{"report_id":"1f143968-887b-429b-8db2-c1726011ff6e","version":6,"status":"done","tags":["netflix","phishing"],"date":"2025-06-06T07:07:09Z","url":{"schema":"http","addr":"mariasiion.ro/pet/","fqdn":"mariasiion.ro","domain":"mariasiion.ro","tld":"ro"},"ip":{"addr":"85.9.63.110","port":0,"asn":5606,"as":"GTS Telecom SRL","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"title":"Netflix"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-15T07:07:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"prasn.xyz","ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":12,"received_data":449509,"sent_data":6996,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-06-04T15:19:13.33839Z","alert_count":0,"request_count":2,"received_data":295798,"sent_data":892,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mariasiion.ro","ip":{"addr":"85.9.63.110","port":443,"asn":5606,"as":"GTS Telecom SRL","country":"Romania","country_code":"RO"},"domain_registered":"2013-04-02","domain_rank":0,"first_seen":"2025-06-06T07:07:09.837494Z","last_seen":"2025-06-06T07:07:09.837494Z","alert_count":0,"request_count":1,"received_data":6424,"sent_data":486,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f63dfbdcc649f13af4791a90e51f7907","sha1":"b3cacef9fccfa42aaebd61f046f2123eca598973","sha256":"60c6bec0033a424572cfdf7da1d5fb94f4719286006a7f2cb9e76ee24d99babf","sha512":"596f3f8f19042ded820221382ef41fc26d6b6a3392f0f1dab020b1fa49c71b48011edf045f14ba4fab494531ae0d056796eb80bccc561788fc48d14329c78b16","ssdeep":"768:QkN++EvGHWyOOY/JaAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7w:QpxY+t/Nhh+1d76KV2O9Ed","tlshash":"6f43b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","size":60577,"data":"","first_seen":"2023-09-22T01:14:35Z","last_seen":"2026-04-16T18:35:08.045155Z","times_seen":1747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/css/master.css","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","date":"2025-06-06T07:06:48.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/app/assets/css/master.css HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=eksf4791s2c0kjm5qe5g1vsgu3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:48 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 12 Sep 2024 14:59:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66e301e4-11c0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4544,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"83a1d18c0b59c36c7093ca48bc6dd759","sha1":"44e2eeca400165e116cccdd02e5bbc233dddec0d","sha256":"167cb65a8f638f105f7332df0ed13075581e9db333340f173f257649ce72ced0","sha512":"aaf7e838fd7d5dd784eedba30c3c50f26fe94a6ab52805fc1bb538f09567248b691bde695da1196a53ea46468a429361d1342e6929db5a7573ddbd1cd57cbf09","ssdeep":"48:uO8NNP3mDAgzm6KdEtpOabEVd+bw3Ad88T7qstluqw4liBTFPLH5vfZVFQ5XhSd9:r+LGOtd+M38NluV4QThLZvkdd5T2lTd","tlshash":"a8919a2ae285204772375b38b363573aee3e00a79201467d7bec36a86ff50954561fcc","first_seen":"2024-06-09T17:44:11Z","last_seen":"2026-03-28T14:02:55.102194Z","times_seen":53,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/fonts/Regular.woff2","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","date":"2025-06-06T07:06:48.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/app/assets/fonts/Regular.woff2 HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/css/master.css\r\nCookie: PHPSESSID=eksf4791s2c0kjm5qe5g1vsgu3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53304\r\nlast-modified: Thu, 12 Sep 2024 15:00:22 GMT\r\nvary: Accept-Encoding\r\netag: \"66e30206-d038\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53304,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 53304, version 2.6554","md5":"0bf3177f1fed6d953178221fba43c7e8","sha1":"83d9f039f1ba7209321c7da72d3dc6a9aa5e2ab3","sha256":"c0bceb927c506dce9f6e6f5f570e641ad580b9554be06f61508a4aee32380167","sha512":"76ebfc377313354b469aca9695cdc28bb76e8ff015156d0f2ddbb45c763d4822808014e8e742ba3dfa447981bbdd2b7603e852c77b78aa52ff8de452094ecf0c","ssdeep":"1536:t21aKxDJpWmqPuw/L5muh28j0JPVMib83e50+kPmb:t20uonjYm20MVM28uDIQ","tlshash":"d83301020c97d667910cca53e475a6bfbcc0c7c09a68d0d91a3ddb779b4b0ca8c9ea06","first_seen":"2023-05-02T12:35:36Z","last_seen":"2026-04-16T21:04:17.072546Z","times_seen":2297,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":549,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/images/favicon.ico","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","date":"2025-06-06T07:06:48.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/app/assets/images/favicon.ico HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=eksf4791s2c0kjm5qe5g1vsgu3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1717,"data":"e=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\u0026cri=3HvGNq2tEX\u0026sf=0\u0026dc=\u0026cp=10\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=10018\u0026mo=0\u0026pn=12567\u0026spn=2548\u0026fp=1304\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:48 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 9854\r\nlast-modified: Thu, 12 Sep 2024 15:01:16 GMT\r\nvary: Accept-Encoding\r\netag: \"66e3023c-267e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9854,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"58f54d9ea15176671802bebeee4da4cb","sha1":"4ba1cb97814772435962f3ac25af0def81851735","sha256":"9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3","sha512":"32e6c1ac6220b03bafb9215e4db4cf91352573c34a82accc893b4c7d4d3194d495e241c2f814372930a988688492926fe1d9a5576d2e46378c9f6d1e927c71db","ssdeep":"48:5uZhmwr2VEbaA+8H3J7HZqH0S/DHDHp8HfH5gAaqHwMqHBVqH/6BqHAtvqHAAcqK:shm0AN6YHEOFtwVPmyqPmorAtAco","tlshash":"8a12a02710c35d6cfe016eb8d297ec3a517d40ddeefe82e79a81bd390612146a5cb8e4","first_seen":"2023-09-08T13:51:14Z","last_seen":"2026-04-16T21:04:16.995582Z","times_seen":1921,"resource_available":false,"data":null}},"time_used":418,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":417,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-06T07:06:46.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404 HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:46 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: http://prasn.xyz/wp-staline/clickup/Netflix-login404/\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-permitted-cross-domain-policies: master-only, master-only\r\nreferrer-policy: same-origin, same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":5963,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":915,"timings":{"blocked":387,"dns":94,"connect":139,"send":0,"wait":139,"receive":0,"ssl":151},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/images/footerlng.png","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","date":"2025-06-06T07:06:48.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/app/assets/images/footerlng.png HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=eksf4791s2c0kjm5qe5g1vsgu3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Sep 2024 15:01:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66e3023a-38c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":908,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 26, 8-bit/color RGBA, non-interlaced","md5":"b2b0e0703abf5c18f39c31e3dae89ea0","sha1":"f5a15245897bad26dea701b6a61cdfffee23d80b","sha256":"5c1a6a1b15581ec115e4871306aeb835b869eabcd52584df2565747a3d5dc8e4","sha512":"fb8385f4a4fea0d97a965fd0e127d4b4292751bf4f0b56d1adc87109b20d6fdfc3cb34f91348110b1013166670e7c31cf5f6ba1faf9ee1f5cd9d96745303fcf8","ssdeep":"","tlshash":"1a11b7f8f71ca4a1f9438d609b4b7d057f5a08fc9bc08c900080c25e2831ac03249ab3","first_seen":"2024-06-09T17:44:11Z","last_seen":"2026-03-24T13:45:46.554846Z","times_seen":51,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/fonts/Medium.woff2","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","date":"2025-06-06T07:06:48.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/app/assets/fonts/Medium.woff2 HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/css/master.css\r\nCookie: PHPSESSID=eksf4791s2c0kjm5qe5g1vsgu3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:48 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 53940\r\nlast-modified: Thu, 12 Sep 2024 15:00:22 GMT\r\nvary: Accept-Encoding\r\netag: \"66e30206-d2b4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53940,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 53940, version 2.6554","md5":"ea769921b0cfa4fc6d4d1a2e0b1fa5ff","sha1":"34dcd2875c9752ebba6f894eb8d410e4958cc1b4","sha256":"9ac2bd03fcde501b3f30f47ab1fae62161f87808ea6411f38e8feaa4bbddc42e","sha512":"f0ee2f0c81a8253783306602b3d430be4ff2a33e075ab77cce6834d5a6452f2c64e7d395aa98b92d694d53ffc8da2bf5226528faf62de3a687911dfc279c39cb","ssdeep":"1536:cQYyppexSSgX9x6olOQ26mZJ/F6EIHhFsgHFkW/:cjw9X9/Yplg5HhrlkW/","tlshash":"7633f1039fcf714a08b7be7facca496b6059cdb7986a025fde3f498490117025a41e37","first_seen":"2023-05-02T12:35:36Z","last_seen":"2026-04-16T21:04:17.056413Z","times_seen":2159,"resource_available":false,"data":null}},"time_used":685,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":546,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-06T07:06:47.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/ HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca\r\nset-cookie: PHPSESSID=eksf4791s2c0kjm5qe5g1vsgu3; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-permitted-cross-domain-policies: master-only, master-only\r\nreferrer-policy: same-origin, same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":5963,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":894,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":894,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/images/footerrow.png","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","date":"2025-06-06T07:06:48.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/app/assets/images/footerrow.png HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=eksf4791s2c0kjm5qe5g1vsgu3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":470,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en\",null,null,null,null,[4,0]]],1112,[[\"1749193587289\",null,null,null,null,null,null,\"[\\\"Q5Zj-V9t8eo7Ci1t7SdWpvtig6PkIJrsPchZnnTOyMA\\\",12,0,null,\\\"276209995828-m7u106i2frlhe6cs28d71pobskbi745e.apps.googleusercontent.com\\\",\\\"https://www.aftermarket.pl\\\",[],null,null,null,null,null,null,34,null,null,null,[2,1,1,225,2,2,1]]\",null,null,12,null,null,null,0,null,null,null,null,null,1]],\"1749193597291\"]"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Sep 2024 15:01:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66e3023a-181\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":385,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 20, 8-bit/color RGBA, non-interlaced","md5":"db93e87eda2024ee430b4772c0a55796","sha1":"060ee435231441e9077e00cbf3d7500f911295c0","sha256":"eb35fe195b91eeaeb63fd5768075e279b8783c80b41d43293fd8a6f465220d9f","sha512":"a0d2093ca3ece271743d12929dc5073cd977170de08bda353beb958251443acc39a72696b9e916bf54dc93add5d6bb908b75da317519ac2c64ea7c80078ffae8","ssdeep":"","tlshash":"c0e0f8fb4e930c9cc24e4832cbd370006cf910c815d8e08824d2166d2a28ac2a3e2f62","first_seen":"2024-06-09T17:44:11Z","last_seen":"2026-03-24T13:45:46.556899Z","times_seen":51,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","date":"2025-06-06T07:06:48.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://prasn.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Jun 2025 07:06:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15859\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"eca1-s8rO+fzPpCquvWHwRvISPspZiXM\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230163-FRA, cache-lga21974-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 2087962\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yDkWHtQ9pc0hfmiZj12k4cqZv10hHx0vcoIMB28dmjc%2BU1OcHkGbTSW9OjZ%2Bw7f7lSvXHOZ8zD8Xp6IO1gvev7TfQrTaFQJRNkeEMQ2LL2DZm0RJ%2FhiGJViqHkr6nT38NXw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 94b611b4cbc11bfe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60298)","md5":"f63dfbdcc649f13af4791a90e51f7907","sha1":"b3cacef9fccfa42aaebd61f046f2123eca598973","sha256":"60c6bec0033a424572cfdf7da1d5fb94f4719286006a7f2cb9e76ee24d99babf","sha512":"596f3f8f19042ded820221382ef41fc26d6b6a3392f0f1dab020b1fa49c71b48011edf045f14ba4fab494531ae0d056796eb80bccc561788fc48d14329c78b16","ssdeep":"768:QkN++EvGHWyOOY/JaAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7w:QpxY+t/Nhh+1d76KV2O9Ed","tlshash":"6f43b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","first_seen":"2023-09-22T01:14:35Z","last_seen":"2026-04-16T18:35:08.045155Z","times_seen":1747,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":10,"receive":2,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","date":"2025-06-06T07:06:48.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://prasn.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2524,"data":"e=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\u0026cri=3HvGNq2tEX\u0026sf=0\u0026dc=Jy8rMyNUMyQkfiQzJCQzJFV4Y3p6MyRVJy4gMyRVJSIkIzMkVSQkIyMzJFUkJSQuMyRVJCQnITMkVSQlJCEzJFUkJCYlMyRVJjMkVSYzJFUkJS4vMyRVJCUuLzMjUjAlJyszIVQzJCRhMyQkMyVXJyEkMyRVMyQkfjMkJDMlVyIkMyRVMyQkdEkzJCQzJVcnLjMhUjAhJyszIVQzJCR%2FeHUzJCQzJVcnMyRVMyQkdEkzJCQzJVcmMyFSMCciJyszIVQzJCRlMyQkMyVXJzMkVTMkJHRJMyQkMyVXJjMhUjAnIy8rMyFUMyQkcyYzJCQzJVczJCRlOHFzYlR3YmJzZG8zJCZ%2FZTMkJnh5YjMkJnczJCZwY3h1Yn95eDMkJDMkVTMkJHRJMyQkMyVXJjMhUjAlJCArMyNUMyFUMyQkdDMkJDMlVyYzJFUzJCRlMyQkMyVXMyQkJzMkJDMhUjMkVTMhVDMkJHQzJCQzJVcmMyRVMyQkZTMkJDMlVzMkJCczJCQzIVIzI1IwIyQmKzMhVDMkJGYzJCQzJVczJCRaf3hjbjMkJm4uIEkgIjMkJDMkVTMkJHozJCQzJVczI1QzJCRzeDtDRTMkJDMkVTMkJHN4MyQkMyNSMyRVMyQkfnUzJCQzJVciLjMkVTMkJHRJMyQkMyVXJy4zIVIwLiEiKzMhVDMkJGUzJCQzJVcmMyRVMyQkczMkJDMlVzMkJEZjdHp%2FdV1zb1Vkc3JzeGJ%2Fd3ozJCZ%2FZTMkJnh5YjMkJnJzcH94c3IzJCQzJFUzJCR0STMkJDMlVyYzIVI%3D\u0026cp=1\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=1001\u0026mo=0\u0026pn=3551\u0026spn=2548\u0026fp=1304"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Jun 2025 07:06:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 34902\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.3.2\r\nx-jsd-version-type: version\r\netag: W/\"38df4-HxOZgbm0enZu+gphu3ito1HxbEs\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220083-FRA, cache-lga21980-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 26066\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hMHadkVzAGjRsAQG3eB83lzfijArXJwG5IEHud5pHtLREgWf2jpXqoBjsCiRhMOL2cDRMPYaz8jw8P%2Bbt6agsxbruYnW0FQS1Lm8lsWQoONh4kozL6FrfsI3mFs1UgAnQ2c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 94b611b4bbbc1bfe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":232948,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"cd822b7fd22c8a95a68470c795adea69","sha1":"1f139981b9b47a766efa0a61bb78ada351f16c4b","sha256":"3017df4a76db5f01c2b99b603d88b03106df13bcfe18e67b7c13c2341d3a67df","sha512":"6f641c4b94ac03cb59a1d703b464442e21afe5268a4a4d6f0c70da41175ad21b4f61667ad38ea5af7909e5b00041da55da6980ff8bf4c1017d33253afe90c802","ssdeep":"1536:m9YnIWbn98fhRfvO5wlP7Qy9P3CV98IsYRElV6V6pz600I41r:pnIw98fsV986I6V6pz600I41r","tlshash":"c63482d6f590317d9ca7c1499681fefd8a6fa985cb1209a6f003776807cabd30962dcc","first_seen":"2023-09-18T01:21:14Z","last_seen":"2026-04-16T21:07:49.566893Z","times_seen":13810,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":9,"dns":0,"connect":1,"send":0,"wait":11,"receive":3,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":80,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-06T07:06:46.730Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/ HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1714,"data":"e=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\u0026cri=3HvGNq2tEX\u0026sf=0\u0026dc=\u0026cp=5\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=5009\u0026mo=0\u0026pn=7559\u0026spn=2548\u0026fp=1304\u0026snt=1"}},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx\r\nDate: Fri, 06 Jun 2025 07:06:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 162\r\nConnection: keep-alive\r\nLocation: https://prasn.xyz/wp-staline/clickup/Netflix-login404/\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Permitted-Cross-Domain-Policies: master-only\r\nReferrer-Policy: same-origin\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":5963,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":140,"dns":1,"connect":140,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-06T07:06:47.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=eksf4791s2c0kjm5qe5g1vsgu3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1717,"data":"e=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\u0026cri=3HvGNq2tEX\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=15031\u0026mo=0\u0026pn=17581\u0026spn=2548\u0026fp=1304\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:47 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nx-permitted-cross-domain-policies: master-only, master-only\r\nreferrer-policy: same-origin, same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5963,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2278), with CRLF line terminators","md5":"02b0e8deefec470d20d8fceba858c3f5","sha1":"49dfa1b2363506dd69c3a6786dd3d6944d29a024","sha256":"6defb60df8ea4cc3aafa3436d30198d8b551c0ce3bd61953c393d0bad932f1c8","sha512":"39621afaff1594685d685901bba6300682baf3ded976fb783928c912b5073a1610dfdbf5d970fc5533abc7e3725a235a9bd9c9c1ccf2bf93754a55d00765d710","ssdeep":"96:Dkx/bn990H1uNaqU4yDITcbNAvTtSoDNum:Yxh9k4/wlm","tlshash":"68c1b770e2a40a2f1c3381de74d55ff2f8928351e641524472fd1b5b1ffbc5289abaa1","first_seen":"2025-06-06T07:07:13.169063Z","last_seen":"2025-06-06T07:07:13.169063Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/images/screen.png","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","date":"2025-06-06T07:06:48.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/app/assets/images/screen.png HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=eksf4791s2c0kjm5qe5g1vsgu3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:48 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 12 Sep 2024 15:01:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66e30230-25a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":602,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 22, 8-bit/color RGBA, non-interlaced","md5":"3618aa278df055e9b308fdf0a9827fdb","sha1":"300a3c9e7f541144a9570e767e3374bbfa4f9fd7","sha256":"6f543c0edbca833491426866ee7f191539dcc6a1e04de7bafe6f91c6efaab94a","sha512":"4ff4b7efb636ae714109e9b9c859a184e92c5b2751b7486092a307fe407dc4b1cc5eb3f218875f8944bf21d9ee6f4704d7e4544332d84651289463f9e1c42fad","ssdeep":"","tlshash":"bcf062fe8b6a088cc7480032a79360805c9314cd4dc5fcec0e1224582f3d48d52147a3","first_seen":"2024-06-09T17:44:11Z","last_seen":"2026-03-24T13:45:46.546284Z","times_seen":50,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/images/bg.jpg","fqdn":"prasn.xyz","domain":"prasn.xyz","tld":"xyz"},"ip":{"addr":"4.240.124.161","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"","requested_by":"https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/index.php?view=main\u0026id=a52729f451081c1eaef64398119891ca","date":"2025-06-06T07:06:48.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prasn.xyz","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 May 2025 08:58:18 GMT","end":"Thu, 07 Aug 2025 08:58:17 GMT"},"fingerprint":{"sha1":"73:3E:A2:78:FA:A5:B1:AB:96:80:3F:42:FE:33:28:03:80:3D:D2:A4","sha256":"DF:08:D8:9C:FD:41:E6:C1:00:40:D1:1D:5C:82:F0:32:3D:9E:8C:18:93:9C:7F:0D:3C:86:51:64:3E:51:C9:E5"}}},"request":{"raw":"GET /wp-staline/clickup/Netflix-login404/app/assets/images/bg.jpg HTTP/1.1\r\nHost: prasn.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://prasn.xyz/wp-staline/clickup/Netflix-login404/app/assets/css/master.css\r\nCookie: PHPSESSID=eksf4791s2c0kjm5qe5g1vsgu3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 06 Jun 2025 07:06:48 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 12 Sep 2024 15:01:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66e30240-48982\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":297346,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"52c4dc324b1d6ea1b7c9386943ce1f25","sha1":"b87d84305d22a782d07b54b544abd888344c6108","sha256":"d3577819f555a573df94db7a514b682703ac7f8771939c676b2816c1e7162510","sha512":"5c5119c2b8f63c801b229c23ab1d4ac84e34703da340ded2e0872afd7d055021315918e959ca50be1add97a78a783725faad619c598428e93792fcbf1652ce51","ssdeep":"6144:qEUKBHvNsVpZJBhz9yrmtWVrzsl3dQFZI7Mnaew:8iVsLt1sFMMnaew","tlshash":"7f542315f6b57c47c69718223531388b2a82d4d0cddcc4d83de126be68a36f426a7d1f","first_seen":"2024-06-09T17:44:11Z","last_seen":"2026-03-24T13:45:46.549212Z","times_seen":53,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mariasiion.ro/pet/","fqdn":"mariasiion.ro","domain":"mariasiion.ro","tld":"ro"},"ip":{"addr":"85.9.63.110","port":443,"asn":5606,"as":"GTS Telecom SRL","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-06T07:06:45.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mariasiion.ro","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Wed, 28 May 2025 17:03:12 GMT","end":"Tue, 26 Aug 2025 17:03:11 GMT"},"fingerprint":{"sha1":"0D:76:50:10:D0:2F:BB:17:96:5D:4B:CE:5E:B1:37:2D:11:A0:53:7A","sha256":"4F:9F:D1:46:28:00:C8:7B:80:49:9A:7D:AE:C9:45:B8:3A:E0:7E:B2:47:8F:F8:EB:D5:10:1F:1D:77:5D:2D:15"}}},"request":{"raw":"GET /pet/ HTTP/1.1\r\nHost: mariasiion.ro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://prasn.xyz/wp-staline/clickup/Netflix-login404\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\ndate: Fri, 06 Jun 2025 07:06:45 GMT\r\nserver: LiteSpeed\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":5963,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-16T21:13:21.954299Z","times_seen":13835446,"resource_available":true,"data":null}},"time_used":388,"timings":{"blocked":125,"dns":13,"connect":52,"send":0,"wait":135,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}