{"report_id":"50676f5d-03d7-4db3-90d6-5f5ac547675f","version":6,"status":"done","tags":[],"date":"2025-06-01T12:13:50Z","url":{"schema":"https","addr":"d2k6ptmz3cfbe8.cloudfront.net/","fqdn":"d2k6ptmz3cfbe8.cloudfront.net","domain":"d2k6ptmz3cfbe8.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.154","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"d2k6ptmz3cfbe8.cloudfront.net/","fqdn":"d2k6ptmz3cfbe8.cloudfront.net","domain":"d2k6ptmz3cfbe8.cloudfront.net","tld":"cloudfront.net"},"title":"Netflix world – Watch TV Shows Online, Watch Movies Online"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-10T12:13:50Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"d2k6ptmz3cfbe8.cloudfront.net","ip":{"addr":"3.167.7.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-05-31T16:34:17.68799Z","last_seen":"2025-05-31T16:34:17.68799Z","alert_count":5,"request_count":5,"received_data":150811,"sent_data":2419,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-05-31","alert":"Netflix Inc.","trigger":"d2k6ptmz3cfbe8.cloudfront.net/","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-05-31","alert":"Netflix Inc.","trigger":"d2k6ptmz3cfbe8.cloudfront.net/","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-05-31","alert":"Netflix Inc.","trigger":"d2k6ptmz3cfbe8.cloudfront.net/","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-05-31","alert":"Netflix Inc.","trigger":"d2k6ptmz3cfbe8.cloudfront.net/","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-05-31","alert":"Netflix Inc.","trigger":"d2k6ptmz3cfbe8.cloudfront.net/","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com","meta":null}]},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"d2k6ptmz3cfbe8.cloudfront.net/","fqdn":"d2k6ptmz3cfbe8.cloudfront.net","domain":"d2k6ptmz3cfbe8.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c928a94532c3d18dcc49bf65d6c47d0b","sha1":"f6fc956253864eeaf96fa9f8193dabbb3c6c107f","sha256":"213e8012f9e8935983c6f241313e08e21fe9baf648dca869c60f1595192fae04","sha512":"653888ea8a3116ecb4493ccc65d1b92a39c5d667591fe10a03e2189afc991667a26088d7becc20c6761f594084d460f59004bd7b5ca45bce5a4f9bf83edc8d8b","ssdeep":"","tlshash":"6201f4db31ab16f00eefa4bb2757838234b0501a2c16e0193c1c19a95f54e4a797ab99","size":733,"data":"","first_seen":"2025-05-31T16:34:19.708372Z","last_seen":"2025-06-01T13:04:18.127873Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"d2k6ptmz3cfbe8.cloudfront.net/images/logo.png","fqdn":"d2k6ptmz3cfbe8.cloudfront.net","domain":"d2k6ptmz3cfbe8.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://d2k6ptmz3cfbe8.cloudfront.net/","date":"2025-06-01T12:13:29.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: d2k6ptmz3cfbe8.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2k6ptmz3cfbe8.cloudfront.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 16386\r\nlast-modified: Sat, 10 May 2025 15:21:26 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 01 Jun 2025 12:13:30 GMT\r\netag: \"dcc4094709a2dc14af288844556ff9b7\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 01yJi6x5ztgfNchOZ5TJJOF9L49iNf4lR6iZ9kf0e17xzNyoraWd0A==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16386,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1801 x 756, 8-bit/color RGBA, non-interlaced","md5":"dcc4094709a2dc14af288844556ff9b7","sha1":"0dd0347c55ca4f5332e11d5b742babf8aebf8d6f","sha256":"675dd7b68acf580f893bec532f5b260b8f984b67734a9a6831334b2ff4aad384","sha512":"4087f0a11350973c0776955f5a74bdb1c2f26cfe82f06091fb837c1e4f8f2d60167b4df00b1fa83dd0b0c85cc52881800ec83d171efc8b66fe9feff38c74c49e","ssdeep":"192:SST1mUxL6MmUfP14/x7VNutRL2NbsMLu/D9SgSm3mamtPLohM5QyfTLF7yX6EgMg:t5mALzG/xyLydG0tPpXug+WAN30","tlshash":"b172da46d773c7aff656d57b08237e38f2e502899c40672866b51ef12e0b36e9a33844","first_seen":"2023-05-02T01:35:29Z","last_seen":"2026-04-03T20:13:21.524389Z","times_seen":2579,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":464,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-05-31","alert":"Netflix Inc.","trigger":"d2k6ptmz3cfbe8.cloudfront.net/","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d2k6ptmz3cfbe8.cloudfront.net/assets/css/landing-pages.css","fqdn":"d2k6ptmz3cfbe8.cloudfront.net","domain":"d2k6ptmz3cfbe8.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://d2k6ptmz3cfbe8.cloudfront.net/","date":"2025-06-01T12:13:29.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /assets/css/landing-pages.css HTTP/1.1\r\nHost: d2k6ptmz3cfbe8.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2k6ptmz3cfbe8.cloudfront.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 4310\r\nlast-modified: Sun, 06 Apr 2025 14:21:59 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 01 Jun 2025 12:13:30 GMT\r\netag: \"5406cab86b37b8cecf768e4bdc9ab5b8\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: uYqwepJvIk8jj4rgh6bmm4znLVZMVqIeMyhlIzKELRIPkRvQEKGAhA==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4310,"size_decoded":0,"mime_type":"text/css","magic":"exported SGML document, ASCII text","md5":"5406cab86b37b8cecf768e4bdc9ab5b8","sha1":"83b01620ddb08a485de464678ad5cdc58063fb6d","sha256":"62955c785e2cb2482fabc85ce612f57bb153962857bc8c9b22494238288e5d2c","sha512":"5a5c748cc8913bae3d4b674a869512813e68c986ac0a03f1eb8030846cc99441b32bb880f4f7a6f834bae7fb6015a67a80328cf8a15dd27d7a01d5947844d52c","ssdeep":"96:aJ3wFuTdTUCg/Alr3WrVh7Su72b2FTa3jU3dtu3wvG:C3sq2Glr2Vh7Su2JMfG","tlshash":"7191238ba9b32845f443cc2c7bbb2794635e95034a0dc97a3ae5b248cfc91d561727cc","first_seen":"2025-05-31T16:34:19.704308Z","last_seen":"2025-08-12T04:41:53.447471Z","times_seen":10,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-05-31","alert":"Netflix Inc.","trigger":"d2k6ptmz3cfbe8.cloudfront.net/","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d2k6ptmz3cfbe8.cloudfront.net/images/netflix%20clone%20home%20page%20background%20image%20multiple%20shows%20collage.jpg","fqdn":"d2k6ptmz3cfbe8.cloudfront.net","domain":"d2k6ptmz3cfbe8.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://d2k6ptmz3cfbe8.cloudfront.net/","date":"2025-06-01T12:13:29.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /images/netflix%20clone%20home%20page%20background%20image%20multiple%20shows%20collage.jpg HTTP/1.1\r\nHost: d2k6ptmz3cfbe8.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2k6ptmz3cfbe8.cloudfront.net/assets/css/landing-pages.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 122352\r\nlast-modified: Sun, 06 Apr 2025 14:15:12 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 01 Jun 2025 12:13:30 GMT\r\netag: \"032443d69139110b2e85d6802bd81303\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 1EvnF8XPt1Z_LSTtAIYUAB-XBahaeKdcmzF_HTdr_-JGWaOLLnyNjQ==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":122352,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"032443d69139110b2e85d6802bd81303","sha1":"ba387c671e04b5310bf15f26ec6865b37b501503","sha256":"c90d53d33368536bb3d9486f430575e23f22ad5bcf821a487fbbf0c44ad2b93f","sha512":"b18d40d053c9cc990fbdbe8ef14090b6da5ac888e79d5eafa79880734fa26dd19b42c6123d0ba6bf62573484856edd7a02b56c8d4d77368389417d85849071ef","ssdeep":"3072:KWK/XhVIOXLRJEgtHNV2b3gY48elPNkUF8k5:KWWIGLR192b3gJPN0k5","tlshash":"8ac312128586e192a76aa3ba727b1901ce1dcac4b72f01f2a7515e39637f587c3211f3","first_seen":"2024-01-16T02:59:11Z","last_seen":"2026-03-22T23:11:57.487825Z","times_seen":28,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-05-31","alert":"Netflix Inc.","trigger":"d2k6ptmz3cfbe8.cloudfront.net/","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d2k6ptmz3cfbe8.cloudfront.net/favicon.ico","fqdn":"d2k6ptmz3cfbe8.cloudfront.net","domain":"d2k6ptmz3cfbe8.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://d2k6ptmz3cfbe8.cloudfront.net/","date":"2025-06-01T12:13:30.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: d2k6ptmz3cfbe8.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://d2k6ptmz3cfbe8.cloudfront.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/xml\r\nserver: AmazonS3\r\ndate: Sun, 01 Jun 2025 12:13:29 GMT\r\nx-cache: Error from cloudfront\r\nvia: 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: U2FjXb0BRwhGy-5jRL1NGDE6jat1RIItmZ-i_sJmjWnp8G_B2KYEYQ==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":111,"size_decoded":0,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"b6c792c0f58fa3ec92173c074885221f","sha1":"0dde8fd9111d807e202b2fb37f8bcc4052fd861e","sha256":"a824bc7739e226e1b40ea0f8c4e4f4c6f796fc3b4abfa6e9abe3bd119a30d938","sha512":"83c8b765edcc44f6aaf19445881c315239095b4ac90e9bb85716084db9b9ec75f74876b49340cbaf5ae8d173e517af9eaf82e628d1d32090cd0b4ac8a5d08875","ssdeep":"","tlshash":"51b09201b208a82a19514e3a373cf110e310593102c426a8aa96a88317828914d08325","first_seen":"2025-01-13T10:02:12.3839Z","last_seen":"2026-04-03T19:38:32.804797Z","times_seen":4676,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-05-31","alert":"Netflix Inc.","trigger":"d2k6ptmz3cfbe8.cloudfront.net/","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"d2k6ptmz3cfbe8.cloudfront.net/","fqdn":"d2k6ptmz3cfbe8.cloudfront.net","domain":"d2k6ptmz3cfbe8.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.155","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-01T12:13:28.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: d2k6ptmz3cfbe8.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 4341\r\nlast-modified: Sat, 10 May 2025 15:28:17 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sun, 01 Jun 2025 12:13:29 GMT\r\netag: \"cee1e1913d424378f46d34e73e02950e\"\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 331956c71b3e587b085083fed0bc8c3e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: zd2jNH4p6X-imeUQ9zE3Y8EkX6yuO7Vas22BuKBj6DyMdugQR72icA==\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4341,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"cee1e1913d424378f46d34e73e02950e","sha1":"294a59f2b5cf3518bd72328d37a802ce1b925822","sha256":"4f1745292b1a29e44dd307c35d453b75a782228089ee0fe48648c1e8b5ed963c","sha512":"ac3e8e6d304e39877509bbdde0c4290e97c256e6b401ba804f6696100c6562cc970f7e2da84f4fb52b73e07f08bc396b19751920646b9aaca00a96fc61b38cfe","ssdeep":"48:Soioh/lfVYxZraJvGF/Tdsn1smqeIakui6Ryr0gkfsfH6h8VMSCOWpw0ig+6K+0B:DIyeTSsmqMdiEgkfJkMNliJiiyhM","tlshash":"2491c97540fa1ada0685817773e36b427ea18187e70610ac789c046a7fecd4eba773d8","first_seen":"2025-05-31T16:34:19.702885Z","last_seen":"2025-06-01T13:04:18.125764Z","times_seen":3,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":64,"dns":19,"connect":16,"send":0,"wait":494,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"","description":"OpenPhish","scan_date":"2025-05-31","alert":"Netflix Inc.","trigger":"d2k6ptmz3cfbe8.cloudfront.net/","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com","meta":null}],"urlquery":null}}]}
