{"report_id":"37418267-a932-4703-9fbf-fbb67fa81370","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-05-06T04:09:41Z","url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"title":"Netflix","dom":{"size":3881,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"eebf1909f1ea2706430404621123171f","sha1":"a947d3959bd57b1c98b79005b2657785697ca62b","sha256":"d22ad642695fd8b1adaa29f72234f83dc952ae14e3e5bedf816d4cedf8a37aa6","sha512":"bd7486b693c95531c56bddb76d6bc60b4bd236b9a227177c7d43f785f1035b69d127d75147d55ec40007195f7593475de6b6b108a243cfbd23a15a6b80043fed","ssdeep":"","tlshash":"7e81796340f250b700b2c0db69aa5b1b3ed2d61be55a0620b39e6bd90fefc56fd13160","dom_hash":"domhashd88729c15c5c09d933baf701f31bf086","first_seen":"2026-03-06T12:36:27.65948Z","last_seen":"2026-05-06T04:09:45.820142Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-10T04:09:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-06","alert":"Phishing Block","trigger":"netflix-phi-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"netflix-phi-nine.vercel.app","ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-03-06T12:36:25.594546Z","last_seen":"2026-04-20T09:10:32.132555Z","alert_count":45,"request_count":9,"received_data":120525,"sent_data":4222,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-06T04:09:12.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: netflix-phi-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 956528\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 06 May 2026 04:09:12 GMT\r\netag: W/\"d276019efc08c4d0ec7178d4dd643a74\"\r\nlast-modified: Sat, 25 Apr 2026 02:27:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lgkjj-1778040552162-09324d1916d8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3895,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"d276019efc08c4d0ec7178d4dd643a74","sha1":"2cb7eb43f50a66d087784a1604b132d23e5e3384","sha256":"422fb661bc0a3f8ec2eb07a97ba75dd60b6f9fe13f14d9033ccbd10081d2ad41","sha512":"eef7e87e5e595e9b9cfae92e39f8c4790ddafae64770e777c13553db420c6c51e6863df0690997208f09c6c5cbd7970ebefd703c2f158236191ea262102a0e32","ssdeep":"","tlshash":"ff816a6301f354b700b2c0d769aa5b0b3ed6d21be59a0620b39e6b990fefc56fc53161","first_seen":"2026-03-06T12:36:27.662862Z","last_seen":"2026-05-06T04:09:45.821716Z","times_seen":6,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":33,"dns":6,"connect":2,"send":0,"wait":12,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-06","alert":"Phishing Block","trigger":"netflix-phi-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/HD3.jpeg","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-phi-nine.vercel.app/","date":"2026-05-06T04:09:12.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /HD3.jpeg HTTP/1.1\r\nHost: netflix-phi-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-phi-nine.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 956527\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"HD3.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 06 May 2026 04:09:12 GMT\r\netag: \"f1b6f72b9202721ffac01b0e7f3e383e\"\r\nlast-modified: Sat, 25 Apr 2026 02:27:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q7z5q-1778040552365-b1ba7b1b7dff\r\ncontent-length: 12802\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":12802,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x273, components 3","md5":"f1b6f72b9202721ffac01b0e7f3e383e","sha1":"31391a7c3dc0da78aad5418e4808d026da523adb","sha256":"21bf3947a91c48e7d40a149000228e8ed65d7a2ab7f6bd1c08982fc673b971f8","sha512":"d1efb49030523faf525351c06de27f5d87838c1c871fa097896481ce00c02574f83a3ae5c041d4c44a726ea18ede935424b37441b10ae8627503a0cdc7841a0c","ssdeep":"192:kKpWVhfz/Nzlm5BdlWVnPcT3kVMMf9Xk8m9JrcLyyYY2igbxJkVHKICO+uAEVreY:tONU51WVnPcTUx5k3bcLAxoVHYO+DwX","tlshash":"0a42c1607aa94a066854f0f42f9b3b324e553cdcb39e8ce9a06d55691a4fd0312741ae","first_seen":"2026-03-06T12:36:27.666035Z","last_seen":"2026-05-06T04:09:45.825384Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-06","alert":"Phishing Block","trigger":"netflix-phi-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/aforce.jpeg","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-phi-nine.vercel.app/","date":"2026-05-06T04:09:12.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /aforce.jpeg HTTP/1.1\r\nHost: netflix-phi-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-phi-nine.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 191956\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"aforce.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 06 May 2026 04:09:12 GMT\r\netag: \"9496a5147e408523d31eda624a04e11c\"\r\nlast-modified: Sun, 03 May 2026 22:49:55 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k662d-1778040552366-1f8eb58cf5c7\r\ncontent-length: 11492\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11492,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 189x267, components 3","md5":"9496a5147e408523d31eda624a04e11c","sha1":"536000072051b59bd83c60d8b06fac7956f2f7a3","sha256":"153a9f77c0e5870331d93a9683eea45c73bbf95626e0ef533e94b9a036b9d0b4","sha512":"fd1b7bc776aaaa587c37bc14394ed58e483fc7db405999d6329f446a1f5849f2f71432112449aa97a0ab929c57be349a3401b443e7e4c9b0305412bbd08cd260","ssdeep":"192:T9XKy2U4U5RNUCeOh4xUfRP56/Q4JxXQlkKTsqRM7JQhVDtQfasUYvd2h3u:BVf4U7NUCrZPApXQOKT/RhKVUZ1u","tlshash":"8f32c032ac34c224c67bc6f169fb2bb1934ce1419838d2755465251b9c5fe1f8e8c9c6","first_seen":"2026-03-06T12:36:27.661593Z","last_seen":"2026-05-06T04:09:45.82721Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-06","alert":"Phishing Block","trigger":"netflix-phi-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/style.css","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-phi-nine.vercel.app/","date":"2026-05-06T04:09:12.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: netflix-phi-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-phi-nine.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 956528\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 06 May 2026 04:09:12 GMT\r\netag: W/\"11ac54cd1970f06d1ed9aedca266557c\"\r\nlast-modified: Sat, 25 Apr 2026 02:27:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mh6pj-1778040552327-1a87d99a3841\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4739,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"11ac54cd1970f06d1ed9aedca266557c","sha1":"9dddb66240f7d2eaa6fc5f7ce44520ef5bc4b82b","sha256":"fe0f123cadef12b89b9fdebe7c8193b35cfa3ecd3b54ac904f6db58e2b42f204","sha512":"b298d8aa5b7e8440f3561fe7824338ab21880cb35db3326e602602f2aefbff0147c243bd93ec4346606936acf27b809101d7a4761b1e7d31a6cb9111debd0dab","ssdeep":"96:PLtxL1Kj5O+/fOeewtIHlfCIa9H7Z3j4jV8v9zTTr4x:TbJKjERe1mg7Z3jPv9zTTru","tlshash":"b2a19d8bd7a3198b7813c5983f7a6b9513599007881dc77c7be5b298cf881e0a4927cd","first_seen":"2026-03-06T12:36:27.668088Z","last_seen":"2026-05-06T04:09:45.829198Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-06","alert":"Phishing Block","trigger":"netflix-phi-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/favicon.ico","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-phi-nine.vercel.app/","date":"2026-05-06T04:09:12.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: netflix-phi-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-phi-nine.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 06 May 2026 04:09:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::mh6pj-1778040552358-b97f6ca9f00f\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1f909cc5b91092bcf7001053072c642f","sha1":"887c1237f0f1b2a1e8650ac1a588e2578498cf26","sha256":"601e14938bb7b41f58706271264451f64a363c2d3a748e16de492d219d114249","sha512":"0714a065f171c7fd6b0a1d22aacc56132ee82c280ab3d1037fd0c9908da751985ddddca49ae9946603a433f7e2a95881e68c8ed90f81f30823a36a06a2d51d57","ssdeep":"","tlshash":"53a0112e0c8a0e0833c28020a8022238200a0232aae2ea08c08ce30020022cfab08288","first_seen":"2026-05-06T04:09:45.830928Z","last_seen":"2026-05-06T04:09:45.830928Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-06","alert":"Phishing Block","trigger":"netflix-phi-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/img-2.webp","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-phi-nine.vercel.app/","date":"2026-05-06T04:09:12.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /img-2.webp HTTP/1.1\r\nHost: netflix-phi-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-phi-nine.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 956528\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"img-2.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 06 May 2026 04:09:12 GMT\r\netag: \"7e172e5adbd7ca05737469611c9a5c95\"\r\nlast-modified: Sat, 25 Apr 2026 02:27:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mh6pj-1778040552363-28ad73fcda38\r\ncontent-length: 52210\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52210,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e172e5adbd7ca05737469611c9a5c95","sha1":"c638ef39b98d983fc0bdc6442d3272c0953b35ef","sha256":"af3e4318b0d0e3012404fd7930ca9340f9f7a78ab7285cb92f368a27684220c1","sha512":"706081bc325d50423477f9ebfca18c61d35709ade3b5edeb313d8ae049d121c747703a52c784a224325675fae073db76b9e21810a9b042cd8100ee63b7fa625a","ssdeep":"768:Kb6Rf5BjQIb8GSJp91Qt5mha45JaO+9cixgX2C4ReOJIGdBfltBeW7+cDh50T/bc:a6RfP0FstL45sT2CVIQei+cDhOn55axL","tlshash":"c133f28ea839961aeb93cf81f3887630dd96cc108d46fdda5d1274a7b11c17e2e8487c","first_seen":"2024-04-01T08:15:33Z","last_seen":"2026-05-11T13:51:21.526662Z","times_seen":19,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-06","alert":"Phishing Block","trigger":"netflix-phi-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/HD1.jpeg","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-phi-nine.vercel.app/","date":"2026-05-06T04:09:12.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /HD1.jpeg HTTP/1.1\r\nHost: netflix-phi-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-phi-nine.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 956527\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"HD1.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 06 May 2026 04:09:12 GMT\r\netag: \"d93f0226774e18efa116e37d8c7839e1\"\r\nlast-modified: Sat, 25 Apr 2026 02:27:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lgkjj-1778040552364-4f63ccfe5c51\r\ncontent-length: 10708\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10708,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 201x251, components 3","md5":"d93f0226774e18efa116e37d8c7839e1","sha1":"2a5e24c3e8a4f3ea84767020ac996211b3ed2a79","sha256":"de53731a332f97d837e7702d04b07d1537a9a9dfd6efdf6d5ca38d51df2abffd","sha512":"9d61b1994735d524d70688d07b5ea0a738dd75a7dc02523258b6151c936db0f653f78387133431fd0ebb6c371f6f3f8f1f33f09f4fd777cfcf75c8c54ca9007b","ssdeep":"192:WM7rK9DNrphxixWr8MpNKSok0BbvvKwPnV27/2kCDUhWTai55KUrrElqre5qbFg4:WM7W53iorXRN4viwPGCDUhWTaAKWA224","tlshash":"ca22aef80d8f8011d892a694ce967d12d6e54a6a583653efbeda2f34e4ac9c25c1c03c","first_seen":"2026-03-06T12:36:27.663897Z","last_seen":"2026-05-06T04:09:45.840044Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-06","alert":"Phishing Block","trigger":"netflix-phi-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/HD2.jpeg","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-phi-nine.vercel.app/","date":"2026-05-06T04:09:12.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /HD2.jpeg HTTP/1.1\r\nHost: netflix-phi-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-phi-nine.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 956527\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"HD2.jpeg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 06 May 2026 04:09:12 GMT\r\netag: \"f998dd2214c78ed678ac0f369790fbd9\"\r\nlast-modified: Sat, 25 Apr 2026 02:27:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mctwr-1778040552365-4dfbf0e3b762\r\ncontent-length: 11085\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11085,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x265, components 3","md5":"f998dd2214c78ed678ac0f369790fbd9","sha1":"01ed3a75f167837cc013c87d72be303821adb3dd","sha256":"89555f1aa262507b46820aa01efefb03bd0b454b434886a0065802a35578d5d8","sha512":"d4075b851cdb8460eed881c5cc49e344f255f19cef2b7f889338020d705e388ab9f995c782def2f3df59eb898453b0f5bbe0beefc7c085322ec5612056cc226b","ssdeep":"192:Su30HuLuJjY5UzObOOfjOEfGl8xQ+vnSH4EISk82qtmYyrfhE3/DMyWwG:P3uouGG6yOCWQiS4B9Yy7h4DMyWwG","tlshash":"37329e919f17d433a8f7ced2641846dcc62bebc49069ce691ada784cf1a095bbc4df08","first_seen":"2026-03-06T12:36:27.664984Z","last_seen":"2026-05-06T04:09:45.841015Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-06","alert":"Phishing Block","trigger":"netflix-phi-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-phi-nine.vercel.app/backgroung.jpg","fqdn":"netflix-phi-nine.vercel.app","domain":"netflix-phi-nine.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-phi-nine.vercel.app/","date":"2026-05-06T04:09:12.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /backgroung.jpg HTTP/1.1\r\nHost: netflix-phi-nine.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-phi-nine.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 956527\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"backgroung.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Wed, 06 May 2026 04:09:12 GMT\r\netag: \"82c6716b4a7288e15f0bc290f2eea91f\"\r\nlast-modified: Sat, 25 Apr 2026 02:27:04 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k662d-1778040552372-d41313d85a5e\r\ncontent-length: 8842\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8842,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Modern and trendy abstract background with a defocused and blurred gradient, can be used for your design, with space for your t, xresolution=330, yresolution=338], progressive, precision 8, 612x612, components 3","md5":"82c6716b4a7288e15f0bc290f2eea91f","sha1":"85dce16e94473e2b57d09ca63b71a400881b5aed","sha256":"fb91e6b3d561c5134362231b08c669672e4b6669179f365ee241c3ed20896ef5","sha512":"ff1bb8b330fe05540a7922ebb76491afb84ed3506a7339c8082e03dd6c825933ad211be3ce577e79968cccd163134979a43dd4fd3aefd144725d62a42a4878a6","ssdeep":"192:IfknXcQOi1wfa88KKxhJFuE50fVNEikIiGT3IMyIG7ai1DD6yOYK:RnSiQaUebFReBSeIVv2wDD6v","tlshash":"a4022a0abf155102c4d82b3178eb6b19bb0b4ca5c34f534fe5ea59343869ad03fe539a","first_seen":"2026-03-06T12:36:27.666988Z","last_seen":"2026-05-06T04:09:45.846282Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-06","alert":"Phishing Block","trigger":"netflix-phi-nine.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"netflix-phi-nine.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}