamp":1782862006773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.themoviedb.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 19 May 2026 00:00:00 GMT","end":"Wed, 02 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"77:49:1F:52:33:E0:7C:B7:E0:00:03:0D:36:EB:75:9D:26:75:B8:E0","sha256":"31:E4:5A:91:54:2F:11:CA:92:C2:9C:79:7C:E5:BD:F5:E9:CF:6D:4C:02:CD:63:F2:33:02:5E:C2:43:D6:E5:9B"}}},"request":{"raw":"GET /3/movie/top_rated?language=en-US\u0026page=1 HTTP/1.1\r\nHost: api.themoviedb.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://clonmove.vercel.app/\r\nAuthorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiIxZDkyZGJlM2VhZGRlOWE3YTZmZmRjZGI4Y2EwZTg2MiIsIm5iZiI6MTc1NDM5MDUwNi40ODcsInN1YiI6IjY4OTFkZmVhZjc0MTA0NTU2YTI2Mjg4ZCIsInNjb3BlcyI6WyJhcGlfcmVhZCJdLCJ2ZXJzaW9uIjoxfQ.CI-LhPOhU09HkuBwvUkSxSNl4fQx5HEtl9zqiXSJT2k\r\nOrigin: https://clonmove.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json;charset=utf-8\r\naccess-control-expose-headers: *\r\naccess-control-allow-origin: *\r\ndate: Tue, 30 Jun 2026 23:26:47 GMT\r\nx-task-id: 1fbac4e3461245c8997ef10b73b42514\r\netag: W/\"8e28133932456fef13f3e974745b8750\"\r\nserver: openresty\r\nx-gateway-cache-status: HIT\r\ncache-control: public, max-age=23709\r\nx-az: us-east-1c\r\ncontent-encoding: gzip\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 c5d69192a5829ea9f454024f618094b8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P4\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: hX93TRZYnwZR-EViPKkWf61H71xIv8n7jHRRlfWlL5dzM0QZQOes1Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13327,"size_decoded":6132,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"95e862f0951321251d4b309b34cbc2d2","sha1":"d5c052d9540d9a2436d4c4999c95473d7a332589","sha256":"ec1ebecee56dd026e018b7e4a80837df78b417c7a4b72cad75d2361a28cba9a0","sha512":"b16eccd5058292ab7507d4c3378e3f4e7d969a7d59dcc502841d397b0190ba666ec858b1e35c66697b7c46c732f4155e9d113ab7f5e182083684831b60db0e51","ssdeep":"192:oOyGGSxmfh7A1MRfOvh/cCvYZLAgEtQfCenv56VG1ifiGyVxNd3sd:oPEUdzRce6YZbEtQfXv5QGAQd3K","tlshash":"0352e61913082f7ee71b9351f50f2dcaabb815e5b1c8d90299d5862c16cfef2523a09e","first_seen":"2026-06-30T23:27:15.035072Z","last_seen":"2026-07-01T04:23:59.451725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
