@anonympins/fingerprint 0.4.3 → 0.4.5

package/src/php/Store/RedisStore.php

@@ -1,54 +1,54 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint\Store;
-
-/**
- * Adaptateur de stockage Redis pour le moteur Fingerprint.
- * Compatible avec phpredis et predis.
- */
-class RedisStore implements IStore
-{
-    /**
-     * @var mixed Une instance de \Redis ou de \Predis\Client
-     */
-    private $redis;
-
-    /**
-     * @param mixed $redis Client Redis déjà configuré et connecté
-     */
-    public function __construct($redis)
-    {
-        $this->redis = $redis;
-    }
-
-    public function get(string $key)
-    {
-        $value = $this->redis->get($key);
-        if ($value === false || $value === null) {
-            return null;
-        }
-        return json_decode($value, true);
-    }
-
-    public function set(string $key, $value, ?int $ttl = null): void
-    {
-        $stringValue = json_encode($value);
-        if ($ttl !== null && $ttl > 0) {
-            $this->redis->setex($key, $ttl, $stringValue);
-        } else {
-            $this->redis->set($key, $stringValue);
-        }
-    }
-
-    public function has(string $key): bool
-    {
-        return (bool)$this->redis->exists($key);
-    }
-
-    public function delete(string $key): void
-    {
-        $this->redis->del($key);
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Store;
+
+/**
+ * Adaptateur de stockage Redis pour le moteur Fingerprint.
+ * Compatible avec phpredis et predis.
+ */
+class RedisStore implements IStore
+{
+    /**
+     * @var mixed Une instance de \Redis ou de \Predis\Client
+     */
+    private $redis;
+
+    /**
+     * @param mixed $redis Client Redis déjà configuré et connecté
+     */
+    public function __construct($redis)
+    {
+        $this->redis = $redis;
+    }
+
+    public function get(string $key)
+    {
+        $value = $this->redis->get($key);
+        if ($value === false || $value === null) {
+            return null;
+        }
+        return json_decode($value, true);
+    }
+
+    public function set(string $key, $value, ?int $ttl = null): void
+    {
+        $stringValue = json_encode($value);
+        if ($ttl !== null && $ttl > 0) {
+            $this->redis->setex($key, $ttl, $stringValue);
+        } else {
+            $this->redis->set($key, $stringValue);
+        }
+    }
+
+    public function has(string $key): bool
+    {
+        return (bool)$this->redis->exists($key);
+    }
+
+    public function delete(string $key): void
+    {
+        $this->redis->del($key);
+    }
 }

package/src/php/Tests/FingerprintEngineTest.php

@@ -294,7 +294,7 @@ class FingerprintEngineTest extends TestCase
                     'user-agent' => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36',
                     'sec-ch-ua' => '"Not/A)Brand";v="99", "Google Chrome";v="120", "Chromium";v="120"',
                 ]),
-                80.0,
+                96.7,
                 'Should return 80 for a large version mismatch (>5).'
             ],
             'small version mismatch' => [
@@ -328,4 +328,30 @@ class FingerprintEngineTest extends TestCase
             ],
         ];
     }
+
+    public function testDetectsTcpAnomalyScore(): void
+    {
+        $firstContext = $this->createRequestContext();
+        $firstDecision = $this->engine->processRequest($firstContext);
+        $this->assertArrayHasKey('newCookieForResponse', $firstDecision);
+        $deviceIdCookie = $firstDecision['newCookieForResponse'];
+
+        // Trame binaire TCP SYN Linux simulée (TTL=64, WS=7)
+        $linuxSynHex = '4500003c1a2b400040063c1a7f0000017f0000011f9000500000000100000000a00272103c1a0000020405b4040201030307';
+        
+        $context = $this->createRequestContext([
+            'cookies' => [$deviceIdCookie['name'] => $deviceIdCookie['value']],
+            'headers' => [
+                'user-agent' => 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36',
+                'accept-language' => 'en-US,en;q=0.9',
+                'x-raw-tcp-binary' => $linuxSynHex
+            ]
+        ]);
+
+        $decision = $this->engine->processRequest($context);
+
+        $this->assertEquals(80.1, $decision['vector']['tcpAnomalyScore']);
+        // Le poids de tcpAnomalyScore dans le profil balanced est de 0.8 (80 * 0.8 = 64)
+        $this->assertGreaterThanOrEqual(64.0, $decision['score']);
+    }
 }

package/src/php/Tests/IpReputationTest.php

@@ -1,157 +1,176 @@
-<?php
-
-declare(strict_types=1);
-
-namespace Anonympins\Fingerprint\Tests;
-
-use Anonympins\Fingerprint\RequestContext;
-use Anonympins\Fingerprint\Store\IStore;
-use Anonympins\Fingerprint\Store\StoreManager;
-use Anonympins\Fingerprint\Utils\RequestUtils;
-use PHPUnit\Framework\TestCase;
-
-class IpReputationTest extends TestCase
-{
-    private $store;
-
-    protected function setUp(): void
-    {
-        parent::setUp();
-
-        // Un mock anonyme simple et en mémoire du Store pour isoler les tests
-        $this->store = new class implements IStore {
-            private array $data = [];
-            public function get(string $key) { return $this->data[$key] ?? null; }
-            public function set(string $key, $value, ?int $ttl = null): void { $this->data[$key] = $value; }
-            public function has(string $key): bool { return isset($this->data[$key]); }
-            public function delete(string $key): void { unset($this->data[$key]); }
-        };
-
-        StoreManager::setStore($this->store);
-    }
-
-    public function testGetScoreReturnsZeroForUnknownIp(): void
-    {
-        $score = RequestUtils::getIpReputationScore('8.8.8.8');
-        $this->assertEquals(0.0, $score);
-    }
-
-    public function testUpdateScoreChangesValueCorrectly(): void
-    {
-        $ip = '8.8.4.4';
-        RequestUtils::updateIpReputationScore($ip, 45.0);
-        $this->assertEquals(45.0, RequestUtils::getIpReputationScore($ip));
-
-        RequestUtils::updateIpReputationScore($ip, -15.0);
-        $this->assertEquals(30.0, RequestUtils::getIpReputationScore($ip));
-    }
-
-    public function testBoundsAreClampedBetween0And100(): void
-    {
-        $ip = '1.1.1.1';
-        RequestUtils::updateIpReputationScore($ip, 120.0);
-        $this->assertEquals(100.0, RequestUtils::getIpReputationScore($ip));
-
-        RequestUtils::updateIpReputationScore($ip, -150.0);
-        $this->assertEquals(0.0, RequestUtils::getIpReputationScore($ip));
-    }
-
-    public function testTimeDecayCalculatesLossOfTwoPointsPerHour(): void
-    {
-        $ip = '2.2.2.2';
-        $now = time();
-
-        // Simulation d'un score de 80 vieux de 4 heures (4 * 2 = 8 points de perte)
-        $this->store->set("ip-reputation:{$ip}", [
-            'score' => 80.0,
-            'lastUpdate' => $now - 14400
-        ]);
-
-        $score = RequestUtils::getIpReputationScore($ip);
-        $this->assertEquals(72.0, $score);
-    }
-
-    public function testIpReputationScoreIsIntegratedIntoFinalScore(): void
-    {
-        $ip = '1.2.3.4';
-        RequestUtils::updateIpReputationScore($ip, 60.0);
-
-        $weights = [
-            'ipReputationScore' => 0.5,
-            'historyScore' => 0.0,
-            'rotationScore' => 0.0,
-            'headerAnomalyScore' => 0.0,
-            'requestPatternScore' => 0.0,
-            'inconsistencyScore' => 0.0,
-            'honeypotScore' => 0.0,
-            'behaviorScore' => 0.0,
-            'botScore' => 0.0,
-            'crossLayerInconsistencyScore' => 0.0,
-            'tlsSpoofingScore' => 0.0,
-            'timeInconsistencyScore' => 0.0,
-            'clickVarianceScore' => 0.0,
-            'clientHintsInconsistencyScore' => 0.0,
-            'subnetScore' => 0.0,
-        ];
-
-        $ipRepScore = RequestUtils::getIpReputationScore($ip);
-        $this->assertEquals(60.0, $ipRepScore);
-        $score = $ipRepScore * $weights['ipReputationScore'];
-        $this->assertEquals(30.0, $score);
-    }
-
-    public function testGetIpSubnetIpv4AndIpv6(): void
-    {
-        $ipv4Subnet = RequestUtils::getIpSubnet('192.168.1.50', 24, 48);
-        $this->assertEquals('192.168.1.0/24', $ipv4Subnet);
-
-        $ipv6Subnet = RequestUtils::getIpSubnet('2001:db8:abcd:0012::1', 24, 48);
-        $this->assertEquals('2001:db8:abcd::/48', $ipv6Subnet);
-    }
-
-    public function testGetClientHintsInconsistencyScoreMismatch(): void
-    {
-        $context = $this->createMock(RequestContext::class);
-        $context->method('getHeader')->willReturnCallback(function($name) {
-            if ($name === 'user-agent') {
-                return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/117.0';
-            }
-            if ($name === 'sec-ch-ua') {
-                return '"Google Chrome";v="117"';
-            }
-            return null;
-        });
-
-        $score = RequestUtils::getClientHintsInconsistencyScore($context);
-        $this->assertEquals(90.0, $score['clientHintsInconsistencyScore']);
-    }
-
-    public function testGetSubnetScoreCalculations(): void
-    {
-        $context = $this->createMock(RequestContext::class);
-        $context->clientIp = '192.168.1.50';
-
-        $score = RequestUtils::getSubnetScore($context, 'device-1');
-        $this->assertEquals(0.0, $score['subnetScore']);
-
-        for ($i = 1; $i <= 12; $i++) {
-            RequestUtils::updateSubnetMetrics($context, "device-{$i}", 30.0);
-        }
-
-        $scoreWithHistory = RequestUtils::getSubnetScore($context, 'device-1');
-        $this->assertGreaterThan(0.0, $scoreWithHistory['subnetScore']);
-    }
-
-    public function testTlsSpoofingScoreWithJa4(): void
-    {
-        $context = $this->createMock(RequestContext::class);
-        $context->ja4 = 't13d1517h2_8daaf61527d5';
-        $context->ja3 = null;
-        $context->method('getHeader')->willReturnCallback(function($name) {
-            return $name === 'user-agent' ? 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) Firefox/117.0' : null;
-        });
-
-        $score = RequestUtils::getTlsSpoofingScore($context);
-        $this->assertEquals(90.0, $score['tlsSpoofingScore']);
-    }
+<?php
+
+declare(strict_types=1);
+
+namespace Anonympins\Fingerprint\Tests;
+
+use Anonympins\Fingerprint\RequestContext;
+use Anonympins\Fingerprint\Store\IStore;
+use Anonympins\Fingerprint\Store\StoreManager;
+use Anonympins\Fingerprint\Utils\RequestUtils;
+use PHPUnit\Framework\TestCase;
+
+class IpReputationTest extends TestCase
+{
+    private $store;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+
+        // Un mock anonyme simple et en mémoire du Store pour isoler les tests
+        $this->store = new class implements IStore {
+            private array $data = [];
+            public function get(string $key) { return $this->data[$key] ?? null; }
+            public function set(string $key, $value, ?int $ttl = null): void { $this->data[$key] = $value; }
+            public function has(string $key): bool { return isset($this->data[$key]); }
+            public function delete(string $key): void { unset($this->data[$key]); }
+        };
+
+        StoreManager::setStore($this->store);
+    }
+
+    public function testGetScoreReturnsZeroForUnknownIp(): void
+    {
+        $score = RequestUtils::getIpReputationScore('8.8.8.8');
+        $this->assertEquals(0.0, $score);
+    }
+
+    public function testUpdateScoreChangesValueCorrectly(): void
+    {
+        $ip = '8.8.4.4';
+        RequestUtils::updateIpReputationScore($ip, 45.0);
+        $this->assertEquals(45.0, RequestUtils::getIpReputationScore($ip));
+
+        RequestUtils::updateIpReputationScore($ip, -15.0);
+        $this->assertEquals(30.0, RequestUtils::getIpReputationScore($ip));
+    }
+
+    public function testBoundsAreClampedBetween0And100(): void
+    {
+        $ip = '1.1.1.1';
+        RequestUtils::updateIpReputationScore($ip, 120.0);
+        $this->assertEquals(100.0, RequestUtils::getIpReputationScore($ip));
+
+        RequestUtils::updateIpReputationScore($ip, -150.0);
+        $this->assertEquals(0.0, RequestUtils::getIpReputationScore($ip));
+    }
+
+    public function testTimeDecayCalculatesLossOfTwoPointsPerHour(): void
+    {
+        $ip = '2.2.2.2';
+        $now = time();
+
+        // Simulation d'un score de 80 vieux de 4 heures (4 * 2 = 8 points de perte)
+        $this->store->set("ip-reputation:{$ip}", [
+            'score' => 80.0,
+            'lastUpdate' => $now - 14400
+        ]);
+
+        $score = RequestUtils::getIpReputationScore($ip);
+        $this->assertEquals(72.0, $score);
+    }
+
+    public function testIpReputationScoreIsIntegratedIntoFinalScore(): void
+    {
+        $ip = '1.2.3.4';
+        RequestUtils::updateIpReputationScore($ip, 60.0);
+
+        $weights = [
+            'ipReputationScore' => 0.5,
+            'historyScore' => 0.0,
+            'rotationScore' => 0.0,
+            'headerAnomalyScore' => 0.0,
+            'requestPatternScore' => 0.0,
+            'inconsistencyScore' => 0.0,
+            'honeypotScore' => 0.0,
+            'behaviorScore' => 0.0,
+            'botScore' => 0.0,
+            'crossLayerInconsistencyScore' => 0.0,
+            'tlsSpoofingScore' => 0.0,
+            'timeInconsistencyScore' => 0.0,
+            'clickVarianceScore' => 0.0,
+            'clientHintsInconsistencyScore' => 0.0,
+            'subnetScore' => 0.0,
+        ];
+
+        $ipRepScore = RequestUtils::getIpReputationScore($ip);
+        $this->assertEquals(60.0, $ipRepScore);
+        $score = $ipRepScore * $weights['ipReputationScore'];
+        $this->assertEquals(30.0, $score);
+    }
+
+    public function testGetIpSubnetIpv4AndIpv6(): void
+    {
+        $ipv4Subnet = RequestUtils::getIpSubnet('192.168.1.50', 24, 48);
+        $this->assertEquals('192.168.1.0/24', $ipv4Subnet);
+
+        $ipv6Subnet = RequestUtils::getIpSubnet('2001:db8:abcd:0012::1', 24, 48);
+        $this->assertEquals('2001:db8:abcd::/48', $ipv6Subnet);
+    }
+
+    public function testGetClientHintsInconsistencyScoreMismatch(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->method('getHeader')->willReturnCallback(function($name) {
+            if ($name === 'user-agent') {
+                return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/117.0';
+            }
+            if ($name === 'sec-ch-ua') {
+                return '"Google Chrome";v="117"';
+            }
+            return null;
+        });
+
+        $score = RequestUtils::getClientHintsInconsistencyScore($context);
+        $this->assertEquals(90.0, $score['clientHintsInconsistencyScore']);
+    }
+
+    public function testGetClientHintsInconsistencyFullVersionMismatch(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->method('getHeader')->willReturnCallback(function($name) {
+            if ($name === 'user-agent') {
+                return 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.1.2 Safari/537.36';
+            }
+            if ($name === 'sec-ch-ua') {
+                return '"Not_A Brand";v="8", "Chromium";v="120", "Google Chrome";v="120"';
+            }
+            if ($name === 'sec-ch-ua-full-version-list') {
+                return '"Not_A Brand";v="8.0.0.0", "Chromium";v="120.0.1.3", "Google Chrome";v="120.0.1.3"';
+            }
+            return null;
+        });
+        $score = RequestUtils::getClientHintsInconsistencyScore($context);
+        $this->assertEquals(85.0, $score['clientHintsInconsistencyScore']);
+    }
+
+    public function testGetSubnetScoreCalculations(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->clientIp = '192.168.1.50';
+
+        $score = RequestUtils::getSubnetScore($context, 'device-1');
+        $this->assertEquals(0.0, $score['subnetScore']);
+
+        for ($i = 1; $i <= 12; $i++) {
+            RequestUtils::updateSubnetMetrics($context, "device-{$i}", 30.0);
+        }
+
+        $scoreWithHistory = RequestUtils::getSubnetScore($context, 'device-1');
+        $this->assertGreaterThan(0.0, $scoreWithHistory['subnetScore']);
+    }
+
+    public function testTlsSpoofingScoreWithJa4(): void
+    {
+        $context = $this->createMock(RequestContext::class);
+        $context->ja4 = 't13d1517h2_8daaf61527d5';
+        $context->ja3 = null;
+        $context->method('getHeader')->willReturnCallback(function($name) {
+            return $name === 'user-agent' ? 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) Firefox/117.0' : null;
+        });
+
+        $score = RequestUtils::getTlsSpoofingScore($context);
+        $this->assertEquals(90.0, $score['tlsSpoofingScore']);
+    }
 }

package/src/php/Tests/RequestUtilsTest.php

@@ -11,6 +11,12 @@ use PHPUnit\Framework\TestCase;
 
 class RequestUtilsTest extends TestCase
 {
+    protected function setUp(): void
+    {
+        parent::setUp();
+        \Anonympins\Fingerprint\Store\StoreManager::configureStore(new \Anonympins\Fingerprint\Store\InMemoryStore());
+    }
+
     private function createRequestContext(array $overrides = []): RequestContext
     {
         $defaults = [
@@ -166,6 +172,42 @@ class RequestUtilsTest extends TestCase
         $this->assertEquals(40.0, $scoreNoActivity['behaviorScore']);
     }
 
+    public function testGetBehaviorScoreWithBotLikeTouchMovements(): void
+    {
+        $metrics = [
+            'honeypotInteraction' => false,
+            'touchMovementsHistory' => [
+                ['x' => 50, 'y' => 50, 't' => 1, 'p' => 0.5, 'r' => 10, 'num' => 1],
+                ['x' => 55, 'y' => 55, 't' => 100, 'p' => 0.5, 'r' => 10, 'num' => 1],
+                ['x' => 60, 'y' => 60, 't' => 200, 'p' => 0.5, 'r' => 10, 'num' => 1],
+                ['x' => 65, 'y' => 65, 't' => 300, 'p' => 0.5, 'r' => 10, 'num' => 1]
+            ]
+        ];
+        $context = $this->createRequestContext([
+            'headers' => ['x-behavior-metrics' => json_encode($metrics)]
+        ]);
+        $score = RequestUtils::getBehaviorScore($context);
+        $this->assertGreaterThan(60.0, $score['behaviorScore']);
+    }
+
+    public function testGetBehaviorScoreWithHumanLikeTouchMovements(): void
+    {
+        $metrics = [
+            'honeypotInteraction' => false,
+            'touchMovementsHistory' => [
+                ['x' => 50, 'y' => 50, 't' => 1, 'p' => 0.45, 'r' => 8.5, 'num' => 1],
+                ['x' => 60, 'y' => 52, 't' => 100, 'p' => 0.52, 'r' => 9.1, 'num' => 1],
+                ['x' => 72, 'y' => 60, 't' => 200, 'p' => 0.49, 'r' => 8.8, 'num' => 1],
+                ['x' => 80, 'y' => 80, 't' => 300, 'p' => 0.41, 'r' => 8.2, 'num' => 1]
+            ]
+        ];
+        $context = $this->createRequestContext([
+            'headers' => ['x-behavior-metrics' => json_encode($metrics)]
+        ]);
+        $score = RequestUtils::getBehaviorScore($context);
+        $this->assertLessThan(30.0, $score['behaviorScore']);
+    }
+
     public function testGetTimeInconsistencyScore(): void
     {
         $requestTimestamp = time() * 1000;
@@ -254,4 +296,92 @@ class RequestUtilsTest extends TestCase
         $this->assertEquals(2, $deviceData['rapidChangeCount']);
         $this->assertGreaterThan(0, $indicators['rotationScore']);
     }
+
+    public function testGetRequestPatternScoreWeightedSubscores(): void
+    {
+        $context = $this->createRequestContext(['path' => '/search']);
+        $deviceData = [
+            'requestHistory' => [],
+            'timingHistory' => [100, 100, 100, 100, 100, 100], // stdDev = 0
+            'lastPatternScore' => 0.0
+        ];
+        $patternConfig = [
+            'minSamples' => 5,
+            'regularityThreshold' => 50,
+            'benfordThreshold' => 0.15,
+            'patternWeight' => 80,
+            'decayFactor' => 0.9,
+            'inactivityReset' => 5000,
+            'regularityRatio' => 0.4,
+            'benfordRatio' => 0.3,
+            'enumerationRatio' => 0.3
+        ];
+
+        $result = RequestUtils::getRequestPatternScore($context, $deviceData, $patternConfig);
+        // regularityScore = 1.0. regularityRatio = 0.4.
+        // instantScore = 1.0 * 0.4 * 80 = 32.
+        $this->assertEquals(32.0, $result['requestPatternScore']);
+    }
+
+    public function testGetBotnetClusterScoreCalculations(): void
+    {
+        $stableFpHash = 'test-stable-hash';
+
+        $context1 = $this->createRequestContext(['clientIp' => '192.168.1.1']);
+        $score = RequestUtils::getBotnetClusterScore($context1, $stableFpHash);
+        $this->assertEquals(0.0, $score['botnetClusterScore']);
+
+        RequestUtils::getBotnetClusterScore($this->createRequestContext(['clientIp' => '192.168.1.2']), $stableFpHash);
+        $score = RequestUtils::getBotnetClusterScore($this->createRequestContext(['clientIp' => '192.168.1.3']), $stableFpHash);
+        $this->assertEquals(50.3, $score['botnetClusterScore']);
+
+        RequestUtils::getBotnetClusterScore($this->createRequestContext(['clientIp' => '192.168.1.4']), $stableFpHash);
+        $score = RequestUtils::getBotnetClusterScore($this->createRequestContext(['clientIp' => '192.168.1.5']), $stableFpHash);
+        $this->assertEquals(75.3, $score['botnetClusterScore']);
+
+        for ($i = 6; $i <= 10; $i++) {
+            $score = RequestUtils::getBotnetClusterScore($this->createRequestContext(['clientIp' => "192.168.1.{$i}"]), $stableFpHash);
+        }
+        $this->assertEquals(95.7, $score['botnetClusterScore']);
+    }
+
+    public function testRealWorldConsoleBotnetClustering(): void
+    {
+        $ps4Headers = [
+            'user-agent' => 'Mozilla/5.0 (PlayStation 4 11.50) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.50 Safari/605.1.15',
+            'x-ja3-hash' => '76993ef93bf89104037599723ab9f201',
+            'x-ja4-hash' => 't13d1516h2_8daaf6152771_390237aa04be',
+            'x-http2-fingerprint' => '1:65536;3:1000;4:6291456;6:65536',
+            'x-tcp-fingerprint' => '64240:128:1:mss,nop,ws,nop,nop,sok:df:0'
+        ];
+
+        for ($i = 1; $i <= 10; $i++) {
+            $context = $this->createRequestContext([
+                'clientIp' => "185.15.20.{$i}",
+                'headers' => array_merge($ps4Headers, [
+                    'cookie_keys' => "session_id=fake_sess_{$i}"
+                ])
+            ]);
+
+            $currentHash = RequestUtils::getCompositeDeviceHash($context);
+            $stableFp = RequestUtils::extractStablePart($currentHash);
+            $stableFpHash = FingerprintBuilder::cyrb53($stableFp);
+            
+            $score = RequestUtils::getBotnetClusterScore($context, $stableFpHash);
+
+            if ($i === 1) {
+                $this->assertEquals(0.0, $score['botnetClusterScore']);
+            } elseif ($i === 2) {
+                $this->assertEquals(29.5, $score['botnetClusterScore']);
+            } elseif ($i === 3) {
+                $this->assertEquals(50.3, $score['botnetClusterScore']);
+            } elseif ($i === 4) {
+                $this->assertEquals(65.0, $score['botnetClusterScore']);
+            } elseif ($i === 5) {
+                $this->assertEquals(75.3, $score['botnetClusterScore']);
+            } elseif ($i === 10) {
+                $this->assertEquals(95.7, $score['botnetClusterScore']);
+            }
+        }
+    }
 }