# PhishDestroy domain threat record: clypeuscapital.com

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/clypeuscapital.com/
Machine-readable companion: https://phishdestroy.io/domain/clypeuscapital.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: observed active
- First observed by PhishDestroy: 2026-10-24 14:33:36 UTC
- Last availability or vendor check: 2026-10-24 14:50:37 UTC
- Stored record updated: 2026-10-24 16:20:20 UTC
- VirusTotal detections in the stored snapshot: 16/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: no stored flag

## Stored infrastructure

- Observed IP address: 104.21.10.121
- Registrar in stored WHOIS data: NAMECHEAP INC
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200
- Registration date in stored WHOIS data: 2026-07-02 12:03:55 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a16e62-93e6-7250-b53c-84f73bb6d11f/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/clypeuscapital.com
- Certificate Transparency search: https://crt.sh/?q=%25.clypeuscapital.com
- Web Archive lookup: https://web.archive.org/web/*/https://clypeuscapital.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Stored PhishDestroy analysis

Overview
PhishDestroy listed clypeuscapital.com on 2026-10-24 after its intake flagged the domain for a high number of malicious detections on VirusTotal. The recorded page title advertises a Motchill movie streaming service, which does not match any known impersonated brand. An HTTP 200 response was observed on the same date, but the title alone does not prove malicious activity.

How the scam works
The detections suggest the site could be used to deliver malware or host phishing pages, a common risk for domains flagged as malicious by multiple vendors. No specific credential‑stealing forms or wallet‑draining code were observed on the fetched page, so the exact mechanism remains uncertain.

Evidence
VirusTotal reported 13 malicious and 3 suspicious classifications from 92 engines on 2026-10-23, with 16 total detections across vendors such as BitDefender, Fortinet and G‑Data. Google Safe Browsing checked on 2026-10-24 did not flag the URL, while urlscan.io captured a clean verdict on 2026-07-30. PhishDestroy’s internal blocklist marks the domain as malicious, external blocklists showed zero hits, and OTX recorded a single pulse referencing the domain on 2026-10-24.

Infrastructure
The domain was registered on 2026-07-02 through NameCheap, Inc., and was observed to resolve to Cloudflare CDN IPs 104.21.10.121 and 172.67.163.82 (A) and to AAAA addresses in the 2606:4700:3033::/64 range. The TLS certificate, issued by Google Trust Services, was recorded as valid until 2026-11-28 and covered the root and wildcard subdomains. DNSSEC was not enabled in the observed DNS data and the site was observed to have Cloudflare’s WAF enabled.

What to do
Visitors should avoid entering any credentials or downloading files from the site and run a full anti‑malware scan if they interacted with it. Organizations can block clypeuscapital.com at the firewall or proxy and monitor outbound traffic for any connections to the recorded IP addresses. If any account credentials were submitted, change those passwords immediately and review associated accounts for unauthorized activity.

Useful links
urlscan.io scan and screenshot: https://urlscan.io/result/019fb3cf-18f2-73c5-b8bd-567397b5fe7f/
Cloudflare Radar report: https://radar.cloudflare.com/scan/8fa1fe34-b01f-4b50-acf2-af41c679db96
Stored capture screenshot: https://urlscan.io/screenshots/019fb3cf-18f2-73c5-b8bd-567397b5fe7f.png
Cloudflare Radar screenshot (2026-10-24T14:36:51Z): https://screenshots.phishdestroy.io/cf/8fa1fe34-b01f-4b50-acf2-af41c679db96.png
VirusTotal report: https://www.virustotal.com/gui/domain/clypeuscapital.com
Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=clypeuscapital.com
Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/
Site owner? Request a review: https://phishdestroy.io/appeals/
Analysis generated: 2026-10-24 14:40:09 UTC

## Stored page captures

- Primary capture: https://urlscan.io/screenshots/01a16e62-93e6-7250-b53c-84f73bb6d11f.png
  Captured: 2026-10-24 14:50:37 UTC
- URLScan capture: https://screenshots.phishdestroy.io/019fb3cf-18f2-73c5-b8bd-567397b5fe7f.png
  Captured: 2026-10-24 14:33:36 UTC
  Source report: https://urlscan.io/result/01a16e62-93e6-7250-b53c-84f73bb6d11f/
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/8fa1fe34-b01f-4b50-acf2-af41c679db96.png
  Captured: 2026-10-24 14:36:51 UTC
  Source report: https://radar.cloudflare.com/scan/8fa1fe34-b01f-4b50-acf2-af41c679db96
  SHA-256: 77f28b801c5396ad829e3070e5bec4052be16ccaf539b256145451d67056e6f5
- URLScan · 2026-07-30: https://screenshots.phishdestroy.io/us/019fb3cf-18f2-73c5-b8bd-567397b5fe7f.png
  Captured: 2026-07-30 16:15:30 UTC
  Source report: https://urlscan.io/result/019fb3cf-18f2-73c5-b8bd-567397b5fe7f/
  SHA-256: 589291a7e8ee9ff9830ea4be818fa8290d422509ede8798fab551b65207bea17
- URLScan · 2026-10-24: https://screenshots.phishdestroy.io/us/01a16e78-af46-772b-b0d2-c9f033b6aa6b.png
  Captured: 2026-10-24 15:13:00 UTC
  Source report: https://urlscan.io/result/01a16e78-af46-772b-b0d2-c9f033b6aa6b/
  SHA-256: b4f73e9cc228de074ab8fc85c7bd18e99fd4a62e94c9f12a180653f7e86f084a

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-10-24T16:01:43Z",
        "uuid": "01a16e62-93e6-7250-b53c-84f73bb6d11f",
        "scanned_at": "2026-10-24T14:48:51Z",
        "final_url": "https://clypeuscapital.com/",
        "status": 200,
        "redirected": "https-only",
        "redirects": [
            {
                "to": "https://clypeuscapital.com/",
                "from": "http://clypeuscapital.com/",
                "status": 307
            }
        ],
        "ip": "172.67.163.82",
        "domains": [
            "motchillt.com",
            "fonts.gstatic.com",
            "challenges.cloudflare.com",
            "www.googletagmanager.com",
            "region1.google-analytics.com",
            "fonts.googleapis.com"
        ],
        "ips": [
            "216.239.34.36",
            "104.18.95.41",
            "142.250.154.94",
            "142.250.154.97",
            "142.251.127.95",
            "188.114.96.3",
            "172.67.163.82"
        ],
        "asns": [
            "15169",
            "13335"
        ],
        "countries": [
            "US"
        ],
        "link_domains": [
            "motchillt.com"
        ],
        "doc_hash": "36760601ed49d0b29bda1e0a7b9660bee17952bfed59f4c3e29f85e7cbff12cd",
        "globals": [
            "$",
            "jQuery",
            "dataLayer",
            "url",
            "jQuery111205221301601305717",
            "DP_jQuery_1792853318562",
            "_$_416c",
            "JQMP",
            "handleAjax",
            "formatNumber",
            "NewCaptcha",
            "IsEmail",
            "_0x7aa6",
            "isMobile",
            "MPAd",
            "MPAds",
            "_$_5d06",
            "jquery_beauty",
            "Cookies",
            "plpData",
            "smc_ajax",
            "_wpemojiSettings",
            "smcTurnstileCallback",
            "twemoji",
            "wp",
            "turnstile",
            "google_tag_manager",
            "google_tag_data",
            "onYouTubeIframeAPIReady",
            "gaGlobal"
        ],
        "cookies": [
            "_ga_JH3PF0YDNG",
            "_ga"
        ],
        "storage_keys": [
            "plp_day",
            "plp_windowStart",
            "plp_windowCount",
            "plp_popupUsedLinks",
            "wpEmojiSettingsSupports"
        ],
        "tls": {
            "san": [
                "clypeuscapital.com",
                "*.clypeuscapital.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "WE1",
            "subject": "clypeuscapital.com",
            "protocol": "QUIC",
            "valid_to": "2026-11-28T15:04:12Z",
            "valid_from": "2026-08-30T14:05:47Z"
        },
        "domain_age_days": 114,
        "apex_age_days": 114,
        "tls_age_days": 55,
        "tls_valid_days": 90,
        "requests": 77,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-60c5e22"
                ],
                "score": 95,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html; charset=UTF-8",
            "x-powered-by": "centminmod"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-10-24T14:39:13Z",
        "uuid": "8fa1fe34-b01f-4b50-acf2-af41c679db96",
        "scanned_at": "2026-10-24T14:36:51Z",
        "final_url": "https://clypeuscapital.com/",
        "status": 200,
        "history": [
            {
                "url": "https://clypeuscapital.com/",
                "status": 200
            }
        ],
        "dom_hash": "8edba7c98685ba1ff5ab48108ef6900c906e6f7c9019a2dc97a305a7aa1dbc89",
        "doc_hash": "ade227938a7de925c50c432e9c19924d442fff5d9a6c45ecca870eb3531ef583",
        "phishing_v2": [
            "phishing"
        ],
        "domain_risks": [
            "Malware",
            "Security threats",
            "CIPA Filter",
            "CIPA"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "clypeuscapital.com",
                "type": "A",
                "value": "104.21.10.121"
            },
            {
                "name": "clypeuscapital.com",
                "type": "A",
                "value": "172.67.163.82"
            },
            {
                "name": "clypeuscapital.com",
                "type": "AAAA",
                "value": "2606:4700:3033::6815:a79"
            },
            {
                "name": "clypeuscapital.com",
                "type": "AAAA",
                "value": "2606:4700:3037::ac43:a352"
            }
        ],
        "dnssec_valid": false,
        "ip": "104.21.10.121",
        "verdict": {
            "tags": [
                "malware"
            ],
            "malicious": true,
            "categories": [
                "malware"
            ]
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-07-02T14:03:55Z",
            "updated": "2026-07-02T14:18:52Z",
            "expires": "2027-07-02T14:03:55Z",
            "nameservers": [
                "donovan.ns.cloudflare.com",
                "imani.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-10-24T14:35:59Z",
        "analysis_at": "2026-10-23T06:13:01Z",
        "stats": {
            "timeout": 0,
            "harmless": 44,
            "malicious": 13,
            "suspicious": 3,
            "undetected": 32
        },
        "detections": {
            "DNS8": "suspicious",
            "ESET": "suspicious",
            "VIPRE": "phishing",
            "G-Data": "phishing",
            "Lionic": "phishing",
            "Sophos": "phishing",
            "Webroot": "malicious",
            "Fortinet": "phishing",
            "SOCRadar": "phishing",
            "Kaspersky": "phishing",
            "Seclookup": "malicious",
            "Gridinsoft": "suspicious",
            "BitDefender": "phishing",
            "Chong Lua Dao": "malicious",
            "alphaMountain.ai": "phishing",
            "Forcepoint ThreatSeeker": "phishing"
        },
        "reputation": 0,
        "tags": [
            "dga"
        ],
        "categories": {
            "alphaMountain.ai": "Phishing (alphaMountain.ai)"
        },
        "registrar": "NAMECHEAP INC",
        "created": "2026-07-02T14:03:55Z",
        "expires": "2027-07-02T14:03:55Z",
        "updated": "2026-07-02T14:18:52Z",
        "first_seen": "2026-07-02T15:33:28Z",
        "dns": [
            {
                "ttl": 21600,
                "type": "NS",
                "value": "donovan.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.10.121"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::6815:a79"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3037::ac43:a352"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.163.82"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "donovan.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "imani.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-10-23T06:18:37Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "clypeuscapital.com",
                "*.clypeuscapital.com"
            ],
            "issuer": "Google Trust Services / WE1",
            "serial": "1521af2de8a2dcac0e0c214dbbcd369d",
            "sha256": "ebc49976e6a44b2ca9c608bee34a7321a0e14660ec9cb2ed703f6067ac85c5e5",
            "subject": "clypeuscapital.com",
            "valid_to": "2026-11-28T15:04:12Z",
            "valid_from": "2026-08-30T14:05:47Z"
        },
        "whois": {
            "registrar": "NAMECHEAP INC",
            "registrar_iana_id": "1068",
            "registrar_url": "http://www.namecheap.com",
            "created": "2026-07-02T14:03:55Z",
            "updated": "1-01-01T00:00:00Z",
            "expires": "2027-07-02T14:03:55Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "donovan.ns.cloudflare.com",
                "imani.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        },
        "rdap": {
            "status": [
                "client transfer prohibited"
            ],
            "events": {
                "registration": "2026-07-02T14:03:55Z",
                "registrar expiration": "2027-07-02T14:03:55Z",
                "last update of RDAP database": "2026-10-19T05:53:56Z"
            }
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-10-24T14:39:36Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "caa_records": {
            "domain": "clypeuscapital.com"
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_by": [
                "CloudFlare Family"
            ],
            "blocked_count": 1
        },
        "archives": {
            "last": "2026-10-24T14:34:28Z",
            "first": "2026-10-24T14:34:28Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 20434
        },
        "robots_txt": {
            "agents": [
                "*"
            ],
            "present": true,
            "sitemaps": [
                "https://motchillt.com/sitemap.xml"
            ]
        },
        "sitemap": {
            "present": true,
            "url_count": 5000
        },
        "social_tags": {
            "ogUrl": "https://motchillt.com/",
            "title": "Motchill | Phim Mới | Phim Hay | Xem Phim Online | Xem Phim Siêu Nhanh",
            "ogType": "website",
            "robots": "follow, index",
            "ogTitle": "Motchill | Phim Mới | Phim Hay | Xem Phim Online | Xem Phim Siêu Nhanh",
            "ogSiteName": "Motchill Phim Online",
            "description": "Motchill – Website xem phim online miễn phí, phim mới nhất, phim hay chất lượng Full HD, Vietsub, Thuyết minh, Lồng tiếng. Cập nhật nhanh phim chiếu rạp, phim Hàn, Trung Quốc, Âu Mỹ mỗi ngày.",
            "twitterCard": "summary_large_image",
            "twitterSite": "@Motchill Phim Online",
            "canonicalUrl": "https://motchillt.com/",
            "ogDescription": "Motchill – Website xem phim online miễn phí, phim mới nhất, phim hay chất lượng Full HD, Vietsub, Thuyết minh, Lồng tiếng. Cập nhật nhanh phim chiếu rạp, phim Hàn, Trung Quốc, Âu Mỹ mỗi ngày."
        },
        "trackers": {
            "requests": 75,
            "trackers": [
                {
                    "name": "Google",
                    "company": "Google",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 1
                },
                {
                    "name": "Google Tag",
                    "company": "Google",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 2
                },
                {
                    "name": "Cloudflare",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 2
                },
                {
                    "name": "Google Fonts",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 1
                },
                {
                    "name": "Google Static",
                    "company": "Google",
                    "country": "US",
                    "category": "Hosting",
                    "requests": 3
                },
                {
                    "name": "Google Analytics",
                    "company": "Google",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 1
                },
                {
                    "name": "Google Tag Manager",
                    "company": "Google",
                    "country": "US",
                    "category": "Utilities",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://motchillt.com/wp-includes/js/jquery/jquery.min.js",
                "https://motchillt.com/wp-includes/js/jquery/jquery-migrate.min.js",
                "https://motchillt.com/wp-content/themes/ophim-theme-motchill-wp-main/assets/js/jquery.min.js",
                "https://motchillt.com/wp-content/themes/ophim-theme-motchill-wp-main/assets/js/jquery.slimscroll.min.js",
                "https://motchillt.com/wp-content/themes/ophim-theme-motchill-wp-main/assets/js/bootstrap2.min.js",
                "https://motchillt.com/wp-content/themes/ophim-theme-motchill-wp-main/assets/js/jquery-ui.min.js",
                "https://motchillt.com/wp-content/themes/ophim-theme-motchill-wp-main/assets/js/jquery.lazyload.min.js",
                "https://motchillt.com/wp-content/themes/ophim-theme-motchill-wp-main/assets/js/jquery.core.min.js",
                "https://motchillt.com/wp-content/themes/ophim-theme-motchill-wp-main/assets/js/functions.js",
                "https://motchillt.com/wp-content/themes/ophim-theme-motchill-wp-main/assets/js/js.cookie.js"
            ],
            "third_party_scripts": 15
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 14,
                "tls": 48,
                "wait": 1261,
                "connect": 8,
                "download": 30
            },
            "response_ms": 1361
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 123690,
            "co2_grams": 0.0045,
            "cleaner_than": 17
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "162.159.38.62",
                    "host": "imani.ns.cloudflare.com"
                },
                {
                    "ip": "108.162.195.114",
                    "host": "donovan.ns.cloudflare.com"
                }
            ],
            "zone": "clypeuscapital.com"
        },
        "cookies": {
            "cookies": [
                {
                    "name": "_ga_JH3PF0YDNG"
                },
                {
                    "name": "_ga"
                }
            ]
        },
        "location": {
            "ip": "2606:4700:3033::6815:a79",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Google Trust Services / WE1",
            "subject": "clypeuscapital.com"
        },
        "dns": {
            "A": [
                "104.21.10.121",
                "172.67.163.82"
            ],
            "NS": [
                "imani.ns.cloudflare.com",
                "donovan.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"donovan.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2413733524, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2606:4700:3037::ac43:a352",
                "2606:4700:3033::6815:a79"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3037::ac43:a352",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://clypeuscapital.com"
            ]
        },
        "social_presence": {
            "profiles": [
                "https://x.com/motchillne"
            ]
        },
        "linked_pages": {
            "external": [
                "https://motchillt.com/phim/ngay-ban-than-giau-co-chang-con-xa/",
                "https://motchillt.com/phim/dung-la-mot-co-gai-ngoan-ngoan/",
                "https://motchillt.com/phim/ngoc-diem-thu/",
                "https://motchillt.com/phim/ga-kim-thoa-ga-tram-vang/",
                "https://motchillt.com/phim/tuy-mong/",
                "https://motchillt.com/phim/luan-hoi/",
                "https://motchillt.com/phim/ngu-cung-soi/",
                "https://motchillt.com/phim/chan-dien-thap-dung-si/",
                "https://motchillt.com/phim/dao-chich-chinh-truong/",
                "https://motchillt.com/phim/so-ly/",
                "https://motchillt.com/phim/bac-si-x/",
                "https://motchillt.com/phim/an-tu-can-ke/",
                "https://motchillt.com/phim/my-nhan-du/",
                "https://motchillt.com/phim/chim-vao-mat-em-phan-1/",
                "https://motchillt.com/phim/yeu-mot-nguoi-khac-yeu-mot-nguoi-khac-khong-phai-em/",
                "https://motchillt.com/phim/khong-the-thay-the-phan-1/",
                "https://motchillt.com/phim/tham-tu-lung-danh-conan/",
                "https://motchillt.com/phim/phong-hoa-lenh/",
                "https://motchillt.com/phim/bon-ban-tay-hai-ban-sonata/",
                "https://motchillt.com/phim/luyen-khi-muoi-van-nam/",
                "https://motchillt.com/phim/linh-canh-hanh-gia-ngoai-truyen/",
                "https://motchillt.com/phim/van-gioi-doc-ton/",
                "https://motchillt.com/phim/vision-quest/",
                "https://motchillt.com/phim/quang-am-chi-ngoai/",
                "https://motchillt.com/phim/phap-su-tu-linh-ta-chinh-la-thien-tai/"
            ],
            "external_count": 89,
            "internal_count": 25
        },
        "whois": {
            "registrar": "NameCheap, Inc.",
            "created": "2026-07-02T14:03:55Z",
            "updated": "2026-07-02T14:18:52Z",
            "expires": "2027-07-02T14:03:55Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "donovan.ns.cloudflare.com",
                "imani.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html; charset=UTF-8",
                "x-powered-by": "centminmod"
            }
        }
    }
}
```