{"report_id":"264156f1-45a1-42f5-9d37-595132e4d5f5","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-04-13T03:16:09Z","url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"title":"Netflix","dom":{"size":13945,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"2be60e1d502bf18dd4eb4246723778af","sha1":"994f119e93b56770b1549105a3ab09040abe4407","sha256":"4f09fcb5bcab2dc039993026d40391b5c35d523ff16e3ca73f7ee99d2f26f931","sha512":"695784635f5e9569affc4905e6ac6c035418013ee51ed6898e78958aeb796840c0645e86bc091ca589d98287234d32cda744eadf0380b23ed2bc5a09ae347448","ssdeep":"96:cPMH0PiQ80Ws209bVB3UJYtwJrgrFxkBIy1/g1HruYWo2xzZhCxqzZ/8AgQUOUM:B/s209b6YtwOroBBmCjocorM","tlshash":"f352612014f9667b128782c2bbe2a71a7ec6d113db86650176fc5fe88fe3d52cd03619","dom_hash":"domhashef0140a9fa92e4a3eb6af1a0c644599e","first_seen":"2026-04-13T03:16:18.868468Z","last_seen":"2026-04-13T03:16:18.868468Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-18T03:16:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"images.soco.id","ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-07-19","domain_rank":5682224,"first_seen":"2019-09-29T19:23:41Z","last_seen":"2025-11-03T04:47:16.755608Z","alert_count":0,"request_count":1,"received_data":208137,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"newadityaap.wordpress.com","ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2000-03-03","domain_rank":0,"first_seen":"2026-04-13T03:16:10.286205Z","last_seen":"2026-04-13T03:16:10.286205Z","alert_count":0,"request_count":1,"received_data":85282,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i.scdn.co","ip":{"addr":"23.36.77.107","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2010-08-20","domain_rank":7612,"first_seen":"2017-01-30T05:00:06Z","last_seen":"2026-04-09T01:03:25.67746Z","alert_count":0,"request_count":1,"received_data":37787,"sent_data":468,"comment":"","tags":null,"fingerprints":null},{"fqdn":"m.media-amazon.com","ip":{"addr":"52.222.188.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2016-08-18","domain_rank":3022,"first_seen":"2017-01-30T05:27:40Z","last_seen":"2026-04-09T01:02:00.711961Z","alert_count":0,"request_count":2,"received_data":391975,"sent_data":1052,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"alyarsma.github.io","ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2026-04-13T00:17:31.364679Z","last_seen":"2026-04-13T00:17:31.364679Z","alert_count":20,"request_count":10,"received_data":4355783,"sent_data":4798,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.medcom.id","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2016-06-20","domain_rank":733676,"first_seen":"2017-10-11T05:52:47Z","last_seen":"2025-06-02T18:55:44.326719Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":962,"comment":"","tags":null,"fingerprints":null},{"fqdn":"images.icon-icons.com","ip":{"addr":"104.26.12.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-03","domain_rank":1428815,"first_seen":"2025-03-14T08:34:29.082016Z","last_seen":"2026-04-05T19:08:31.374669Z","alert_count":0,"request_count":1,"received_data":11309,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/script.js","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"678f10e51b898d47854048c6a006d957","sha1":"8b55101aa20ae0020023c0ba2869c52c618acadf","sha256":"f45b1981ef034cdb57b741eb4fc6fad1528194fa6ce833cd6ccf4df25d1b7d75","sha512":"fbd1a8cea1f567271066fa51f8c3eb461b7d59306dab0c4c50dccd6961ffc43e1af3d6f1ceb3f8396f8386979c44e30abab6612ada8a032ccd43caa08a2b131a","ssdeep":"","tlshash":"0a61431511780d314dfb6abeb2c797ac36d10197b8c1eb203cdc89881f95da2aaf47d9","size":3301,"data":"","first_seen":"2026-04-13T03:16:18.903441Z","last_seen":"2026-04-13T03:16:18.903441Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/icon%20panah.png","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /SLICING-NETFLIX/icon%20panah.png HTTP/1.1\r\nHost: alyarsma.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/SLICING-NETFLIX/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 12 Apr 2026 13:46:41 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69dba241-6366f\"\r\nexpires: Mon, 13 Apr 2026 03:25:46 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4152:1867D1:592CF9C:59E0FAD:69DC5FE1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776050146.983984,VS0,VE236\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 31e4f3ac77a1af5556635cb35c4dc9084b219a80\r\ncontent-length: 407151\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407151,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1130 x 928, 8-bit/color RGBA, non-interlaced","md5":"9b5a4c47478acaf55973a714236fc8c9","sha1":"de8636f810dce8011e3f57411a4593fc8853389d","sha256":"3297b84b8f528d013b48019d97cc7472c8e70d01ed61371304348669170369fe","sha512":"f67bceaa24f918561a63962a19cbb16f4ff02e68658c5fdca59c44e9ff14db10fe4de8265f128a79f2223db49c7119902ea49ddd946f2b7cc3a1431c9f5f2374","ssdeep":"6144:/fzYtzMupR5Dlzn6qIrsyPcZQQrwxr4h6WarXnlWjxSF3CYLs/KM:TYtzMurp1I4ZQQQ4zEn2xe3S/KM","tlshash":"81840229e7064273b68b84157694aac763322fb7b840ec5d11e7746f9393f722cb9c20","first_seen":"2026-04-13T03:16:18.875919Z","last_seen":"2026-04-13T03:16:18.875919Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/icon%20teropong.png","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /SLICING-NETFLIX/icon%20teropong.png HTTP/1.1\r\nHost: alyarsma.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/SLICING-NETFLIX/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Sun, 12 Apr 2026 13:46:41 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69dba241-3f8e3\"\r\nexpires: Mon, 13 Apr 2026 03:25:46 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: CDFC:38086D:5A65CFA:5B19F47:69DC5FE1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776050146.984647,VS0,VE216\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 5a7035c80a8789a9039c802f300025fc76700c9f\r\ncontent-length: 260323\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":260323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1052 x 905, 8-bit/color RGBA, non-interlaced","md5":"22e29827397fa5bdbeeb38a7c0b088d2","sha1":"ee324de4ef753311e086edbc5e8c029d17507978","sha256":"7734fab84b9b70ceb3ca935b627fff32bd3112cca3fc9108524340b882310aa5","sha512":"813a115beaa09193814f2e2c70e744c40779cd328f492e7c647a1394f1a64bd711322aad32ff74faff18313268317f03d6a6328f1b5f0828fca8987e8819e487","ssdeep":"6144:r1C8b4/BPq93vRTk/qsV745vf0XVBYTwjro/fQdf1nhxXu:r1CmY1MVkpacXQTw/o/2NnhVu","tlshash":"e244238ce350dfdcf209053b7ea7a5c74ad79cf6aa9d88fc675442d4aecca981141a10","first_seen":"2026-04-13T03:16:18.87897Z","last_seen":"2026-04-13T03:16:18.87897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/icon%20two%20face.png","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /SLICING-NETFLIX/icon%20two%20face.png HTTP/1.1\r\nHost: alyarsma.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/SLICING-NETFLIX/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Sun, 12 Apr 2026 13:46:41 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69dba241-5a83b\"\r\nexpires: Mon, 13 Apr 2026 03:25:46 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 3E86:302D61:5CF004B:5DA483A:69DC5FDF\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776050146.985309,VS0,VE246\r\nvary: Accept-Encoding\r\nx-fastly-request-id: d09144acf80c4b2765c0cad9a32cb2c60575edee\r\ncontent-length: 370747\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":370747,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1081 x 976, 8-bit/color RGBA, non-interlaced","md5":"ee44d1697bdc7246379e911b2a5e8ede","sha1":"06ef8ffc5176ea562ee2c19045a56fbee41b28c7","sha256":"5d5e8c0864a873aa7e63d73afb913470f00d8ce3c0f8cff8189b375ea36627b3","sha512":"a467ed5d95d67c6115a22cdcfe4a97e39141aaf1876ca4b0621c7849bf7240cc1093c999bb0348bd7e5d487b2fb45bfee63b9223fdf1f776789dfd5bf14c4dd8","ssdeep":"6144:xF2BthAC7BvgiQyvICPcSD9rOKmWF4w70iXFykm5JXmIQiwsUhKGNSOliqEj9:HUAmBdvICPcSZrVmXw708yvbXmIBwsjZ","tlshash":"f374f007754da0e05d82b5db6897331a4fca126a14daad34ce36d8e772c573cae7f022","first_seen":"2026-04-13T03:16:18.882023Z","last_seen":"2026-04-13T03:16:18.882023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.medcom.id/dynamic/content/2026/01/02/1797707/zy1pIoqWx4.jpg?w=700","fqdn":"cdn.medcom.id","domain":"medcom.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.966Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /dynamic/content/2026/01/02/1797707/zy1pIoqWx4.jpg?w=700 HTTP/1.1\r\nHost: cdn.medcom.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T09:24:26.035056Z","times_seen":17776616,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":467,"dns":0,"connect":279,"send":0,"wait":0,"receive":0,"ssl":295},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/icon%20laptop.png","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /SLICING-NETFLIX/icon%20laptop.png HTTP/1.1\r\nHost: alyarsma.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/SLICING-NETFLIX/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 12 Apr 2026 13:46:41 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69dba241-9b98e\"\r\nexpires: Mon, 13 Apr 2026 03:25:46 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 24CA:389DC7:5AD0470:5B845E5:69DC5FE1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776050146.983525,VS0,VE244\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 7a98c0f4ce246ee4d4fbc07b51c07b5fe88151a8\r\ncontent-length: 637326\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":637326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1176 x 912, 8-bit/color RGBA, non-interlaced","md5":"58325a278d159afd353296d1b4657b60","sha1":"2fb23baf6a53e2bcaf94813106489263a24c6e56","sha256":"835e122caa5b9a422caaa01e7c6b62e668c8105deb617afba803f82e82984635","sha512":"b9920979d66b543835f00a1b5af6688c81ff83db8b53365f13a0c4e314158be8be1801d58dfc525667257045a4c20e0900cbe807ad13a5b5e036d917d7a23c1f","ssdeep":"12288:PGZunoKg33vVoievlLB6BSkwGijdVBHMdF7c5+pUzASv9z5WdFVHX03708Pp:+/KS3v2TZB6BujjSdtGzXlz5WdbHELvR","tlshash":"8bd41283b01df886391035ec6fae074a53ca296c31c46961cf578da936d833de8dbd92","first_seen":"2026-04-13T03:16:18.885185Z","last_seen":"2026-04-13T03:16:18.885185Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/bg%20netflix.png","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:46.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /SLICING-NETFLIX/bg%20netflix.png HTTP/1.1\r\nHost: alyarsma.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/SLICING-NETFLIX/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 12 Apr 2026 13:46:41 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69dba241-228935\"\r\nexpires: Mon, 13 Apr 2026 03:25:46 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 4152:1867D1:592CFFB:59E1006:69DC5FE2\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776050146.272437,VS0,VE183\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 16cb96bf2584cf3f583bb1369d7750fa66c82ce4\r\ncontent-length: 2263349\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2263349,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1495 x 672, 8-bit/color RGBA, non-interlaced","md5":"f089f503c276a5ccd5aa3a02681533ea","sha1":"96258156d7147458f4f209a377b450bf9f17e6b9","sha256":"1601e092244315080bdf5ab91cb79641f67ca99a83e79a909e05e6affe056a7e","sha512":"306d77b2b48b98fa55c03312b32a4f67e4a7f93ba356b84231bdd5bf8698712a9436b2fd101dd53110f74112ef0a447e186560ce40bbb06f8fc8fd1d5204dd94","ssdeep":"24576:3YxlmJ4JHW1jnngD+3Hmz95UGoE/8UXlwT5Nqz6pv:3YxE821DZHQs5E/bwT54mv","tlshash":"0e2523df67f538325cadab24586200e6fb28859fd75443e46237bde801b0f5a8c297d4","first_seen":"2026-04-13T03:16:18.887269Z","last_seen":"2026-04-13T03:16:18.887269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"images.icon-icons.com/2699/PNG/512/netflix_logo_icon_170919.png","fqdn":"images.icon-icons.com","domain":"icon-icons.com","tld":"com"},"ip":{"addr":"104.26.12.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:46.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"712410db.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 24 Feb 2026 23:44:33 GMT","end":"Tue, 26 May 2026 00:44:24 GMT"},"fingerprint":{"sha1":"40:0A:E3:3B:6E:87:9D:70:AB:0C:3B:48:CD:03:E7:07:1F:67:EC:E5","sha256":"9B:67:AA:46:E5:D5:EF:87:6F:05:05:E5:E4:43:18:F3:8A:06:EF:55:80:A9:19:2A:B1:97:15:77:26:33:15:54"}}},"request":{"raw":"GET /2699/PNG/512/netflix_logo_icon_170919.png HTTP/1.1\r\nHost: images.icon-icons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 13 Apr 2026 03:15:47 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10450\r\naccept-ranges: bytes\r\netag: \"a34cbf77158913951d8efdda7c249c85\"\r\nlast-modified: Sun, 09 Mar 2025 15:33:16 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOq80AiM5Nl8rO5QhM2u9Rs3AVHgsdvrZ7GbRW7FQ5W8nmzRCo0dsC9XhellLoF8%2FXUYVfN70%2B0wW2JFMIca3Jlj6ouO5PGuZRRO0Bfxn46i45h5DY2KTxb6q%2FNV0Muu3J%2BtVFHP7A%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:100\r\npriority: u=4;i=?0,cf-chb=(45;u=5;i=?0)\r\ncf-polished: ok, orig_size=18539\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept, accept-encoding\r\ncf-cache-status: HIT\r\nage: 606919\r\ncache-control: max-age=31536000\r\ncf-ray: 9eb74eead80423eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10450,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"032ecb4d67ae3306de40af8906caef19","sha1":"e158daeda94c6f7557316678070a9ebbc4aa2906","sha256":"79b8c638071cf91eb8cfcee7e1ca9e670b81f5f663e749f5c913cb756589cd82","sha512":"e07732357dd8e626213142ddaa695b2b89db22d5803cf589a629aad9bc10324bf365980da4133b6885e0471027b0b13ab4f20f92cc84be5467e48ecc4ab26ff0","ssdeep":"192:OvuPedAVt4yMa2mNRvcEMAwd1gxpYj/EHLcoQDRipUpCxSK7Rn:auPeS4yMa2mNlcCsDEYzDRipU5Kl","tlshash":"d922b07343b0c4d10fb1b1026084fa79c6eba5c9dbd6adec445294feeb68787e069911","first_seen":"2025-05-29T10:24:52.52363Z","last_seen":"2026-07-20T12:55:26.574478Z","times_seen":19,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":23,"connect":1,"send":0,"wait":10,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.soco.id/588-Film-animasi-jumbo.jpg.jpg","fqdn":"images.soco.id","domain":"soco.id","tld":"id"},"ip":{"addr":"52.84.50.54","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.soco.id","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 17 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AC:8E:43:FD:46:79:A0:F5:05:E5:14:65:4B:A4:C7:10:5B:33:13:A7","sha256":"D6:2F:38:E8:67:9B:5A:18:93:BF:75:95:0A:1D:0F:75:31:60:F4:C5:65:00:D2:BC:4C:67:35:3F:D7:71:BF:D6"}}},"request":{"raw":"GET /588-Film-animasi-jumbo.jpg.jpg HTTP/1.1\r\nHost: images.soco.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 207639\r\ndate: Sun, 12 Apr 2026 16:35:16 GMT\r\nlast-modified: Thu, 13 Feb 2025 07:57:06 GMT\r\netag: \"7e6a60d380df8699419cbbad30f3a8a1\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: UKix9K40WVq0OG47uIE9s9iUZTx5JhZgORNiMmL8-ciNX6UnDjq6Mw==\r\nage: 38431\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":207639,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x960, components 3","md5":"7e6a60d380df8699419cbbad30f3a8a1","sha1":"8e3a5f445d0ec96eaded740dccf1712621d881a8","sha256":"8840f8496ed15efc448de3e0b6ad054b31c2efb2de9c16f4efce99723046b9b6","sha512":"cba1362e052e3f6610eb845e077027150b2223898ac9a810da22c4f87a76bb68f26908e5efa011a6ef22fdd3ddc239d050826e2d000a3fefd739c9a9ea4f8143","ssdeep":"6144:yHnSe+cS48oDJ95+DLpNHoiMjERzCmRpku9cJ:MOo4DLTIEzCmgCi","tlshash":"341423614343d43ccd6f427247d02329fc863e60a9ea4e7a343715ecd5a2eb70b1ad6a","first_seen":"2026-04-13T03:16:18.889794Z","last_seen":"2026-04-13T03:16:18.889794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":72,"connect":1,"send":0,"wait":24,"receive":7,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-13T03:15:45.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /SLICING-NETFLIX/ HTTP/1.1\r\nHost: alyarsma.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sun, 12 Apr 2026 13:46:41 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69dba241-39b0\"\r\nexpires: Mon, 13 Apr 2026 03:25:45 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 3E8A:1867D1:592CF0F:59E0F28:69DC5FDF\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 13 Apr 2026 03:15:45 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776050146.527805,VS0,VE139\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 4bed297a4dacffaf1c6d5a3068747b37041184ae\r\ncontent-length: 3545\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":14768,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"164aee34b78e880e45459b9069f2a2cf","sha1":"65c343691584cd4e0f9522aca8d088b299a65c19","sha256":"dec238daeeafbf499e4938b6b4c703e05446cd375bd0233be7b87236d0c00fca","sha512":"c4f9fb94d0b1eab2a14652a7f3b5025d11282ffeb1c10b00aa3a340e2047acc038a99f4076d49f1a86c8397d73cbbffb7854f0bae229a8dfe8b9167275c911d6","ssdeep":"96:jPUH0PVQK0qjA0M43BAYUJYtwJquWFxkBIy1/g1HruYWo2xzZhCxqzZ/8AjMU7UM:oyjA0M4cYtwxWoBBmCjocJgM","tlshash":"e562602014f962bb128b42c6bbf2971a6ec6d113db87250176fc5fe88fe3d52c903658","first_seen":"2026-04-13T03:16:18.891417Z","last_seen":"2026-04-13T03:16:18.891417Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":115,"dns":53,"connect":28,"send":0,"wait":165,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/style.css","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /SLICING-NETFLIX/style.css HTTP/1.1\r\nHost: alyarsma.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/SLICING-NETFLIX/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sun, 12 Apr 2026 13:46:41 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69dba241-317a\"\r\nexpires: Mon, 13 Apr 2026 03:25:46 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 2FC6:296030:5BC85F1:5C7CB95:69DC5FE0\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776050146.962888,VS0,VE137\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 44f71dab562adaee298d14106c459c2fe85c8a28\r\ncontent-length: 3308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":12666,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"fe4f121d07f9660af762c89587d006e0","sha1":"dc2367cca17a7d912a7b0b2e424f894d9502b465","sha256":"84cd302bc284234b6f9eec66b28403ee9a4f4ebaa8f2d1a1dd7928d16879c350","sha512":"c6480fe596e47dca671b9351eab6d71b32c1ca11ba9e53247105b31e7f49b6e4143cd6faf0dfce2ede0d8ba3081ab6abd32db90d9a5ef55fff8e1f904db71b31","ssdeep":"192:9WX9w3AWUNzzUquEa4btnl5GYUFVVowm1uDb7rQtY4l0mhkcfbNMZJNSEo:95blD14RnujFVhmFZuN2","tlshash":"4842519626712614741fd5ecadd28b46b36de003d90ecc7db7d5202c9fc82d896b2f89","first_seen":"2026-04-13T03:16:18.892989Z","last_seen":"2026-04-13T03:16:18.892989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/netflix%20logo.png","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /SLICING-NETFLIX/netflix%20logo.png HTTP/1.1\r\nHost: alyarsma.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/SLICING-NETFLIX/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 12 Apr 2026 13:46:41 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69dba241-4f336\"\r\nexpires: Mon, 13 Apr 2026 03:25:46 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: A584:3D336C:5BB4A9E:5C68F71:69DC5FE1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776050146.963480,VS0,VE245\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 1b0405c783b7ee83bd5379795a49944a700a9961\r\ncontent-length: 324406\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":324406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1789 x 576, 8-bit/color RGBA, non-interlaced","md5":"1ae3b39288c10ec1e2a98b1c44a08711","sha1":"5942e3ff7e5c7dfb8dff898578eb807e03df0ea0","sha256":"83b4b2092b1353093f1ed2905d1807fbb12c75e8bfe8a1f2513c0cc423c8672c","sha512":"50b701ecae41398f6cf91429ef53c80ab012057a43c28a138c4f512ee72f03a98427eae425d6036a4d4677d3ffc025bb6cd43d517a8b0c16f5cd34ff593c54a0","ssdeep":"6144:1lPKeaFDVSvU9MeSAjnAPaPzWkZcarSOsvx6ZDQjBqGCmDcTGodIR:1lSeaCY/sSPSo1SOsv8Zk9bc0R","tlshash":"416422a5c98446260be0c90fd9ecbea9c22e3ff1b2698c7847b2d3db075df41550a21d","first_seen":"2026-04-13T03:16:18.894477Z","last_seen":"2026-04-13T03:16:18.894477Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/icon%20tl.png","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /SLICING-NETFLIX/icon%20tl.png HTTP/1.1\r\nHost: alyarsma.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/SLICING-NETFLIX/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/png\r\nlast-modified: Sun, 12 Apr 2026 13:46:41 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69dba241-d5d0\"\r\nexpires: Mon, 13 Apr 2026 03:25:46 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 3E94:28651F:5A7ADAF:5B2EE41:69DC5FE1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776050146.964280,VS0,VE155\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 182e32e973898f1e9e6b871e08c240c242d2eb60\r\ncontent-length: 54736\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]}],"data":{"size":54736,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1081 x 976, 8-bit/color RGBA, non-interlaced","md5":"4330223418a9896d24ba99af4f48fdeb","sha1":"ef0743a8bf52962c170f460e8fa7654958bd61b9","sha256":"fda0ac0e987fec9f6c9ec566df33a38b8356f83b27326df49c5ed851c8c75fdf","sha512":"05c67b0ade89322faae73262aa466405713e70b881dfdefe3de3c65dfc5f7ba8511525bfdf500b47a437ca885bdd885907f7be509ceba52e5ff0cc879bf72724","ssdeep":"768:cJ6L9ZTVrQFuCyv0pyT9FTsXMiqg3NTTuvZu35HxA8+Pp9p9K:DVBCvyRScir3xivZeHK8+P3p9K","tlshash":"80333602cf4a643bb4145486b39770d6c6a15eb3b511ceae4bda743e1f1bba0ed74e20","first_seen":"2026-04-13T03:16:18.895989Z","last_seen":"2026-04-13T03:16:18.895989Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"newadityaap.wordpress.com/wp-content/uploads/2025/11/pesugihan-sate-gagak.jpg","fqdn":"newadityaap.wordpress.com","domain":"wordpress.com","tld":"com"},"ip":{"addr":"192.0.78.13","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wordpress.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 19:45:18 GMT","end":"Sat, 06 Jun 2026 19:45:17 GMT"},"fingerprint":{"sha1":"95:D7:B9:C6:8F:E0:F4:86:9C:07:81:EA:FA:E3:C9:18:EF:BE:53:58","sha256":"98:C2:69:27:04:10:8E:8B:EB:29:16:9E:12:13:58:75:32:0D:D7:BD:21:C9:00:99:97:72:08:1E:71:5C:6E:2C"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/pesugihan-sate-gagak.jpg HTTP/1.1\r\nHost: newadityaap.wordpress.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 84854\r\nlast-modified: Fri, 21 Nov 2025 10:56:40 GMT\r\nexpires: Wed, 20 May 2026 08:51:21 GMT\r\nx-orig-src: 01_mogdir\r\nx-ac: 26.arn _dca HIT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=31536000\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=2.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":84854,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 576x720, components 3","md5":"04e6125fd8fb95a2e10e9364245e7790","sha1":"a7c5c4142aa063b8d78ee21d377a79184d40d898","sha256":"3d6413ae5710cf565108e0ecd9b547e4d63a370ff33d449bd0b58efd5dd4d806","sha512":"14b0c335cfae781eef8e92d9ffb602bde40ae5677de0b910a5481c2cba7fee151ba0219861a8a4598a6ad061d018b6b7edd2cf5c655c4f0af7583e2677236fb9","ssdeep":"1536:CWrZqh5/LO9T2CwjsdbCG38wFC/9KFg3oRkZuwTLEZK7O:DZQO9TBQkCG385/X4KZfT447O","tlshash":"99831279e60e2a22729d232038c3e01d0d85045ee02fa4b7fb826d6efd655d57685b8b","first_seen":"2026-04-13T03:16:18.897889Z","last_seen":"2026-04-13T03:16:18.897889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":45,"dns":39,"connect":8,"send":0,"wait":10,"receive":24,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.scdn.co/image/ab67616d00001e02f8f1a30faccc58a00115b023","fqdn":"i.scdn.co","domain":"scdn.co","tld":"co"},"ip":{"addr":"23.36.77.107","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.scdn.co","organization":"Spotify AB"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 27 Jun 2025 00:00:00 GMT","end":"Tue, 28 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1F:25:66:57:1B:87:1F:49:8D:C6:86:60:1B:C3:B4:89:84:72:4A:92","sha256":"FB:12:4E:1B:42:51:F1:34:85:E4:29:67:F9:E7:1B:F7:49:7F:01:C8:5A:8F:0D:71:71:38:3C:5B:27:97:49:88"}}},"request":{"raw":"GET /image/ab67616d00001e02f8f1a30faccc58a00115b023 HTTP/1.1\r\nHost: i.scdn.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 05 Nov 2025 14:11:32 GMT\r\netag: \"92eab151f1e93c034d6b814e253a43e8\"\r\nx-amz-checksum-crc32c: lo+reQ==\r\naccept-ranges: bytes\r\ncontent-length: 37289\r\nexpires: Mon, 13 Apr 2026 03:15:46 GMT\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\ncache-control: max-age=15780000\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\naccess-control-allow-headers: range\r\naccess-control-allow-methods: GET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37289,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 300x300, components 3","md5":"92eab151f1e93c034d6b814e253a43e8","sha1":"1af7c3f6ddcc5f556fe1e9ad182d16302d1dedb3","sha256":"4cf1f7e4283e696af9303a6811dbe65cbc4da5a9848ad465488bf67465a383d0","sha512":"8b94e050f0eee327c34c7d0a287d9c455a0dd0a4d57d48a59d90ac9097c45e5a6fdc1a350299a86cc9dedd9ba5f6a5f51ede5ad11e90fee01f4a5ce6994b5c94","ssdeep":"768:hhmSI/FhbVw3xBgPiHLntB7pUEguFZBFKleqzuF:hAb/F2gPiHDLpUEguFZBUXzuF","tlshash":"10f2f1af0ae7f88533a0fa634f579d2a05f882149f264535b1f26ab6df989715e24003","first_seen":"2026-04-13T03:16:18.899428Z","last_seen":"2026-04-13T03:16:18.899428Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":87,"dns":67,"connect":1,"send":0,"wait":16,"receive":13,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.media-amazon.com/images/M/MV5BYjhjZmYwYjItYjA1Yy00NzkwLTk1OWMtZjYzZTg2MWFiYmFjXkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"52.222.188.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images-na.ssl-images-amazon.com","organization":""},"issuer":{"commonName":"DigiCert Global CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:0D:CF:DE:F2:93:23:20:46:F0:30:29:8B:56:72:A6:26:4E:DB:F7","sha256":"CA:0E:B9:BB:95:AF:A5:13:88:90:C9:A7:04:E6:C5:06:D6:F0:58:F3:82:35:C7:CF:F9:EA:8C:42:A0:0A:7F:5C"}}},"request":{"raw":"GET /images/M/MV5BYjhjZmYwYjItYjA1Yy00NzkwLTk1OWMtZjYzZTg2MWFiYmFjXkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 224881\r\ndate: Thu, 19 Mar 2026 21:05:38 GMT\r\naccept-ranges: bytes\r\nserver: Server\r\nx-amz-ir-id: 681aac0c-e1ea-4b43-969e-b35d3f2c26f0\r\ncache-control: max-age=630720000,public\r\nlast-modified: Thu, 19 Mar 2026 18:58:01 GMT\r\naccess-control-allow-origin: *\r\nedge-cache-tag: x-cache-538,/images/M/MV5BYjhjZmYwYjItYjA1Yy00NzkwLTk1OWMtZjYzZTg2MWFiYmFjXkEyXkFqcGc@\r\nexpires: Wed, 14 Mar 2046 19:18:26 GMT\r\nsurrogate-key: x-cache-538 /images/M/MV5BYjhjZmYwYjItYjA1Yy00NzkwLTk1OWMtZjYzZTg2MWFiYmFjXkEyXkFqcGc@\r\nx-nginx-cache-status: HIT\r\nvia: 1.1 dab692ab133f98758992c9457836e846.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2095808\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"RbzXTpgJkIagT2lLLeTV35iqeb-s9-oqyiEn5CuzZCnbFRCAm6VH1w==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=3,provider;desc=\"cf\"\r\naccept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: RbzXTpgJkIagT2lLLeTV35iqeb-s9-oqyiEn5CuzZCnbFRCAm6VH1w==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":224881,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1481, components 3","md5":"aa4f27f22d2f497d146b2345a7ea2d57","sha1":"f7daff7aa01ca7d6ae6d1048dc9a9bb0ed6de34e","sha256":"c983b99fb48f0b11e300369850ad8d461cfe47ea6ec489b56a451c39dc61cebe","sha512":"8fa281fa6fd26a6f944d0ae0e5c700a0672a0b7886718f6cf353fb37731ef84fdd9b1d94a96099a9d5867bd98cc0f8c3af0ef81ba626b844727c6e2faa86634a","ssdeep":"6144:PkGDLroM9m9v2kBPpuxEgIoCbu36nr9gaVBwm7pSovEWeSerg:cGDLrpu+SG4oCC365fCMSiC7rg","tlshash":"352423abbd40ea09fa18c4f68a741d884c01495464babae26a4d3cf0755fbcd27c7f74","first_seen":"2026-04-13T03:16:18.900799Z","last_seen":"2026-04-13T03:16:18.900799Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":96,"dns":80,"connect":1,"send":0,"wait":5,"receive":10,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"m.media-amazon.com/images/M/MV5BNDJlODYxYjItYWRhMC00MTUxLTk1MWYtNWZhZmFjNDVkYzQwXkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg","fqdn":"m.media-amazon.com","domain":"media-amazon.com","tld":"com"},"ip":{"addr":"52.222.188.35","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images-na.ssl-images-amazon.com","organization":""},"issuer":{"commonName":"DigiCert Global CA G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"52:0D:CF:DE:F2:93:23:20:46:F0:30:29:8B:56:72:A6:26:4E:DB:F7","sha256":"CA:0E:B9:BB:95:AF:A5:13:88:90:C9:A7:04:E6:C5:06:D6:F0:58:F3:82:35:C7:CF:F9:EA:8C:42:A0:0A:7F:5C"}}},"request":{"raw":"GET /images/M/MV5BNDJlODYxYjItYWRhMC00MTUxLTk1MWYtNWZhZmFjNDVkYzQwXkEyXkFqcGc@._V1_FMjpg_UX1000_.jpg HTTP/1.1\r\nHost: m.media-amazon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 164785\r\ndate: Fri, 10 Apr 2026 05:18:09 GMT\r\nserver: Server\r\nx-amz-ir-id: fc28d1dd-7af0-4f4d-9ed1-bb64e706d7f6\r\ncache-control: max-age=630720000,public\r\nlast-modified: Thu, 09 Oct 2025 23:29:36 GMT\r\naccess-control-allow-origin: *\r\nedge-cache-tag: x-cache-471,/images/M/MV5BNDJlODYxYjItYWRhMC00MTUxLTk1MWYtNWZhZmFjNDVkYzQwXkEyXkFqcGc@\r\nexpires: Thu, 01 Mar 2046 22:28:30 GMT\r\nsurrogate-key: x-cache-471 /images/M/MV5BNDJlODYxYjItYWRhMC00MTUxLTk1MWYtNWZhZmFjNDVkYzQwXkEyXkFqcGc@\r\nx-nginx-cache-status: HIT\r\naccept-ranges: bytes\r\nvia: 1.1 dab692ab133f98758992c9457836e846.cloudfront.net (CloudFront)\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 251857\r\nserver-timing: cdn-cache-hit,cdn-pop;desc=\"OSL50-P3\",cdn-rid;desc=\"o4EWqXq817YDT0gbWIcfSKwgBX153wpqEeCWYpKajeoptebboHjs8g==\",cdn-hit-layer;desc=\"EDGE\",cdn-downstream-fbl;dur=4,provider;desc=\"cf\"\r\naccept-ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: o4EWqXq817YDT0gbWIcfSKwgBX153wpqEeCWYpKajeoptebboHjs8g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":164785,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1250, components 3","md5":"a3fcb792f5f836a6f914228cb339292b","sha1":"b5729937f37b98241c9a8bb31cde20f43365d9ac","sha256":"f409ba5ee6aef2adf0b399436beba698944e260acee71450778c794eba9dba61","sha512":"5fa1396cea735631b157224b90c97b2bd1a5f2ec74155ec8938960d08ac0bb19343c57c69280834639512306d960ce8febb07a4dd29478ca80dde04102978710","ssdeep":"3072:2Gc+jtmw8aBDeM97gPs8kmGFDcKJYm4Cw0GPgN/McYgMkeURftgCjMhd:27qBDl97gPsLm+FYMw0GODNeWVgCjMr","tlshash":"e4f312b29baf615bc528447f60da55bdca1b9aba805b2fd310b27e104109f84da7cdc3","first_seen":"2026-04-13T03:16:18.902122Z","last_seen":"2026-04-13T03:16:18.902122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":77,"connect":1,"send":0,"wait":17,"receive":3,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"alyarsma.github.io/SLICING-NETFLIX/script.js","fqdn":"alyarsma.github.io","domain":"alyarsma.github.io","tld":"github.io"},"ip":{"addr":"185.199.111.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Feb 2026 21:41:53 GMT","end":"Thu, 07 May 2026 21:41:52 GMT"},"fingerprint":{"sha1":"A2:51:20:89:CB:5A:58:66:4F:F9:80:3A:0E:A3:6B:2B:13:44:D8:F9","sha256":"02:BD:D4:4D:11:37:CE:23:17:D9:AA:CC:D3:6F:75:3C:AA:1F:BE:C7:EE:91:CC:5F:AE:51:D8:1E:8F:F7:DC:A7"}}},"request":{"raw":"GET /SLICING-NETFLIX/script.js HTTP/1.1\r\nHost: alyarsma.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/SLICING-NETFLIX/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: application/javascript; charset=utf-8\r\nx-origin-cache: HIT\r\nlast-modified: Sun, 12 Apr 2026 13:46:41 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69dba241-ce5\"\r\nexpires: Mon, 13 Apr 2026 03:25:46 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 11E0:1EDF7A:5B07C74:5BBBF7A:69DC5FE1\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Mon, 13 Apr 2026 03:15:46 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410020-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776050146.986113,VS0,VE131\r\nvary: Accept-Encoding\r\nx-fastly-request-id: f32c735c5fec1acf7dd5fd478790c9d3b309f5c8\r\ncontent-length: 1010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3301,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"678f10e51b898d47854048c6a006d957","sha1":"8b55101aa20ae0020023c0ba2869c52c618acadf","sha256":"f45b1981ef034cdb57b741eb4fc6fad1528194fa6ce833cd6ccf4df25d1b7d75","sha512":"fbd1a8cea1f567271066fa51f8c3eb461b7d59306dab0c4c50dccd6961ffc43e1af3d6f1ceb3f8396f8386979c44e30abab6612ada8a032ccd43caa08a2b131a","ssdeep":"","tlshash":"0a61431511780d314dfb6abeb2c797ac36d10197b8c1eb203cdc89881f95da2aaf47d9","first_seen":"2026-04-13T03:16:18.903441Z","last_seen":"2026-04-13T03:16:18.903441Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-13","alert":"Sinkholed","trigger":"alyarsma.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.medcom.id/dynamic/content/2026/02/27/1806989/j2VAdrumI5.jpg?w=700","fqdn":"cdn.medcom.id","domain":"medcom.id","tld":"id"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://alyarsma.github.io/SLICING-NETFLIX/","date":"2026-04-13T03:15:45.968Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /dynamic/content/2026/02/27/1806989/j2VAdrumI5.jpg?w=700 HTTP/1.1\r\nHost: cdn.medcom.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://alyarsma.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T09:24:26.035056Z","times_seen":17776616,"resource_available":true,"data":null}},"time_used":482,"timings":{"blocked":0,"dns":26,"connect":192,"send":0,"wait":0,"receive":0,"ssl":261},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
