{"report_id":"0116d2df-2a98-4e4f-9c99-cb5bd3e04aa9","version":0,"status":"done","tags":["netflix","phishing"],"date":"2026-08-14T00:32:34Z","url":{"schema":"http","addr":"registrer-user.com/pages/vbv.php","fqdn":"registrer-user.com","domain":"registrer-user.com","tld":"com"},"ip":{"addr":"45.74.61.12","port":0,"asn":9009,"as":"M247 Europe SRL","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"registrer-user.com/pages/vbv.php","fqdn":"registrer-user.com","domain":"registrer-user.com","tld":"com"},"title":"Netflix","dom":{"size":500,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"658e56375669a1714be528c445cb73cb","sha1":"647ef9cbfd5bcbcd2d4329c1c334e890352aa0a2","sha256":"d4b9a60a6e2a2bf49af96d5e8c1ed16c9e1cd76d0508f6cebb9b08551c13054b","sha512":"c6ba50b6b2fe6d8d947ed625bb6b542bfcf7cd59df74e7694051ff6df245f47a79f87e9f34675b7979ad0ee0bb771bf890bbb877d2281f8db73645c2ddb1b7bf","ssdeep":"","tlshash":"4df09ee780d9041d111281112c91b1058cfb981f229bad50fc96502d6f58b9a84e78cc","dom_hash":"domhash810ae5f4cd8f5cce92151e5407a09ad3","first_seen":"2026-08-14T00:32:34.603904Z","last_seen":"2026-08-14T00:32:34.603904Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"registrer-user.com/pages/vbv.php","fqdn":"registrer-user.com","domain":"registrer-user.com","tld":"com"},"ip":{"addr":"45.74.61.12","port":0,"asn":9009,"as":"M247 Europe SRL","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-18T00:32:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-14","alert":"Phishing Block","trigger":"registrer-user.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"registrer-user.com","ip":{"addr":"45.74.61.12","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Canada","country_code":"CA"},"domain_registered":"2026-07-17","domain_rank":0,"first_seen":"2026-08-14T00:22:04.666695Z","last_seen":"2026-08-14T00:22:04.666695Z","alert_count":14,"request_count":2,"received_data":11112,"sent_data":1071,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":12821,"sent_data":549,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"registrer-user.com/pages/vbv.php","fqdn":"registrer-user.com","domain":"registrer-user.com","tld":"com"},"ip":{"addr":"45.74.61.12","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-14T00:32:07.237Z","timestamp":1786667527237,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"registrer-user.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 13:03:43 GMT","end":"Mon, 09 Nov 2026 13:03:42 GMT"},"fingerprint":{"sha1":"E6:C8:F1:4D:85:A6:B1:37:E2:BB:00:58:4B:4E:3C:98:D9:9D:01:1B","sha256":"49:34:A0:9C:4B:84:B5:AF:26:FB:41:1C:E4:80:60:6A:1C:32:F8:47:91:B4:D8:2C:E2:75:2D:BB:C9:A4:0F:31"}}},"request":{"raw":"GET /pages/vbv.php HTTP/1.1\r\nHost: registrer-user.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 14 Aug 2026 00:32:02 GMT\r\nServer: Apache\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: PHPSESSID=najsal2s7h9nmbbqmu20ll7r3i; path=/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nX-Powered-By: PHP/8.3.33, PleskLin\r\nContent-Length: 368\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":509,"size_decoded":808,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"65daaf677f8c003c7d703910aaee4802","sha1":"00a0a9a4597b7f132e6763056850552df715f945","sha256":"e0605eb78925144c606c52b392d28b7c07641878024aafca05c283ba8dffef20","sha512":"8a696a7c50c671bd8c74c023ac0289b03253996e52d0bd7574847828af4a99eb33fd2d5af7e7d976b598d17ee0ae3bfcf826d1b03b919035a8d610d2612c9a5e","ssdeep":"","tlshash":"00f00ee78089081d103112213c50b549defb581f328b2d20fc96302f3fb8798c8e798c","first_seen":"2026-08-14T00:32:34.607207Z","last_seen":"2026-08-14T00:32:34.607207Z","times_seen":1,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":31,"connect":28,"send":0,"wait":96,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-14","alert":"Phishing Block","trigger":"registrer-user.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://registrer-user.com/pages/vbv.php","date":"2026-08-14T00:32:07.936Z","timestamp":1786667527936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://registrer-user.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 14 Aug 2026 00:32:08 GMT\r\ndate: Fri, 14 Aug 2026 00:32:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12137,"size_decoded":2425,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"7fbc57b14bea8d6561fdb50fc9c3008c","sha1":"9c9ed86aaf4ca655f083c9c80db324d053d3dd11","sha256":"d90d7d2947e295cba230edef392df55e276c2f3c87e04908d093aeb005da805a","sha512":"d70400de88d9d540ba4e871b2c2c4b997f81bdf1765150d65c2ab18a959c9efa4f910735b3873d43e1eabc646c078533972106c111a4838357f866b44cf57c40","ssdeep":"192:+foOfcfLf9L5fMfgqvfZbqGIwV49fOnf+ofjCXXS2asrqAnbqGIwV4uxzBY:+QOkTltULv1qY49GnDu6SqY47","tlshash":"9f420c910417144096835dd233de7e34ee0fa6616044c0baabfd9bdbeecad69a3b435c","first_seen":"2025-09-17T08:42:41.023406Z","last_seen":"2026-08-14T03:09:04.552345Z","times_seen":7540,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":3,"connect":36,"send":0,"wait":78,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"registrer-user.com/img/fav.ico","fqdn":"registrer-user.com","domain":"registrer-user.com","tld":"com"},"ip":{"addr":"45.74.61.12","port":443,"asn":9009,"as":"M247 Europe SRL","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://registrer-user.com/pages/vbv.php","date":"2026-08-14T00:32:08.044Z","timestamp":1786667528044,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"registrer-user.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 13:03:43 GMT","end":"Mon, 09 Nov 2026 13:03:42 GMT"},"fingerprint":{"sha1":"E6:C8:F1:4D:85:A6:B1:37:E2:BB:00:58:4B:4E:3C:98:D9:9D:01:1B","sha256":"49:34:A0:9C:4B:84:B5:AF:26:FB:41:1C:E4:80:60:6A:1C:32:F8:47:91:B4:D8:2C:E2:75:2D:BB:C9:A4:0F:31"}}},"request":{"raw":"GET /img/fav.ico HTTP/1.1\r\nHost: registrer-user.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://registrer-user.com/pages/vbv.php\r\nCookie: PHPSESSID=najsal2s7h9nmbbqmu20ll7r3i\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 14 Aug 2026 00:32:03 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 24 Dec 2024 17:12:38 GMT\r\nETag: \"267e-62a07384d6d80\"\r\nAccept-Ranges: bytes\r\nContent-Length: 9854\r\nX-Powered-By: PleskLin\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9854,"size_decoded":10163,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"58f54d9ea15176671802bebeee4da4cb","sha1":"4ba1cb97814772435962f3ac25af0def81851735","sha256":"9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3","sha512":"32e6c1ac6220b03bafb9215e4db4cf91352573c34a82accc893b4c7d4d3194d495e241c2f814372930a988688492926fe1d9a5576d2e46378c9f6d1e927c71db","ssdeep":"48:5uZhmwr2VEbaA+8H3J7HZqH0S/DHDHp8HfH5gAaqHwMqHBVqH/6BqHAtvqHAAcqK:shm0AN6YHEOFtwVPmyqPmorAtAco","tlshash":"8a12a02710c35d6cfe016eb8d297ec3a517d40ddeefe82e79a81bd390612146a5cb8e4","first_seen":"2023-09-08T13:51:14Z","last_seen":"2026-08-14T00:32:34.611877Z","times_seen":2179,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-14","alert":"Phishing Block","trigger":"registrer-user.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-14","alert":"Sinkholed","trigger":"registrer-user.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}