{"report_id":"1c50c867-2878-4950-a82b-73a51e0b6018","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-04-18T17:55:15Z","url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"title":"Netflix - Watch TV Shows Online, Watch Movies Online","dom":{"size":3309,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1d44eefd1f06fe53597244c9bfedcadd","sha1":"8da0dcdff94c6a2a4ee3d482ca1121965b7a3bad","sha256":"6670c326899d571f2fc73f077e25beb506d0d9b1d1f7bcf9e650075ab7274860","sha512":"a5016b6f293ccaf6530dbabe55db19d3ca7de37a2bfe3872fee13a08ef0bfc541f982a0231d8abccd5241a790eb0255481ad871a25ece689da942b78eae8f532","ssdeep":"","tlshash":"9f61783670f91057079296663e65ab3a2e93805bcb4e2e0530ac1a8e5fe2e06cd5725f","dom_hash":"domhashedfc5dbdb930ec0e2fae9d47e21e6a5f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T17:55:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"netflix-clone-taupe-beta.vercel.app","ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-15T18:22:12.0398Z","last_seen":"2026-04-15T18:22:15.328051Z","alert_count":40,"request_count":8,"received_data":933571,"sent_data":3861,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"pro.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":56192,"first_seen":"2018-03-17T18:03:41Z","last_seen":"2026-04-16T05:39:58.847414Z","alert_count":0,"request_count":2,"received_data":280567,"sent_data":1078,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/favicon.ico","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-taupe-beta.vercel.app/","date":"2026-04-18T17:54:52.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: netflix-clone-taupe-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-taupe-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 18 Apr 2026 17:54:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::2bnjf-1776534892804-452e7b550003\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"f1d3b4dd662f66414fc2ae76c266984c","sha1":"28da7b7697311ccad075f16ff0bda118c7619260","sha256":"e928a5cc7caf6bc85522c7038ad2bd073472bd6b8f923cef2daca593bf01c02b","sha512":"d32d0ed073d1abc82431b072214a600eb13a04954b73cd653b20cae2044d9f18c1813b0f4d0cd4a353ce6adc2c99d7c5fa4400dfc4f710aaa94e634c3da62a80","ssdeep":"","tlshash":"44a0118f088a0c0a32e2002020a20a3c2828023aeeaae28020882208202838fa3820c0","first_seen":"2026-04-18T17:55:16.548246Z","last_seen":"2026-04-18T17:55:16.548246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/background.jpg","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-taupe-beta.vercel.app/","date":"2026-04-18T17:54:52.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /background.jpg HTTP/1.1\r\nHost: netflix-clone-taupe-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-taupe-beta.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 257581\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"background.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sat, 18 Apr 2026 17:54:52 GMT\r\netag: W/\"e80af08a4fc42043410733f64494a8094c202e1f8cf1fc2edfd39f40cf4124bd\"\r\nlast-modified: Wed, 15 Apr 2026 18:21:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2bnjf-1776534892842-2997a0a685c3\r\ncontent-length: 370628\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":370628,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"d8b13636d1a7a07cf81d61fec3440bdd","sha1":"8436724dddbbc9c2040305a327345a4d20e0cda9","sha256":"e80af08a4fc42043410733f64494a8094c202e1f8cf1fc2edfd39f40cf4124bd","sha512":"59693baf597e0cc7076e393b06a54660d02c82718239a20758dedcdbd3b5baa18bec98ec6d5655d11da94bdaf650889c2e55396700522a71a185d65b667160d3","ssdeep":"6144:qEM+NZeW+e9b5wAh9xTF3fgUAfHJpdPFYi9Y0j51CgASIMUTlIrT4+:UK+zAbxTF3AfPNFYDAPUSIMUTi3h","tlshash":"617423a95510fb6b7a7fce12c0f712adb2379ab7580c09f359688e3104167f0ac956bc","first_seen":"2023-05-01T10:12:37Z","last_seen":"2026-07-24T05:09:42.373931Z","times_seen":1466,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.10.0/webfonts/fa-solid-900.woff2","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://netflix-clone-taupe-beta.vercel.app/","date":"2026-04-18T17:54:52.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v5.10.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://netflix-clone-taupe-beta.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pro.fontawesome.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 17:54:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 123004\r\ncf-ray: 9ee589885c29568d-OSL\r\nx-amz-id-2: Mz6lCSx1P7x6ZBvAyYuGg3AsWUgp5kxUEIJuTng+bxnYXn6fUqtw+RFSNVDDt948JvYHhM0spZpR4jQXoC2qtw==\r\nx-amz-request-id: RGBBHFRAYZXZCX06\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 28 Jun 2021 16:56:06 GMT\r\netag: \"88fd444847dc842d15e229df26571b03\"\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":123004,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 123004, version 330.15728","md5":"88fd444847dc842d15e229df26571b03","sha1":"bde84da4343e573a148af56adde21bddf74bb2a6","sha256":"d27aa8bf9677cf4ef12acd7b37afc20f1f661d7c163b929ae9caf103b01fce37","sha512":"67dd35c66b7d0fc76b7357f9b5ba4a29ef23760692bc0461ba379a9386cfb8be92f7f985e94ee235e676a3c45089c4d8246db9d880c1d211fbd82a14bfed434a","ssdeep":"3072:NzZ5hwRAQ0spQKAAOQf1QJHG6mJB1zelomIlPkt+:NzfhwQsWKAAhf0H9mJaonPkI","tlshash":"7cc312df8d4f598a45c0faed3ed7e08f0352b16c552e8cd1caa2834142b4fb92a73562","first_seen":"2023-04-13T01:50:10Z","last_seen":"2026-07-24T06:03:33.423915Z","times_seen":3761,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T17:54:52.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: netflix-clone-taupe-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 261476\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 18 Apr 2026 17:54:52 GMT\r\netag: W/\"07531a14e154e240489654707d0cf4f2d2d6d8c4497e58ef62477d7b492d462c\"\r\nlast-modified: Wed, 15 Apr 2026 17:16:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fwh8k-1776534892469-9ce7f2fa42a0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3507,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9eb9d679bd37a0f7a39af94b2a295e19","sha1":"f828464bdfd7ad74d399719d4cdda1224614026b","sha256":"07531a14e154e240489654707d0cf4f2d2d6d8c4497e58ef62477d7b492d462c","sha512":"209adc8a189636bb46f9057c9429494b99aa45b0dbb1a5e77da4fd37bfb90e34e9c4f228f915c343859e27fb2b428ec74ebb59655d39bd70c1e831db0d033dcf","ssdeep":"","tlshash":"f471693671c4241703b292592e66bb3ded93c197974a1e4530ae2a8f5ff3e06cc4725b","first_seen":"2026-04-15T12:33:31.840898Z","last_seen":"2026-04-18T17:55:16.550857Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":34,"dns":10,"connect":1,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/logo.png","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-taupe-beta.vercel.app/","date":"2026-04-18T17:54:52.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: netflix-clone-taupe-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-taupe-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 257582\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Sat, 18 Apr 2026 17:54:52 GMT\r\netag: W/\"caf69067b53f840529b7cc3a2494e90878dc9f62307fc458dd893fac746d37a0\"\r\nlast-modified: Wed, 15 Apr 2026 18:21:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qfstq-1776534892680-5af6aae7a149\r\ncontent-length: 6332\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6332,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 329 x 88, 8-bit/color RGBA, non-interlaced","md5":"d0a2b09e321dd08f0e234bf352f166ed","sha1":"6143b3ee04ab74fb32f9988010c7337a2bedaff6","sha256":"caf69067b53f840529b7cc3a2494e90878dc9f62307fc458dd893fac746d37a0","sha512":"521d672475a47fb02c0e91694598888420dab8e121e4d58bfa386c1e98d0dcdc24ea44a88543b7410565d366e32c76cc2e8570917ff0cab8fdd4ce0d997ce53d","ssdeep":"96:y2SDZ/I09Da01l+gmkyTt6Hk8nToGgHXtNw+TVv2hqpkoZH1fm:y2SDS0tKg9E05ToGgX1VvKGkOe","tlshash":"d7d19eab5370d0efa29df11259dd754e9324735c4b933fb424c190df24a2da2b7064ba","first_seen":"2023-05-01T10:12:37Z","last_seen":"2026-07-24T05:09:42.388123Z","times_seen":2548,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/tab-content-3.png","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-taupe-beta.vercel.app/","date":"2026-04-18T17:54:52.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /tab-content-3.png HTTP/1.1\r\nHost: netflix-clone-taupe-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-taupe-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 257582\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tab-content-3.png\"\r\ncontent-type: image/png\r\ndate: Sat, 18 Apr 2026 17:54:52 GMT\r\netag: W/\"fcb40d090bcfa2ef6b71c945cc84cb6c339b8b5b053df9e7d759961257dd9b8d\"\r\nlast-modified: Wed, 15 Apr 2026 18:21:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2bnjf-1776534892682-e58740c93d65\r\ncontent-length: 174061\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":174061,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 552 x 338, 8-bit/color RGBA, non-interlaced","md5":"66c7c1fb5b71b2deaff929bbcd3bacf7","sha1":"4d6e4c50c47c0f8e33a5205177372281a2803bcc","sha256":"fcb40d090bcfa2ef6b71c945cc84cb6c339b8b5b053df9e7d759961257dd9b8d","sha512":"d094bd5269200b0af6824d326a3dee90506b29aa638b9faf9834590f696558160e97fa607123932862a633d96ab3cd5bf1cf5e6bc0ffa0e79dba9078295df986","ssdeep":"3072:3W4UBWlVtiJCB/A8vxcZIPfxl4S0YhHF3JofjPmQlJYM87bgV:TUBWliJCB/IZILIMFZo7PmQYI","tlshash":"da0412758347ab2a25ddd2ac332f113c076664c80619f2e15eee423c8965ee35e6b6c3","first_seen":"2023-05-01T10:12:37Z","last_seen":"2026-07-24T05:09:42.37189Z","times_seen":1464,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"pro.fontawesome.com/releases/v5.10.0/css/all.css","fqdn":"pro.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-clone-taupe-beta.vercel.app/","date":"2026-04-18T17:54:52.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Apr 2026 21:57:31 GMT","end":"Wed, 15 Jul 2026 22:57:28 GMT"},"fingerprint":{"sha1":"AF:65:F8:6C:70:82:CB:7C:3C:AD:4D:54:65:50:3B:13:F0:3A:0B:2E","sha256":"2A:78:5B:B0:CC:FA:C9:8B:51:86:B1:FA:62:ED:C7:B8:BC:18:15:3D:91:FC:87:53:9E:E0:AF:8C:08:D1:17:2F"}}},"request":{"raw":"GET /releases/v5.10.0/css/all.css HTTP/1.1\r\nHost: pro.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://netflix-clone-taupe-beta.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-taupe-beta.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 17:54:52 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\nx-amz-id-2: a5FGHJ0fF5E0jnz+MoTyUP8LryeTjcxgOi5y7d6l/u64XWuSzZKoe2FUZf+kNyys/0k4E1J5mt+4VtoqLpA807/MY/Lx8U+z\r\nx-amz-request-id: 3905ZJZX0M7A5Y0C\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding\r\nlast-modified: Mon, 28 Jun 2021 16:54:32 GMT\r\netag: W/\"aa1272633e7e552395d147a499bad186\"\r\ncache-control: max-age=31556926\r\nage: 364525\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9ee589878b3b568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156228,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65393)","md5":"aa1272633e7e552395d147a499bad186","sha1":"ddbccb0011dd4868a013b1dcbdb836b7213eb41d","sha256":"2af905d92cfd34b5413126a54f639da408166cbbcb54318e413ad5e10b5bf6ec","sha512":"886ddfc7252269b42b0adfd5f4e47da0cd6ccb9b0b3ea18c015b1e4edb1eb1f55cf49728fdcdd151949256851c72cc555cd7f6408a5638595f26d0caf86ffbdc","ssdeep":"1536:KgvcfQ4aNi7HHQZD0bMSPCDTdV3dWGFIiboA+8Ieiy6BauXZG817fgFSkAmYdAT/:DcI4aY7QN0bjPerGuHuXkz","tlshash":"bae371b5d41d01da7726c60fab01b27a98f6f738d5810e4ae0cb4c5e1de2b9811c9bed","first_seen":"2023-04-05T22:29:58Z","last_seen":"2026-07-24T06:34:27.509518Z","times_seen":5362,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":48,"dns":14,"connect":1,"send":0,"wait":20,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/style.css","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-clone-taupe-beta.vercel.app/","date":"2026-04-18T17:54:52.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: netflix-clone-taupe-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-taupe-beta.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 257582\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 18 Apr 2026 17:54:52 GMT\r\netag: W/\"686402ab43a083688a6117957e9b745503b214e50cb192ae4e1657b74a55d0b0\"\r\nlast-modified: Wed, 15 Apr 2026 18:21:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fwh8k-1776534892679-54adaa94a93d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4512,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"0d0c62f1c7710e5501b4e280ccb1f169","sha1":"75aa453b1d3079d9550c5edfb0f6c40f1418b322","sha256":"686402ab43a083688a6117957e9b745503b214e50cb192ae4e1657b74a55d0b0","sha512":"7b9b2199342b20fc006f77c2884e9d4d6ce8002999210ecc12812ab85274a05569944f857102355bb99e55a15e0a3f51b2dd95da5eee182cf77bbec98891a79c","ssdeep":"96:N8M5kbBta6Wd2syZI3TYBgW3TMCvuDQZTFYmMA+EPROU:NfwIkgDCVZTb+EZ1","tlshash":"fa91739c551660009273efb17f216f04ead0c422c707417abbe17659e6c593527b6fcd","first_seen":"2026-04-15T12:33:31.817963Z","last_seen":"2026-04-18T17:55:16.553379Z","times_seen":3,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/tab-content-1.png","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-taupe-beta.vercel.app/","date":"2026-04-18T17:54:52.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /tab-content-1.png HTTP/1.1\r\nHost: netflix-clone-taupe-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-taupe-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 257582\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tab-content-1.png\"\r\ncontent-type: image/png\r\ndate: Sat, 18 Apr 2026 17:54:52 GMT\r\netag: W/\"103646e75938c72c1e14b79899b6a6ae8050f255a35fefadae283e55b2b48127\"\r\nlast-modified: Wed, 15 Apr 2026 18:21:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ts55r-1776534892680-da8a0b959817\r\ncontent-length: 247810\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":247810,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 561 x 379, 8-bit/color RGBA, non-interlaced","md5":"9f91203b7c374a590dd727c323d5b6dc","sha1":"1722aec488116174a145c28a2b15ebaf25efc624","sha256":"103646e75938c72c1e14b79899b6a6ae8050f255a35fefadae283e55b2b48127","sha512":"20bab7fc863e9342b0338568825ff84a1adcbc90cc064a32da735ef5f522235456ab4ac4bed4f6ae2d5dde4f010aee3b207c04e7053fff5730912820351d5791","ssdeep":"6144:toke5CFfjRvbNu2YER0bQwlpsttsFOathl7V6NW:8efdYC09MzsFjhl7ENW","tlshash":"3a342341dfc9a60b65d95a887a895de70bc4dd8d87611a0e0b1ab8473073edb8df4cf0","first_seen":"2023-05-01T10:12:37Z","last_seen":"2026-07-24T05:09:42.390047Z","times_seen":1538,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-taupe-beta.vercel.app/tab-content-2.png","fqdn":"netflix-clone-taupe-beta.vercel.app","domain":"netflix-clone-taupe-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-taupe-beta.vercel.app/","date":"2026-04-18T17:54:52.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /tab-content-2.png HTTP/1.1\r\nHost: netflix-clone-taupe-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-taupe-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 257582\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tab-content-2.png\"\r\ncontent-type: image/png\r\ndate: Sat, 18 Apr 2026 17:54:52 GMT\r\netag: W/\"55bc0f00df3c8622dc3ea9146aadf47791ea0730f1a98f452f4843366bc894b9\"\r\nlast-modified: Wed, 15 Apr 2026 18:21:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xngx7-1776534892681-aad5fda3000e\r\ncontent-length: 122232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":122232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 488 x 312, 8-bit/color RGBA, non-interlaced","md5":"dc986d819c053deb6180a34320af2988","sha1":"765ee335e7352875da8a1fd091952813cb58bad3","sha256":"55bc0f00df3c8622dc3ea9146aadf47791ea0730f1a98f452f4843366bc894b9","sha512":"8c55b17c5e364af238904a8ecd96caca6cf5db01dfb11d4be88458944a48013031a920cf3618f134b0dd791d4e24951cf7866537b25d821704a04b5aba3b3848","ssdeep":"3072:u83CDl9v+sNZ+flj4HNeGwmRNCyI5p95Gue:u/jvNvue","tlshash":"33c3120db0dd2dd047c2f20e2bf4cd1ed57a3719a8b04a32196acdda70b6ce6096274b","first_seen":"2023-05-01T10:12:37Z","last_seen":"2026-07-24T05:09:42.39088Z","times_seen":1478,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-18","alert":"Phishing Block","trigger":"netflix-clone-taupe-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}