{"report_id":"41050f68-1a23-44a1-8354-8f10be020e52","version":0,"status":"done","tags":[],"date":"2026-08-19T23:22:19Z","url":{"schema":"http","addr":"netfllx-premium-help-center.com/","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"netfllx-premium-help-center.com/not-found","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"title":"ꓠꓰꓔꓝꓡꓲꓫ","dom":{"size":15802,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14885)","md5":"058627a98a3b6e216a04b28e3362a654","sha1":"e0a856e82ad4734f089e92cc4bf2dc239dbf0762","sha256":"5f53da4991fc55a4a2bf8ba4408e8b6d87db6a5fe1afa6273d64327d7ee8b7d5","sha512":"80ecd0a2e4decdcb7aca9ed974436f7675782c5022d6aab238b078d6109314d419be53ce49f9f604771e673d208024bdcdf0a6ad5492635d82520f61db82b477","ssdeep":"192:ZXNPwpOxWp35nTtXC2s1Bpu0qN4QOigg/JpcXTTruLxksc64JyhOq7vmb:XEOx05nrGPKJgg8T4xksc64Jysq7vM","tlshash":"c6622584b81c12745d3fab01dec8973cd125b8426f524866b10e088ee9d7ff639e5f9a","dom_hash":"domhashbafed62a4b0b14974cad75c5d7271ccd","first_seen":"2026-08-19T13:12:58.310561Z","last_seen":"2026-08-19T23:22:24.40175Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"netfllx-premium-help-center.com/","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":0,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-23T23:22:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"netfllx-premium-help-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"netfllx-premium-help-center.com","ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-08-16","domain_rank":0,"first_seen":"2026-08-19T13:12:53.268983Z","last_seen":"2026-08-19T13:12:53.268983Z","alert_count":42,"request_count":7,"received_data":1539961,"sent_data":3555,"comment":"","tags":null,"fingerprints":[{"name":"Phusion Passenger:6.1.3","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.cdnfonts.com","ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-03","domain_rank":50661,"first_seen":"2020-06-10T09:02:17Z","last_seen":"2026-08-14T00:42:19.371129Z","alert_count":0,"request_count":1,"received_data":12094,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":22013,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"netfllx-premium-help-center.com/assets/index-jidzDrOu.js","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"c83c4f89b09f37dc1fb72a211119c553","sha1":"b84af6972abeab9fb66b43d7557ea0e6740bd0f3","sha256":"e2869e4b9dc9478b3ebbc5679d80d7a944c603a5c1ce712ff7bf60af6f6ca45c","sha512":"086d7e1bab879f8dfaefc5fabe51193fb32dd2fcc4ef3d1ae7ba46af90b2657320530fdced2332e9d7bf85151f6c5b8861614b89a0b26e9c4d8055adf3b5d274","ssdeep":"24576:cMGHAYJmMWNajWiSOcxiLNRF5cSL/afT7:OgemMWNajWiSOcxiLN35TL/afT7","tlshash":"df558dc87191ba6d9ba741d4647f4009713a2e64f40dc490f17ce8be2ab4886b277fbd","size":1281883,"data":"","first_seen":"2026-08-19T13:12:58.35222Z","last_seen":"2026-08-19T23:22:24.421794Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"netfllx-premium-help-center.com/","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-19T23:21:47.640Z","timestamp":1787181707640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netfllx-premium-help-center.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 18:05:24 GMT","end":"Sun, 15 Nov 2026 18:05:23 GMT"},"fingerprint":{"sha1":"16:93:FA:C5:8E:0F:A1:7C:36:28:92:E7:59:EC:E0:A1:A3:5E:EA:6A","sha256":"7A:93:E8:0D:2E:E3:C5:FE:8E:2F:BD:48:79:F5:B5:82:A1:19:5A:3A:8C:C2:93:B9:A8:CF:67:AA:E9:AD:11:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: netfllx-premium-help-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 23:21:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: public, max-age=0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nlast-modified: Mon, 10 Aug 2026 21:14:38 GMT\r\netag: W/\"397-19fed870a30\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.3, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.3","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":919,"size_decoded":758,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"162c1a3353df076731b69d8bc52d8b85","sha1":"6e0ea90ac4daeb63b7ac7f2a2ed78b4b2c90f87f","sha256":"5164c12a4c9943f082e5039684422c18362aabc9b9b2ad9adc3410d92c0c806a","sha512":"de7cba2977d236a0a6ab7e5eed1528a91e613e582bfba352f6ed021ed79f9e3f220b1f08d1952ce2660f2e6fbe9785a90f29e221ad8ad500db4b9c8ab5501f95","ssdeep":"","tlshash":"d7112fa769d0c509030083a06cc0f519cd47924f4f8ca984b6bf00bddf986c1cedb99c","first_seen":"2026-08-19T13:12:58.317955Z","last_seen":"2026-08-19T23:22:24.403049Z","times_seen":4,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":60,"connect":73,"send":0,"wait":81,"receive":0,"ssl":150},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"netfllx-premium-help-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.cdnfonts.com/css/helvetica-neue-55","fqdn":"fonts.cdnfonts.com","domain":"cdnfonts.com","tld":"com"},"ip":{"addr":"172.67.184.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netfllx-premium-help-center.com/","date":"2026-08-19T23:21:48.399Z","timestamp":1787181708399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 01 Jul 2026 15:30:21 GMT","end":"Tue, 29 Sep 2026 16:27:50 GMT"},"fingerprint":{"sha1":"21:75:89:40:49:CB:1B:FB:A2:4F:1A:FF:87:01:DA:0D:73:C0:47:C2","sha256":"4C:2F:0D:D9:28:F8:B0:D6:C9:A7:88:BE:DA:96:4E:DE:5F:27:94:4F:DB:C9:69:5E:5C:E5:82:C6:6A:CA:A8:7B"}}},"request":{"raw":"GET /css/helvetica-neue-55 HTTP/1.1\r\nHost: fonts.cdnfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netfllx-premium-help-center.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 19 Aug 2026 23:21:48 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nage: 640743\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 12 Aug 2026 13:22:44 GMT\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7mlkV2mz%2Bl3UTiCZRI3wgCgZ5wbeaSOOIB5gg%2BDcg%2FERPDzCZRizADe9wAjtgRg9IOw7kEYj7C%2F5u0AZPcDdzb%2Be4yH%2F%2F5sBoPsE0aZDzsqo8renLov%2Fu%2B1TROBaaMKYwaC%2FE3Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2dce58d9dc78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11347,"size_decoded":1277,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"6c80265e10d70c8dd202cbdfe2960a07","sha1":"f6a17108e533c7c0aab6df332f4b98e6a563b211","sha256":"8acbd1ee1f7793a48b476ec03d1073be5ef7defffd60d28d1bce52127d88183d","sha512":"a7a4c4ec8fe31541a6d39dfce4acd386d4a0243150c06ddf08b5eeabae40a67a6cdd34d85230c8aa2f06af42bc015424cf790c4755ddeb48b3b28312c6bd4947","ssdeep":"192:mDfgBD7UD7zD7gVaDjD2DS9DdD+DeDdDwDvDxDZDTDQHD7cDrDIDiDODeDx:mDfgBD7UD7zD7jDjD2DSDdD+DeDdDwDb","tlshash":"70322465249ba704a1331c8a3b9bb9d84e0b149b205acd293bfdbf099ff78751240f5c","first_seen":"2024-12-11T11:18:20.740527Z","last_seen":"2026-08-19T23:22:24.404346Z","times_seen":189,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netfllx-premium-help-center.com/assets/index-QLn-y-O6.css","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netfllx-premium-help-center.com/","date":"2026-08-19T23:21:48.405Z","timestamp":1787181708405,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netfllx-premium-help-center.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 18:05:24 GMT","end":"Sun, 15 Nov 2026 18:05:23 GMT"},"fingerprint":{"sha1":"16:93:FA:C5:8E:0F:A1:7C:36:28:92:E7:59:EC:E0:A1:A3:5E:EA:6A","sha256":"7A:93:E8:0D:2E:E3:C5:FE:8E:2F:BD:48:79:F5:B5:82:A1:19:5A:3A:8C:C2:93:B9:A8:CF:67:AA:E9:AD:11:47"}}},"request":{"raw":"GET /assets/index-QLn-y-O6.css HTTP/1.1\r\nHost: netfllx-premium-help-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netfllx-premium-help-center.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 23:21:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nlast-modified: Mon, 10 Aug 2026 21:14:38 GMT\r\netag: W/\"34c6c-19fed870a30\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.3, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.3","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":216172,"size_decoded":26649,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5c9feba7f0aca252ee06ddbaef0904d2","sha1":"a059f0c01caa1be54cecb53f6a07f55809471529","sha256":"16324708a5cd269a5cff862cf34aa2892bcc0c0785515e60b742c13f3c937b7f","sha512":"453243ec7e63f2f9d6093e282ea51d98de810d46bf2ee9d70ae6aa59503f01a72787bb11b3ee94fee8edf0ad75c178b9e2d447f09943c45fd1ab9ccef04d3caf","ssdeep":"6144:PLLWBmZgXuqwDaXIhjGD2YssSympHvAIj6FFSMv30B5mSnEH:y","tlshash":"422462b0b078f53bbc13b5f9d2cce48ca509b0e5ad6947edf954521523e3bf2686a900","first_seen":"2026-08-19T13:12:58.342792Z","last_seen":"2026-08-19T23:22:24.406269Z","times_seen":4,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"netfllx-premium-help-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netfllx-premium-help-center.com/api/languages/public","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://netfllx-premium-help-center.com/","date":"2026-08-19T23:21:50.442Z","timestamp":1787181710442,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netfllx-premium-help-center.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 18:05:24 GMT","end":"Sun, 15 Nov 2026 18:05:23 GMT"},"fingerprint":{"sha1":"16:93:FA:C5:8E:0F:A1:7C:36:28:92:E7:59:EC:E0:A1:A3:5E:EA:6A","sha256":"7A:93:E8:0D:2E:E3:C5:FE:8E:2F:BD:48:79:F5:B5:82:A1:19:5A:3A:8C:C2:93:B9:A8:CF:67:AA:E9:AD:11:47"}}},"request":{"raw":"GET /api/languages/public HTTP/1.1\r\nHost: netfllx-premium-help-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netfllx-premium-help-center.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 23:21:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\netag: W/\"1f-fCet4LyQthT/tJmUdudM0Ic/z/c\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.3, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.3","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31,"size_decoded":359,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9b76efeaafe592ae4b18cf49fb1d2983","sha1":"7c27ade0bc90b614ffb4999476e74cd0873fcff7","sha256":"54346d61a71a28655ff25ae12de87df5d5be3d546b77cdbfbb6c91f6041b724f","sha512":"75cd80ca72bba6af5e9f4fcfa32a2854cc872f04abc8ecbbbf6a689504cf765fbb5215e29ee74764f3ce729983ae6f2b9eeb1ce11a626d9fb21c745716c3a040","ssdeep":"","tlshash":"5d800002000008ebe200220020b8bf02a8a8002382002c0aa38c22ccaaa220220c308b","first_seen":"2026-05-17T13:40:56.631577Z","last_seen":"2026-08-19T23:22:24.410824Z","times_seen":30,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"netfllx-premium-help-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netfllx-premium-help-center.com/favicon.ico","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netfllx-premium-help-center.com/","date":"2026-08-19T23:21:50.629Z","timestamp":1787181710629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netfllx-premium-help-center.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 18:05:24 GMT","end":"Sun, 15 Nov 2026 18:05:23 GMT"},"fingerprint":{"sha1":"16:93:FA:C5:8E:0F:A1:7C:36:28:92:E7:59:EC:E0:A1:A3:5E:EA:6A","sha256":"7A:93:E8:0D:2E:E3:C5:FE:8E:2F:BD:48:79:F5:B5:82:A1:19:5A:3A:8C:C2:93:B9:A8:CF:67:AA:E9:AD:11:47"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: netfllx-premium-help-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netfllx-premium-help-center.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 23:21:50 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 9854\r\ncache-control: public, max-age=0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\nlast-modified: Mon, 10 Aug 2026 21:14:38 GMT\r\netag: W/\"267e-19fed870a30\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.3, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.3","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9854,"size_decoded":10264,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"58f54d9ea15176671802bebeee4da4cb","sha1":"4ba1cb97814772435962f3ac25af0def81851735","sha256":"9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3","sha512":"32e6c1ac6220b03bafb9215e4db4cf91352573c34a82accc893b4c7d4d3194d495e241c2f814372930a988688492926fe1d9a5576d2e46378c9f6d1e927c71db","ssdeep":"48:5uZhmwr2VEbaA+8H3J7HZqH0S/DHDHp8HfH5gAaqHwMqHBVqH/6BqHAtvqHAAcqK:shm0AN6YHEOFtwVPmyqPmorAtAco","tlshash":"8a12a02710c35d6cfe016eb8d297ec3a517d40ddeefe82e79a81bd390612146a5cb8e4","first_seen":"2023-09-08T13:51:14Z","last_seen":"2026-08-19T23:22:24.412712Z","times_seen":2190,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"netfllx-premium-help-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans:ital,opsz,wght@0,17..18,400..700;1,17..18,400..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netfllx-premium-help-center.com/","date":"2026-08-19T23:21:48.402Z","timestamp":1787181708402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Google+Sans:ital,opsz,wght@0,17..18,400..700;1,17..18,400..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netfllx-premium-help-center.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 19 Aug 2026 23:21:48 GMT\r\ndate: Wed, 19 Aug 2026 23:21:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21329,"size_decoded":2846,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"8bfe37ef82d62d6d681c16c2a17ecc7d","sha1":"843d0c6aa33b2700d5015ddd191d27e641e4e5d4","sha256":"a28497b478e34b04519a57ce182de562d81af02c681580b3b40ac11d60b5c71d","sha512":"aa332d452d5c27b326f0e878167ddae5005e62f4d130dce6e06d2e8ca96b6b4e4efdec6b6cce022c4695102da61248de13452dd3fbad0d9f09e3c8a8119b3ea3","ssdeep":"384:jyUAAngp+hflVUQpRJau5VkFqYDm4gAJsmcPbqY4L:PzUEPfg","tlshash":"e3a203814007a015ee97bcc637ce7d25ae0d12687100d5b997fe4acadc86da582e4fee","first_seen":"2026-07-24T15:46:27.06878Z","last_seen":"2026-08-19T23:22:24.414322Z","times_seen":26,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":35,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netfllx-premium-help-center.com/assets/index-jidzDrOu.js","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netfllx-premium-help-center.com/","date":"2026-08-19T23:21:48.404Z","timestamp":1787181708404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netfllx-premium-help-center.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 18:05:24 GMT","end":"Sun, 15 Nov 2026 18:05:23 GMT"},"fingerprint":{"sha1":"16:93:FA:C5:8E:0F:A1:7C:36:28:92:E7:59:EC:E0:A1:A3:5E:EA:6A","sha256":"7A:93:E8:0D:2E:E3:C5:FE:8E:2F:BD:48:79:F5:B5:82:A1:19:5A:3A:8C:C2:93:B9:A8:CF:67:AA:E9:AD:11:47"}}},"request":{"raw":"GET /assets/index-jidzDrOu.js HTTP/1.1\r\nHost: netfllx-premium-help-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netfllx-premium-help-center.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 23:21:48 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nlast-modified: Mon, 10 Aug 2026 21:14:38 GMT\r\netag: W/\"138f5b-19fed870a30\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.3, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.3","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1281883,"size_decoded":357252,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49133)","md5":"a0921366be31689caed5e1e4c73fd2b5","sha1":"c3a1fb789038cc420602927c9bec986ab919ee45","sha256":"f5373ee8aa8ec70af99bedd0a75490f728671454135e95f4e444f0765cb3e0e6","sha512":"6242a0a956dab6b68e2de75a0826ea88464391d86d501cb3fbd0220f74c09761098d15607e1fb5c8f409dc2951212cb046c188478d7f57290f78826de45b44be","ssdeep":"12288:c6QNiN9GHA+hO2JhMMWNaj1IZIThvGiSOcxiLfVRF5liS6C/l4q:cMGHAYJmMWNajWiSOcxiLNRF5cSL/aq","tlshash":"ae258dc87195b5699be741e1507f0005b23a2e65b40d8450f17cecee3a78886b2bbfbd","first_seen":"2026-08-19T13:12:58.337256Z","last_seen":"2026-08-19T23:22:24.415421Z","times_seen":4,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"netfllx-premium-help-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netfllx-premium-help-center.com/api/clients/GfujM3K82S63g","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://netfllx-premium-help-center.com/","date":"2026-08-19T23:21:50.440Z","timestamp":1787181710440,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netfllx-premium-help-center.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 18:05:24 GMT","end":"Sun, 15 Nov 2026 18:05:23 GMT"},"fingerprint":{"sha1":"16:93:FA:C5:8E:0F:A1:7C:36:28:92:E7:59:EC:E0:A1:A3:5E:EA:6A","sha256":"7A:93:E8:0D:2E:E3:C5:FE:8E:2F:BD:48:79:F5:B5:82:A1:19:5A:3A:8C:C2:93:B9:A8:CF:67:AA:E9:AD:11:47"}}},"request":{"raw":"GET /api/clients/GfujM3K82S63g HTTP/1.1\r\nHost: netfllx-premium-help-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netfllx-premium-help-center.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 23:21:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.3\r\naccess-control-allow-credentials: true\r\netag: W/\"45-Xww3xYHceLoaxTV5DWGe8PAtWpo\"\r\nstatus: 403 Forbidden\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.3","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69,"size_decoded":394,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f32caea2016b999c43a04790ca89aa1","sha1":"5f0c37c581dc78ba1ac535790d619ef0f02d5a9a","sha256":"de59fa62aa92cf9ea8750b8c653c11200ffe94130d35852b9a1368c7d6410577","sha512":"29fa1857fe859ba2a7d60ddba65e4aa04d711c62c514836ce8c708e13907a5a1739adb3d1d085fca82df966e66dec618123bf2745cdcbea8b6de9627eb2a9852","ssdeep":"","tlshash":"cca0220e038b2cbf00020a2088288ca003fc00c0a03cac2ccc2e80bc228f2cafb3c00e","first_seen":"2026-08-19T13:12:58.328165Z","last_seen":"2026-08-19T23:22:24.41763Z","times_seen":4,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"netfllx-premium-help-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netfllx-premium-help-center.com/assets/geist-latin-wght-normal-Dm3htQBi.woff2","fqdn":"netfllx-premium-help-center.com","domain":"netfllx-premium-help-center.com","tld":"com"},"ip":{"addr":"158.94.210.185","port":443,"asn":786,"as":"Jisc Services Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://netfllx-premium-help-center.com/","date":"2026-08-19T23:21:50.803Z","timestamp":1787181710803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"netfllx-premium-help-center.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 18:05:24 GMT","end":"Sun, 15 Nov 2026 18:05:23 GMT"},"fingerprint":{"sha1":"16:93:FA:C5:8E:0F:A1:7C:36:28:92:E7:59:EC:E0:A1:A3:5E:EA:6A","sha256":"7A:93:E8:0D:2E:E3:C5:FE:8E:2F:BD:48:79:F5:B5:82:A1:19:5A:3A:8C:C2:93:B9:A8:CF:67:AA:E9:AD:11:47"}}},"request":{"raw":"GET /assets/geist-latin-wght-normal-Dm3htQBi.woff2 HTTP/1.1\r\nHost: netfllx-premium-help-center.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netfllx-premium-help-center.com/assets/index-QLn-y-O6.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 19 Aug 2026 23:21:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28400\r\ncache-control: public, max-age=0\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\nlast-modified: Mon, 10 Aug 2026 21:14:38 GMT\r\netag: W/\"6ef0-19fed870a30\"\r\nstatus: 200 OK\r\nx-powered-by: Express, Phusion Passenger(R) 6.1.3, PleskLin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.3","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":28400,"size_decoded":28797,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28400, version 1.0","md5":"284d2af3ed9db2bceefa23a14638db62","sha1":"a59aabd24d95f76b7e97143fa20c6a4c83a00c63","sha256":"0cbbe6286a00f356e98980783cc950a9b693751e04aedfb97d9526ff6dc2b316","sha512":"5381a032969cedc993f4d513a33e24f84cdbd245336902854e7c68440bd6c5d51d8de940656dba9396209dab9680276cffb948270c742c8768b0cfdf2eb6620f","ssdeep":"768:4lKwpkYgBu5H3M5tj/xk6fmzoybLiZDc8IHmSR78YpJgWcF:tEgw5HGtnf0oyb+Crl1pJkF","tlshash":"bbd2e173e2d2355bf3a8ecb902cf3e53ae8b256d82fcd5e5046a085a754970133147d1","first_seen":"2025-09-13T13:12:37.463474Z","last_seen":"2026-08-19T23:22:24.418938Z","times_seen":1115,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-19","alert":"Phishing Block","trigger":"netfllx-premium-help-center.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-19","alert":"Sinkholed","trigger":"netfllx-premium-help-center.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}