{"report_id":"539edf10-e7cd-47e4-9d5d-4205aa885336","version":0,"status":"done","tags":["netflix","phishing"],"date":"2026-07-26T12:41:29Z","url":{"schema":"http","addr":"usenumsupp.com","fqdn":"usenumsupp.com","domain":"usenumsupp.com","tld":"com"},"ip":{"addr":"109.235.74.225","port":0,"asn":25151,"as":"Cyso Group B.V.","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"title":"Netflix","dom":{"size":4953,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2278)","md5":"3ec03683db9327dfeac68439bf24f289","sha1":"7ec107dd23026c8b32e83d2cd87611da602b54ce","sha256":"0f702f7016c62d13e5831b22b0933075b27a7b5e8c57d976a8db49436eda83a9","sha512":"dc1fa992813417958e41442d9881e8d9f2a94a5c8ef6319eea935cc97b83ac1e8d2e7efba99874199ece8f4aaaf52ff4ba6820bc01a5bd9a5ebd80bfccf292e5","ssdeep":"48:vCLIOaKqhNzNVQTzweMjbxm3ODTlghYy11rZISJryX0cw+4h+CTv7f5gXo5sxm3L:qLIVLPzNVQAeMkOynOhVI","tlshash":"e0a1b521a7504029ed274295b4b0fb4d6633b34af9c5ca6839faa320d3cddf789175e8","dom_hash":"domhashc3d37c1c3938078debafb558d393069c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"usenumsupp.com","fqdn":"usenumsupp.com","domain":"usenumsupp.com","tld":"com"},"ip":{"addr":"109.235.74.225","port":0,"asn":25151,"as":"Cyso Group B.V.","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-30T12:41:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"usenumsupp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"auth-netfliix-mov.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-07-19T23:03:44.758639Z","alert_count":0,"request_count":7,"received_data":3742957,"sent_data":3739,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-07-19T22:48:34.906849Z","alert_count":0,"request_count":4,"received_data":76584,"sent_data":2894,"comment":"","tags":null,"fingerprints":null},{"fqdn":"usenumsupp.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":2,"received_data":183,"sent_data":882,"comment":"","tags":null,"fingerprints":[{"name":"lighttpd:1.4.63","description":"Lighttpd is an open-source web server optimised for speed-critical environment.","website":"https://www.lighttpd.net","common_platform_enumeration":"","icon":"lighttpd.svg","categories":["Web servers"]}]},{"fqdn":"auth-netfliix-mov.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-04T18:04:34.644238Z","last_seen":"2026-07-26T12:02:51.465911Z","alert_count":32,"request_count":8,"received_data":799272,"sent_data":4117,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"back-netflix-4-otp-production.up.railway.app","ip":{"addr":"69.46.46.44","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"domain_registered":"2019-08-01","domain_rank":0,"first_seen":"2026-07-26T12:02:53.712887Z","last_seen":"2026-07-26T12:02:53.712887Z","alert_count":0,"request_count":3,"received_data":1566,"sent_data":1742,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":1,"received_data":40961,"sent_data":562,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/assets/index-B_ILOgEz.js","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dd9e484507bd152f42f1c5a93834875","sha1":"478946f9215bdbee4c0e98dffc38de661b171515","sha256":"ad87a7cab900d61cfa4baef2fdd5d3240232322c897a5332643dcf63e54bb706","sha512":"7a46f46316034fac3d47ad453a4cc70c6604eb8307384b2b3e569d9a107a0946d647b1f960cf75dcb4ec813ca6c4858f52333eca674a41b88e505bec35dc9a42","ssdeep":"12288:M/v4zjUx01KdNKRr+DpkHUhs/zNcdG7gZfuNUpEEZ5H/:M/4TKdNKRSDpkHUhs/5cdG7gZJ","tlshash":"5fb48da871ad711a6e6346e550af0107b23d1922b80d8871b16cdc7a37f9489b17bffc","size":510100,"data":"","first_seen":"2026-05-04T18:04:44.136766Z","last_seen":"2026-07-26T12:42:21.532706Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/_vercel/insights/script.js","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","size":2495,"data":"","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-08-01T16:22:37.394873Z","times_seen":18751,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadcallback\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4833f4440ff6485affb9e2506c53b664","sha1":"31c139ca59a84a76121a9a13b7b66e9fa574ef92","sha256":"2566974b15a1df73b0f4c2cde35f84e6ab98dd531710a409b18828a728e8edfc","sha512":"fc489f9f64d024ca30d38934c55bcdcf6958c8ff1ec46efed57630e0f5b2ac53f688a837080cd6900f01b3ffe2c92b52e5c7f7b6ed4c3e61f19ed4acdca00736","ssdeep":"","tlshash":"ca1102731e04f0391f3219d5e2fedab1e452741df16885d8a515dad42eaaccbcf05445","size":1035,"data":"","first_seen":"2026-07-15T15:13:07.200571Z","last_seen":"2026-08-01T13:03:46.543506Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__da.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"9916829d8e6759406dc8d6efd3ed972e","sha1":"5bdcf185cb761ca27e73e2e5f5b644996d77e27e","sha256":"2c34e48cbc4f2f5cd4eb933a80a34dcde6585e4380035de9bf56f6dd7dae53ef","sha512":"375ed2b0987c76cafd9c0aee226cb7d32cb8efc53037f00753da149ab862d9051ac61ce0fceb0da7be49e5c390925591026bc0cfa1a1b05a7fda21de01d8504c","ssdeep":"12288:hrIkvNz6H4+glqoTGPc5Z8K79FIc5iqXo8hkigcHxFrogRkPvAMi:V96H70ZtschIcHrqPNi","tlshash":"75156beeb29678b1432271f61137201e577e956dc48c485db0a59cf82eb8c0e70b6eb7","size":892573,"data":"","first_seen":"2026-07-15T05:17:59.355248Z","last_seen":"2026-07-26T12:42:21.537515Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=da\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026bft=0dAFcWeA7CnG7W-L640ezVolijI5yx7T_9VId9At-MsDYgRmLVbK4_zeaLXFmZo9i7UTLnEV-3sFEldFMNonP2KeJMXk7bo4ZMUQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-01T16:13:41.277261Z","times_seen":500443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=da\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026bft=0dAFcWeA7CnG7W-L640ezVolijI5yx7T_9VId9At-MsDYgRmLVbK4_zeaLXFmZo9i7UTLnEV-3sFEldFMNonP2KeJMXk7bo4ZMUQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f36aa670237a065d005298584da5cdfa","sha1":"b4751fbfc354335867e8e17e12f3fc7b611544ee","sha256":"18479e00b265fd12ddb8392750462fbcc56a491fb93479e5c09b7fbc939d73cc","sha512":"96ad09f84ed9ace8132b6287641be0ae207a00040d302c9269928c5fb970d7ba235000ea520103140fe9e47106d19c6b2d33a56341d20b97f2337d62443aa970","ssdeep":"","tlshash":"51c022e332020df74c207c510821409e0cda0927e02393f09ad23d04fca8c103a009b8","size":191,"data":"","first_seen":"2026-07-26T12:02:53.762769Z","last_seen":"2026-07-26T12:42:21.562642Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/_vercel/speed-insights/script.js","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e7c215a9775d8de91b65e4ed9224d36","sha1":"54fa36a3e7e1567fe32962744a900ca7435e5768","sha256":"c703720710415599d2f0b3f31fbfda63e34d6d19e730bada78b9b92197564f5b","sha512":"be40bbfc66d169c8e0cc103f58bbee31c42df31ec22451fc38ed816c48602c6ed68b06a55760398875fa79cf8f89b3ff5c18ffd2eaa1e8553be115831bf22923","ssdeep":"192:VysJMc+IXp1gFClf9aiRRQGbLOlHBWCca/o7GF0Ox42u1p75HsI9OqmxQpt8YMNq:VbOrIa5QA/3vudxnlMNZI","tlshash":"b04286a9b680713907e76176a03f2207733b25856847405c823bebc62d3d58da76bf6a","size":12567,"data":"","first_seen":"2025-12-11T18:36:18.472461Z","last_seen":"2026-08-01T16:22:37.416651Z","times_seen":15590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","size":891014,"data":"","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-08-01T16:13:41.270324Z","times_seen":15255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026co=aHR0cHM6Ly9hdXRoLW5ldGZsaWl4LW1vdi52ZXJjZWwuYXBwOjQ0Mw..\u0026hl=da\u0026type=image\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026theme=light\u0026size=normal\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=279emvp3spkj","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-01T16:13:41.277261Z","times_seen":500443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026co=aHR0cHM6Ly9hdXRoLW5ldGZsaWl4LW1vdi52ZXJjZWwuYXBwOjQ0Mw..\u0026hl=da\u0026type=image\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026theme=light\u0026size=normal\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=279emvp3spkj","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"316877f1672ef925b042743be4dd403c","sha1":"670945e345c8bc929fbdbdecdcc02d4188dc7a23","sha256":"0f78e7d4868ddb85769c05d002ba0d7a1d10e5c3be05f0b807840d63cdb76897","sha512":"fde1c8853a34ab9190f3155722b42215f86ae7a8eff3163826b37a8d9e4e63907abce93b9a135f5181673730f95c1d6268c5cc54c28752870d287dad0a07a0df","ssdeep":"768:OGy3sa826+pcovC290uReNzHMM4bLl7xmCuX0nh3itYMgjIykT:Oxq+xC2+2k7MvIXShgb","tlshash":"2df2ad0d9c0b38a7cfafc7e35fe1ab54513d0652148e116c74f604c36aaaac7ba4a1dc","size":36308,"data":"","first_seen":"2026-07-26T12:41:37.533294Z","last_seen":"2026-07-26T12:41:37.533294Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=da\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"794756e88a3106bd4f961bfbd5bc43a8","sha1":"71e26bae4ef4cd3a5d00a936fdc995ad4dd365b4","sha256":"61bbfffec262090578daae5bdefc600f38508381f8ca485fa18de94b7992b406","sha512":"5246d4e9c23677942e0350a25997d03e49e6c7d06d70345d0121dbe053756218587192096a2b1897a4e382baee5a1e62ccb3a136e5d7f5453a319e9337375184","ssdeep":"","tlshash":"39b01273e614c05a1c00004ac827d7ade002402cf6b080ec4058dfd402d7aa78505800","size":102,"data":"","first_seen":"2026-07-15T05:17:59.361454Z","last_seen":"2026-07-26T12:42:21.536404Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Error fetching IP:NetworkError when attempting to fetch resource.","filename":"https://auth-netfliix-mov.vercel.app/assets/index-B_ILOgEz.js","line_number":334,"column_number":5046},{"level":"error","text":"❌ Error checking blockNetworkError when attempting to fetch resource.","filename":"https://auth-netfliix-mov.vercel.app/assets/index-B_ILOgEz.js","line_number":334,"column_number":37306},{"level":"error","text":"❌ Error checking blockNetworkError when attempting to fetch resource.","filename":"https://auth-netfliix-mov.vercel.app/assets/index-B_ILOgEz.js","line_number":334,"column_number":37306},{"level":"error","text":"❌ Error checking blockNetworkError when attempting to fetch resource.","filename":"https://auth-netfliix-mov.vercel.app/assets/index-B_ILOgEz.js","line_number":334,"column_number":37306}]},"http":[{"url":{"schema":"https","addr":"back-netflix-4-otp-production.up.railway.app/api/ipinfo","fqdn":"back-netflix-4-otp-production.up.railway.app","domain":"back-netflix-4-otp-production.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.44","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:03.333Z","timestamp":1785069663333,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:01:30 GMT","end":"Thu, 01 Oct 2026 14:01:29 GMT"},"fingerprint":{"sha1":"92:59:15:31:44:9B:F5:6E:5F:D4:C8:D5:2F:30:8C:5E:45:53:70:E6","sha256":"35:1E:C2:1C:C7:A4:3F:88:1A:86:F3:CE:2F:48:72:CF:30:72:44:CD:04:2B:BC:F6:9B:BE:B7:E6:39:D3:10:B6"}}},"request":{"raw":"GET /api/ipinfo HTTP/1.1\r\nHost: back-netflix-4-otp-production.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nOrigin: https://auth-netfliix-mov.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://auth-netfliix-mov.vercel.app\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 26 Jul 2026 12:41:24 GMT\r\netag: W/\"89-3RHjKtwXoi1gP3jFoVclNN1gcr4\"\r\nserver: railway-hikari\r\nvary: Origin\r\nx-powered-by: Express\r\nx-railway-request-id: R9HUqQ7FQDqlpBUKs_GTAg\r\ncontent-length: 137\r\nx-hikari-trace: ams1.9qww\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":137,"size_decoded":582,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a887e384f28950d517872f339c3844ac","sha1":"dd11e32adc17a22d603f78c5a1572534dd6072be","sha256":"3e628ea61304832d8a06275a9652f63e16529f22a394629a5dad1fdc7d389675","sha512":"a317bffa106f635c0a20897314eecd9977f51a297be8160bd3e366785caccf6aac99c9afe37e3e952a90d2f5a3729693cc195d45e6f2da0a54f80e24a65c8284","ssdeep":"","tlshash":"b3c02b0e30307d65d43c4304103bfe1100fc1343c2498d06d3dd6b18c9602dc3080062","first_seen":"2026-06-08T14:17:53.714784Z","last_seen":"2026-08-01T03:19:16.570633Z","times_seen":15,"resource_available":false,"data":null}},"time_used":41302,"timings":{"blocked":-1,"dns":20557,"connect":20557,"send":0,"wait":160,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"back-netflix-4-otp-production.up.railway.app/api/track","fqdn":"back-netflix-4-otp-production.up.railway.app","domain":"back-netflix-4-otp-production.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.44","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:03.348Z","timestamp":1785069663348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:01:30 GMT","end":"Thu, 01 Oct 2026 14:01:29 GMT"},"fingerprint":{"sha1":"92:59:15:31:44:9B:F5:6E:5F:D4:C8:D5:2F:30:8C:5E:45:53:70:E6","sha256":"35:1E:C2:1C:C7:A4:3F:88:1A:86:F3:CE:2F:48:72:CF:30:72:44:CD:04:2B:BC:F6:9B:BE:B7:E6:39:D3:10:B6"}}},"request":{"raw":"OPTIONS /api/track HTTP/1.1\r\nHost: back-netflix-4-otp-production.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nOrigin: https://auth-netfliix-mov.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://auth-netfliix-mov.vercel.app\r\ndate: Sun, 26 Jul 2026 12:41:23 GMT\r\nserver: railway-hikari\r\nvary: Origin, Access-Control-Request-Headers\r\nx-powered-by: Express\r\nx-railway-request-id: hhD5CZYkQuylESSmnbOCzg\r\ncontent-length: 0\r\nx-hikari-trace: ams1.9qww\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":492,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T16:16:08.429382Z","times_seen":17656144,"resource_available":true,"data":null}},"time_used":41157,"timings":{"blocked":-1,"dns":20535,"connect":20550,"send":0,"wait":37,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026co=aHR0cHM6Ly9hdXRoLW5ldGZsaWl4LW1vdi52ZXJjZWwuYXBwOjQ0Mw..\u0026hl=da\u0026type=image\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026theme=light\u0026size=normal\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=279emvp3spkj","date":"2026-07-26T12:41:24.888Z","timestamp":1785069684888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 02:17:07 GMT\r\nexpires: Fri, 23 Jul 2027 02:17:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 296657\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":40128,"size_decoded":40961,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-01T16:13:41.24739Z","times_seen":952067,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=da\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026bft=0dAFcWeA7CnG7W-L640ezVolijI5yx7T_9VId9At-MsDYgRmLVbK4_zeaLXFmZo9i7UTLnEV-3sFEldFMNonP2KeJMXk7bo4ZMUQ","date":"2026-07-26T12:41:25.621Z","timestamp":1785069685621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Jul 2026 21:55:21 GMT\r\nexpires: Wed, 21 Jul 2027 21:55:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 398764\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"62429037d6285782824616384b26132e","sha1":"b126600bf1a3041616793c05c1ce749dad01d952","sha256":"31d79d19622679a61ce0ee180498b570d78cf2202cfad7f25d991049d780f564","sha512":"9dc9ee85a14baef9a9c9881cd82c92b086b4d8c902e36dcaeacdae5627da8f9de5791c8305b747b16d512e46f4cae5949d4afaa9f80a35d9395c4623451d13f6","ssdeep":"1536:a7Rpgh9C9ToL9gTNfWNfK4RxMnHZzhXwWx7W1bx7:a7ArC9ULiTYNC4Rs9Xi","tlshash":"eb838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-07-14T22:23:00.889376Z","last_seen":"2026-08-01T16:13:41.246776Z","times_seen":13473,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026co=aHR0cHM6Ly9hdXRoLW5ldGZsaWl4LW1vdi52ZXJjZWwuYXBwOjQ0Mw..\u0026hl=da\u0026type=image\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026theme=light\u0026size=normal\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=279emvp3spkj","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:24.511Z","timestamp":1785069684511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026co=aHR0cHM6Ly9hdXRoLW5ldGZsaWl4LW1vdi52ZXJjZWwuYXBwOjQ0Mw..\u0026hl=da\u0026type=image\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026theme=light\u0026size=normal\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=279emvp3spkj HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 26 Jul 2026 12:41:24 GMT\r\ncontent-security-policy: script-src 'nonce-R6lHBXAi2yWxLZl-LlzbnQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":54773,"size_decoded":29504,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36314)","md5":"4113c9e9242b520d535e335dd1f0abf4","sha1":"e264aff7830942e1a13ef77d5006b104f3dba2f3","sha256":"8a3fc88470f6e42cade097e1e2ed83ad7f900cfbae5f462ff5d290c8374eb36d","sha512":"116c8b8ceeba827dd10f8019f6edc432e44a6615a211c4fe93a268566de8b64b1ce57f92ae0904dbc1b3d52d831334179c5735ec1decea33e9c81fa526ce4b98","ssdeep":"768:QFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+3/m7ZGy3sa826+pcovC290uReNzHMM4bb:u+k57Zxq+xC2+2k7MvIXShgS","tlshash":"8f336c0408072442db9b89e227da7f30fa2e4211304a9079a7fd5797fedbdd7a25939c","first_seen":"2026-07-26T12:41:37.520935Z","last_seen":"2026-07-26T12:41:37.520935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"usenumsupp.com/","fqdn":"usenumsupp.com","domain":"usenumsupp.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T12:41:02.662Z","timestamp":1785069662662,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: usenumsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T16:16:08.429382Z","times_seen":17656144,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"usenumsupp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?onload=onloadcallback\u0026render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:24.115Z","timestamp":1785069684115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api.js?onload=onloadcallback\u0026render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 26 Jul 2026 12:41:24 GMT\r\ndate: Sun, 26 Jul 2026 12:41:24 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":1035,"size_decoded":1306,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1035), with no line terminators","md5":"4833f4440ff6485affb9e2506c53b664","sha1":"31c139ca59a84a76121a9a13b7b66e9fa574ef92","sha256":"2566974b15a1df73b0f4c2cde35f84e6ab98dd531710a409b18828a728e8edfc","sha512":"fc489f9f64d024ca30d38934c55bcdcf6958c8ff1ec46efed57630e0f5b2ac53f688a837080cd6900f01b3ffe2c92b52e5c7f7b6ed4c3e61f19ed4acdca00736","ssdeep":"","tlshash":"ca1102731e04f0391f3219d5e2fedab1e452741df16885d8a515dad42eaaccbcf05445","first_seen":"2026-07-15T15:13:07.200571Z","last_seen":"2026-08-01T13:03:46.543506Z","times_seen":237,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":3,"connect":23,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=da\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026co=aHR0cHM6Ly9hdXRoLW5ldGZsaWl4LW1vdi52ZXJjZWwuYXBwOjQ0Mw..\u0026hl=da\u0026type=image\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026theme=light\u0026size=normal\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=279emvp3spkj","date":"2026-07-26T12:41:24.984Z","timestamp":1785069684984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=da\u0026v=A7KpaEASfhDcK0nXxgQEyyYv HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026co=aHR0cHM6Ly9hdXRoLW5ldGZsaWl4LW1vdi52ZXJjZWwuYXBwOjQ0Mw..\u0026hl=da\u0026type=image\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026theme=light\u0026size=normal\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=279emvp3spkj\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Sun, 26 Jul 2026 12:41:24 GMT\r\ndate: Sun, 26 Jul 2026 12:41:24 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"794756e88a3106bd4f961bfbd5bc43a8","sha1":"71e26bae4ef4cd3a5d00a936fdc995ad4dd365b4","sha256":"61bbfffec262090578daae5bdefc600f38508381f8ca485fa18de94b7992b406","sha512":"5246d4e9c23677942e0350a25997d03e49e6c7d06d70345d0121dbe053756218587192096a2b1897a4e382baee5a1e62ccb3a136e5d7f5453a319e9337375184","ssdeep":"","tlshash":"39b01273e614c05a1c00004ac827d7ade002402cf6b080ec4058dfd402d7aa78505800","first_seen":"2026-07-15T05:17:59.361454Z","last_seen":"2026-07-26T12:42:21.536404Z","times_seen":5,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=da\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026bft=0dAFcWeA7CnG7W-L640ezVolijI5yx7T_9VId9At-MsDYgRmLVbK4_zeaLXFmZo9i7UTLnEV-3sFEldFMNonP2KeJMXk7bo4ZMUQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:25.551Z","timestamp":1785069685551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:25 GMT","end":"Mon, 21 Sep 2026 08:37:24 GMT"},"fingerprint":{"sha1":"D9:DA:81:30:78:3E:9C:6B:5F:9D:18:52:0E:BE:6D:52:2F:FB:33:E0","sha256":"EA:E2:2D:87:EC:9C:D6:51:9D:59:E4:13:35:3B:97:14:E3:DA:58:2D:1C:69:19:41:54:94:25:C3:94:17:F3:0C"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=da\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026bft=0dAFcWeA7CnG7W-L640ezVolijI5yx7T_9VId9At-MsDYgRmLVbK4_zeaLXFmZo9i7UTLnEV-3sFEldFMNonP2KeJMXk7bo4ZMUQ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 26 Jul 2026 12:41:25 GMT\r\ncontent-security-policy: script-src 'nonce-Of1FqcM4_1VhuKWfoi1Vww' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":17035,"size_decoded":3278,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"85ee198a60c6255679eaff55d5ed4822","sha1":"507f3c4fedeb925f5359e891a30100b84fd0f6a6","sha256":"e2d1f4d7c50de78a64d883d69b0d749459cfc4671d8ea232ccb9ebf85dc189d9","sha512":"c87a881b82afaa1bb6de183b9b12f02ed0466ab7cdae9d57b37c0a87a4c637359adc4d91788f5ede97eccdfc96a203c9edb8ce8761378a5d21c55ae992e8576b","ssdeep":"384:IjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/t:IFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+E","tlshash":"65720f50041744009b835ce223ce7f30fe4e92517146d0b1abfdab6beedbda6926939d","first_seen":"2026-07-26T12:41:37.523433Z","last_seen":"2026-07-26T12:41:37.523433Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/assets/index-B_ILOgEz.js","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:03.028Z","timestamp":1785069663028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /assets/index-B_ILOgEz.js HTTP/1.1\r\nHost: auth-netfliix-mov.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 793388\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-B_ILOgEz.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sun, 26 Jul 2026 12:41:03 GMT\r\netag: W/\"7dd9e484507bd152f42f1c5a93834875\"\r\nlast-modified: Fri, 17 Jul 2026 08:17:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7zhvf-1785069663034-0289d4f1ebf3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":510100,"size_decoded":162799,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35061)","md5":"7dd9e484507bd152f42f1c5a93834875","sha1":"478946f9215bdbee4c0e98dffc38de661b171515","sha256":"ad87a7cab900d61cfa4baef2fdd5d3240232322c897a5332643dcf63e54bb706","sha512":"7a46f46316034fac3d47ad453a4cc70c6604eb8307384b2b3e569d9a107a0946d647b1f960cf75dcb4ec813ca6c4858f52333eca674a41b88e505bec35dc9a42","ssdeep":"12288:M/v4zjUx01KdNKRr+DpkHUhs/zNcdG7gZfuNUpEEZ5H/:M/4TKdNKRSDpkHUhs/5cdG7gZJ","tlshash":"5fb48da871ad711a6e6346e550af0107b23d1922b80d8871b16cdc7a37f9489b17bffc","first_seen":"2026-05-04T18:04:44.136766Z","last_seen":"2026-07-26T12:42:21.532706Z","times_seen":8,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"auth-netfliix-mov.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__da.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026co=aHR0cHM6Ly9hdXRoLW5ldGZsaWl4LW1vdi52ZXJjZWwuYXBwOjQ0Mw..\u0026hl=da\u0026type=image\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026theme=light\u0026size=normal\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=279emvp3spkj","date":"2026-07-26T12:41:24.596Z","timestamp":1785069684596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__da.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382649\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Jul 2026 21:59:21 GMT\r\nexpires: Wed, 21 Jul 2027 21:59:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 398523\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":892573,"size_decoded":383536,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (534)","md5":"9916829d8e6759406dc8d6efd3ed972e","sha1":"5bdcf185cb761ca27e73e2e5f5b644996d77e27e","sha256":"2c34e48cbc4f2f5cd4eb933a80a34dcde6585e4380035de9bf56f6dd7dae53ef","sha512":"375ed2b0987c76cafd9c0aee226cb7d32cb8efc53037f00753da149ab862d9051ac61ce0fceb0da7be49e5c390925591026bc0cfa1a1b05a7fda21de01d8504c","ssdeep":"12288:hrIkvNz6H4+glqoTGPc5Z8K79FIc5iqXo8hkigcHxFrogRkPvAMi:V96H70ZtschIcHrqPNi","tlshash":"75156beeb29678b1432271f61137201e577e956dc48c485db0a59cf82eb8c0e70b6eb7","first_seen":"2026-07-15T05:17:59.355248Z","last_seen":"2026-07-26T12:42:21.537515Z","times_seen":5,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/_vercel/speed-insights/script.js","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:03.136Z","timestamp":1785069663136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /_vercel/speed-insights/script.js HTTP/1.1\r\nHost: auth-netfliix-mov.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 12968\r\ncache-control: public, max-age=2678400\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 26 Jul 2026 09:04:54 GMT\r\netag: W/\"0e7c215a9775d8de91b65e4ed9224d36\"\r\nlast-modified: Sat, 25 Jul 2026 08:22:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::qbl4l-1785069663142-de569698919e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12567,"size_decoded":5335,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12567), with no line terminators","md5":"0e7c215a9775d8de91b65e4ed9224d36","sha1":"54fa36a3e7e1567fe32962744a900ca7435e5768","sha256":"c703720710415599d2f0b3f31fbfda63e34d6d19e730bada78b9b92197564f5b","sha512":"be40bbfc66d169c8e0cc103f58bbee31c42df31ec22451fc38ed816c48602c6ed68b06a55760398875fa79cf8f89b3ff5c18ffd2eaa1e8553be115831bf22923","ssdeep":"192:VysJMc+IXp1gFClf9aiRRQGbLOlHBWCca/o7GF0Ox42u1p75HsI9OqmxQpt8YMNq:VbOrIa5QA/3vudxnlMNZI","tlshash":"b04286a9b680713907e76176a03f2207733b25856847405c823bebc62d3d58da76bf6a","first_seen":"2025-12-11T18:36:18.472461Z","last_seen":"2026-08-01T16:22:37.416651Z","times_seen":15590,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"auth-netfliix-mov.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026co=aHR0cHM6Ly9hdXRoLW5ldGZsaWl4LW1vdi52ZXJjZWwuYXBwOjQ0Mw..\u0026hl=da\u0026type=image\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026theme=light\u0026size=normal\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=279emvp3spkj","date":"2026-07-26T12:41:24.594Z","timestamp":1785069684594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Jul 2026 21:55:21 GMT\r\nexpires: Wed, 21 Jul 2027 21:55:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 398763\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"62429037d6285782824616384b26132e","sha1":"b126600bf1a3041616793c05c1ce749dad01d952","sha256":"31d79d19622679a61ce0ee180498b570d78cf2202cfad7f25d991049d780f564","sha512":"9dc9ee85a14baef9a9c9881cd82c92b086b4d8c902e36dcaeacdae5627da8f9de5791c8305b747b16d512e46f4cae5949d4afaa9f80a35d9395c4623451d13f6","ssdeep":"1536:a7Rpgh9C9ToL9gTNfWNfK4RxMnHZzhXwWx7W1bx7:a7ArC9ULiTYNC4Rs9Xi","tlshash":"eb838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-07-14T22:23:00.889376Z","last_seen":"2026-08-01T16:13:41.246776Z","times_seen":13473,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/_vercel/insights/script.js","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:03.340Z","timestamp":1785069663340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /_vercel/insights/script.js HTTP/1.1\r\nHost: auth-netfliix-mov.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 12208\r\ncache-control: public, max-age=2678400\r\ncontent-disposition: inline; filename=\"script.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 26 Jul 2026 09:17:35 GMT\r\netag: W/\"8e699b6e4471fd6950176e39c5f1ace0\"\r\nlast-modified: Sat, 25 Jul 2026 08:22:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1:arn1:arn1::7qmfk-1785069663347-3ea99dce041d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2495,"size_decoded":1889,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2495), with no line terminators","md5":"8e699b6e4471fd6950176e39c5f1ace0","sha1":"a3957a826a0c77a338e1bd9b408b90c6215491f8","sha256":"79bf638dd4acdeb9b80c5a4009a3e1986968d615e9557dcf23d91b5e8ad158d8","sha512":"c49b40fbcbe959fab505da0d27a9f3c273a3740f07b34433619e5bc88cd7dd54564609284f4ee30ae219a1572a0a255fe9af92f2f948931b761cbc1be3605e2f","ssdeep":"","tlshash":"2251a5ea74a1e16d4ad79275817f1204f37f2a92fc05000132d99c9d3539d1dea73f99","first_seen":"2026-02-17T21:27:06.661745Z","last_seen":"2026-08-01T16:22:37.394873Z","times_seen":18751,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"auth-netfliix-mov.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__da.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=da\u0026v=A7KpaEASfhDcK0nXxgQEyyYv","date":"2026-07-26T12:41:25.022Z","timestamp":1785069685022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__da.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382649\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Jul 2026 21:59:21 GMT\r\nexpires: Wed, 21 Jul 2027 21:59:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 398524\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":892573,"size_decoded":383536,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (534)","md5":"9916829d8e6759406dc8d6efd3ed972e","sha1":"5bdcf185cb761ca27e73e2e5f5b644996d77e27e","sha256":"2c34e48cbc4f2f5cd4eb933a80a34dcde6585e4380035de9bf56f6dd7dae53ef","sha512":"375ed2b0987c76cafd9c0aee226cb7d32cb8efc53037f00753da149ab862d9051ac61ce0fceb0da7be49e5c390925591026bc0cfa1a1b05a7fda21de01d8504c","ssdeep":"12288:hrIkvNz6H4+glqoTGPc5Z8K79FIc5iqXo8hkigcHxFrogRkPvAMi:V96H70ZtschIcHrqPNi","tlshash":"75156beeb29678b1432271f61137201e577e956dc48c485db0a59cf82eb8c0e70b6eb7","first_seen":"2026-07-15T05:17:59.355248Z","last_seen":"2026-07-26T12:42:21.537515Z","times_seen":5,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"usenumsupp.com/","fqdn":"usenumsupp.com","domain":"usenumsupp.com","tld":"com"},"ip":{"addr":"109.235.74.225","port":80,"asn":25151,"as":"Cyso Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T12:41:02.750Z","timestamp":1785069662750,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: usenumsupp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nLocation: https://auth-netfliix-mov.vercel.app/\r\nContent-Length: 0\r\nConnection: close\r\nDate: Sun, 26 Jul 2026 12:41:02 GMT\r\nServer: lighttpd/1.4.63\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"lighttpd:1.4.63","description":"Lighttpd is an open-source web server optimised for speed-critical environment.","website":"https://www.lighttpd.net","common_platform_enumeration":"","icon":"lighttpd.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T16:16:08.429382Z","times_seen":17656144,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":4,"connect":18,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"usenumsupp.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"usenumsupp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/assets/index-BTpqwrlW.css","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:03.029Z","timestamp":1785069663029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /assets/index-BTpqwrlW.css HTTP/1.1\r\nHost: auth-netfliix-mov.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 793388\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-BTpqwrlW.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 26 Jul 2026 12:41:03 GMT\r\netag: W/\"a75b2e8a508368d0ab5a7b46a88cf253\"\r\nlast-modified: Fri, 17 Jul 2026 08:17:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qbl4l-1785069663039-e215b819922a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":12715,"size_decoded":4232,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12714)","md5":"a75b2e8a508368d0ab5a7b46a88cf253","sha1":"4f6041d546951e52e97c29e17eeea000e37e81b0","sha256":"e54e416ac7dd473d8e88b2f16830a4916c29b689b3ead45ebf05346ec7705f51","sha512":"e5464fe58328b83e82a22d66afd6a7845afa7931f4b7b36d12dc9b01e41acf9471121737549e7c68de62586279e09b74d9d9f3c25bb79b9ccbf4e7a3c33dc621","ssdeep":"192:A28Xz0pYaac0BzQnLzSetgE12PnifgnGpLfhCmcICDJPQ6hsA/7aD:AdUSetTnD","tlshash":"7d429423aa08303ef127c9a4b5e556cd312c9427f2574bfdb567b174c7ca1c61a3ab09","first_seen":"2026-04-20T21:40:15.584251Z","last_seen":"2026-07-26T12:42:21.542175Z","times_seen":11,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"auth-netfliix-mov.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/AAAAQBTxE26zgLJoqZnmxUCfZtVJ2HbJUsVonZ_9Uo-pn68zarPK.png","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:03.065Z","timestamp":1785069663065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /AAAAQBTxE26zgLJoqZnmxUCfZtVJ2HbJUsVonZ_9Uo-pn68zarPK.png HTTP/1.1\r\nHost: auth-netfliix-mov.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-netfliix-mov.vercel.app/assets/index-BTpqwrlW.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 793388\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"AAAAQBTxE26zgLJoqZnmxUCfZtVJ2HbJUsVonZ_9Uo-pn68zarPK.png\"\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:41:03 GMT\r\netag: \"18f4ac7ff79e4be92ae7aed378b5eaaf\"\r\nlast-modified: Fri, 17 Jul 2026 08:17:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qbl4l-1785069663071-a7367ac4b67f\r\ncontent-length: 198254\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198254,"size_decoded":198842,"mime_type":"image/png","magic":"PNG image data, 1280 x 800, 8-bit/color RGBA, non-interlaced","md5":"18f4ac7ff79e4be92ae7aed378b5eaaf","sha1":"6e558bccc6d209a4a10bb3295668da0fa0807e51","sha256":"6621f4544a0ebcfd965571df19e0e1d8c85df8a7d6acfb9dc2b44c77884aaa72","sha512":"37b42fb06541c7858c6f1b8b215f3215f297408d900dca7b598c2fcde7b4f698a1adfb13d783bdd38c62afd91d076a5996ce7624d8b6317877585cb3625fd96b","ssdeep":"3072:Qd4bITot6GlDeilLGYHclEsEvqttC5TatmITZ+rwqC9k624BbO1W1arZzcmQPFvt:QycTo6GBrlDSEy7XpT0dGzBCQzht","tlshash":"ed142384019ee27a77c5977d69d67988f89a2c3eed3b67b720c387601a97c3c6e01006","first_seen":"2025-10-24T02:29:45.994298Z","last_seen":"2026-07-28T12:51:11.419079Z","times_seen":56,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"auth-netfliix-mov.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/_vercel/insights/view","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:03.370Z","timestamp":1785069663370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"POST /_vercel/insights/view HTTP/1.1\r\nHost: auth-netfliix-mov.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nContent-Length: 132\r\nOrigin: https://auth-netfliix-mov.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":132,"data":"{\"o\":\"https://auth-netfliix-mov.vercel.app/\",\"sv\":\"0.1.3\",\"sdkn\":\"@vercel/analytics/react\",\"sdkv\":\"1.5.0\",\"ts\":1785069663369,\"r\":\"\"}"}},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 26 Jul 2026 12:41:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-ratelimit-limit: 1000\r\nx-ratelimit-remaining: 999\r\nx-ratelimit-reset: 60\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::kqv26-1785069663377-f4c17560d084\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":469,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-08-01T16:18:15.420496Z","times_seen":358076,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"auth-netfliix-mov.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:24.206Z","timestamp":1785069684206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://auth-netfliix-mov.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382189\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:17 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:17 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 343867\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":891014,"size_decoded":383096,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"a07ac1bf3466fe5eff6b753f96f39a11","sha1":"d06f6ebd81a8c180a7a6343821a3cf8279f5b86d","sha256":"c9fc8d435c9c3e131d7aedb36923a5ef798c85412192ed2afd9c52dcfb826ff7","sha512":"4648746112b8cdbab787c43e88827d96e02034c52b5436167a24d647ce349a0501df4ca67f82779c89fe0f5659bcc9b444655f83da816469c23e781fa3facc9a","ssdeep":"12288:CN7INAse6Zz779FTMfCtfTSZDYDzVRlh09yENpDvE:a0le6p5tfTSZ0D1h09yENpDvE","tlshash":"50153ade714639b24322b6f52077241ea77e9619c40c5c5d70aa98f03ef580da0f6ebb","first_seen":"2026-07-14T22:23:00.839245Z","last_seen":"2026-08-01T16:13:41.270324Z","times_seen":15255,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":3,"connect":15,"send":0,"wait":16,"receive":62,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-26T12:41:02.795Z","timestamp":1785069662795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: auth-netfliix-mov.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 799634\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 26 Jul 2026 12:41:02 GMT\r\netag: \"18e99cd49be502a8095072814f06b9cf\"\r\nlast-modified: Fri, 17 Jul 2026 06:33:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7zhvf-1785069662846-77c5801970df\r\ncontent-length: 516\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":516,"size_decoded":1047,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"18e99cd49be502a8095072814f06b9cf","sha1":"bff6dd4289e965014f34b1523374c70c43f60786","sha256":"ed53de281a0781cc5eef9d8b9006dd9df9679471b4f666b1e23e9db245774c77","sha512":"5b36f214cab7c7f21fb62797ad6bbea79bc1cc3f78bc7625cc710d9c1540d9b40177cccc2c5f7a750d6d8ea8527ccbc86fe0f81a2e9b6d09e98badd9e4f1a23b","ssdeep":"","tlshash":"62f0c98195b08908533406242ed0f0048e66f74783865e142696707c4fc87c6ce8f9b8","first_seen":"2026-05-04T18:04:44.12775Z","last_seen":"2026-07-26T12:42:21.5564Z","times_seen":8,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":14,"connect":1,"send":0,"wait":11,"receive":8,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"auth-netfliix-mov.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"back-netflix-4-otp-production.up.railway.app/api/notify","fqdn":"back-netflix-4-otp-production.up.railway.app","domain":"back-netflix-4-otp-production.up.railway.app","tld":"up.railway.app"},"ip":{"addr":"69.46.46.44","port":443,"asn":19528,"as":"MPDCOL","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:03.349Z","timestamp":1785069663349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.up.railway.app","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 14:01:30 GMT","end":"Thu, 01 Oct 2026 14:01:29 GMT"},"fingerprint":{"sha1":"92:59:15:31:44:9B:F5:6E:5F:D4:C8:D5:2F:30:8C:5E:45:53:70:E6","sha256":"35:1E:C2:1C:C7:A4:3F:88:1A:86:F3:CE:2F:48:72:CF:30:72:44:CD:04:2B:BC:F6:9B:BE:B7:E6:39:D3:10:B6"}}},"request":{"raw":"OPTIONS /api/notify HTTP/1.1\r\nHost: back-netflix-4-otp-production.up.railway.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nOrigin: https://auth-netfliix-mov.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://auth-netfliix-mov.vercel.app\r\ndate: Sun, 26 Jul 2026 12:41:23 GMT\r\nserver: railway-hikari\r\nvary: Origin, Access-Control-Request-Headers\r\nx-powered-by: Express\r\nx-railway-request-id: CREE2lquTN2BpJoG0-QtfA\r\ncontent-length: 0\r\nx-hikari-trace: ams1.9qww\r\nx-railway-edge: ams1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":492,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-01T16:16:08.429382Z","times_seen":17656144,"resource_available":true,"data":null}},"time_used":41162,"timings":{"blocked":-1,"dns":20541,"connect":20554,"send":0,"wait":36,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026co=aHR0cHM6Ly9hdXRoLW5ldGZsaWl4LW1vdi52ZXJjZWwuYXBwOjQ0Mw..\u0026hl=da\u0026type=image\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026theme=light\u0026size=normal\u0026badge=bottomright\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=279emvp3spkj","date":"2026-07-26T12:41:24.869Z","timestamp":1785069684869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Jul 2026 02:29:48 GMT\r\nexpires: Thu, 30 Jul 2026 02:29:48 GMT\r\ncache-control: public, max-age=604800\r\nage: 295896\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-01T16:13:41.227408Z","times_seen":699970,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__da.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=da\u0026v=A7KpaEASfhDcK0nXxgQEyyYv\u0026k=6Lc4y80sAAAAALDQrn1rRBQ_8tFrHXlCXTB6u5jQ\u0026bft=0dAFcWeA7CnG7W-L640ezVolijI5yx7T_9VId9At-MsDYgRmLVbK4_zeaLXFmZo9i7UTLnEV-3sFEldFMNonP2KeJMXk7bo4ZMUQ","date":"2026-07-26T12:41:25.624Z","timestamp":1785069685624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /recaptcha/releases/A7KpaEASfhDcK0nXxgQEyyYv/recaptcha__da.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 382649\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 Jul 2026 21:59:21 GMT\r\nexpires: Wed, 21 Jul 2027 21:59:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 398524\r\nlast-modified: Tue, 14 Jul 2026 12:02:38 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":892573,"size_decoded":383536,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (534)","md5":"9916829d8e6759406dc8d6efd3ed972e","sha1":"5bdcf185cb761ca27e73e2e5f5b644996d77e27e","sha256":"2c34e48cbc4f2f5cd4eb933a80a34dcde6585e4380035de9bf56f6dd7dae53ef","sha512":"375ed2b0987c76cafd9c0aee226cb7d32cb8efc53037f00753da149ab862d9051ac61ce0fceb0da7be49e5c390925591026bc0cfa1a1b05a7fda21de01d8504c","ssdeep":"12288:hrIkvNz6H4+glqoTGPc5Z8K79FIc5iqXo8hkigcHxFrogRkPvAMi:V96H70ZtschIcHrqPNi","tlshash":"75156beeb29678b1432271f61137201e577e956dc48c485db0a59cf82eb8c0e70b6eb7","first_seen":"2026-07-15T05:17:59.355248Z","last_seen":"2026-07-26T12:42:21.537515Z","times_seen":5,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auth-netfliix-mov.vercel.app/453-4532423_icon-netflix-logo-png-transparent-png-removebg-preview.png","fqdn":"auth-netfliix-mov.vercel.app","domain":"auth-netfliix-mov.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auth-netfliix-mov.vercel.app/","date":"2026-07-26T12:41:03.665Z","timestamp":1785069663665,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Jun 2026 13:27:57 GMT","end":"Sat, 26 Sep 2026 13:27:56 GMT"},"fingerprint":{"sha1":"67:7E:08:96:CE:36:50:12:25:03:0A:77:67:C2:A8:60:CD:38:21:41","sha256":"EE:54:CB:11:F1:6C:C3:11:B3:AC:BA:E5:7F:8F:BB:03:F3:38:C1:B2:A2:0D:E7:27:22:C3:EA:FD:0D:AE:01:40"}}},"request":{"raw":"GET /453-4532423_icon-netflix-logo-png-transparent-png-removebg-preview.png HTTP/1.1\r\nHost: auth-netfliix-mov.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auth-netfliix-mov.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 793385\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"453-4532423_icon-netflix-logo-png-transparent-png-removebg-preview.png\"\r\ncontent-type: image/png\r\ndate: Sun, 26 Jul 2026 12:41:03 GMT\r\netag: \"6898b7f093282c0eecffea900e65f708\"\r\nlast-modified: Fri, 17 Jul 2026 08:17:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xs2qc-1785069663671-1559785f05d7\r\ncontent-length: 58161\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58161,"size_decoded":58762,"mime_type":"image/png","magic":"PNG image data, 549 x 454, 8-bit/color RGBA, non-interlaced","md5":"6898b7f093282c0eecffea900e65f708","sha1":"d058f7761538a1b52c581727dd67242b1ed44ec2","sha256":"0c469987a7150c9eebe8dd2f251b075fed3107f6e9f8fb936a4a3ba3e0d883bd","sha512":"99474ba4b225094830793c8eaa1957d20689019fa21ea0f8cf3b0be74ed8786e7d95d8cd60635d278e28639ab8de9d6803cbe664bd27a73ba14d117f3d097bc5","ssdeep":"1536:xAPOMtz9qz6TvBkBvZmyWq7R3BakBCap3aHMNgO:qPOazkzcZMMyP71UOpqHyl","tlshash":"2543026f88dcad46ee15480c317292c2be5db9b1a5bfbebc4845c0db6ad345631ac483","first_seen":"2026-06-04T13:42:49.777971Z","last_seen":"2026-07-26T12:42:21.535241Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-26","alert":"Phishing Block","trigger":"auth-netfliix-mov.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-26","alert":"Sinkholed","trigger":"auth-netfliix-mov.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}