{"report_id":"70954e5b-8d70-4e2c-b252-136eac81f420","version":6,"status":"done","tags":["netflix","phishing"],"date":"2025-10-17T17:59:54Z","url":{"schema":"http","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/auth","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/auth","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"title":"netflix-6ewu47an3-mario-oliver.vercel.app/auth"},"submit":{"url":{"schema":"http","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/auth","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-21T17:59:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-01-10T10:21:31.241719Z","last_seen":"2025-10-14T00:18:09.903623Z","alert_count":87,"request_count":16,"received_data":725290,"sent_data":8140,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/xOM_JHSnmWhDoLXTnnHWj/_ssgManifest.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-21T12:53:35.104548Z","times_seen":254680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/154-454aae7a1f6cc481.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a02902b0f68910cb8f6385b219861521","sha1":"91c815c2eb295856e52c2f92e6e8b17ce566c558","sha256":"741b7b693aafef4268e557ee046f3ea1f463520d4dbfb25e51ea83a4b20cc0c3","sha512":"86ec486c356a075236cc1bf116b13e045716ceada3b7ac66b9e1d16cb03b3583a4d0d466816ccac0a5490f89d253869afe0d4a45ce4608f44d447f19b3a9ff8a","ssdeep":"768:ySc5E40fEfcAWpeTInCDTURvLoj/KkbEnLn1BgXGYc5OUsCf31k4:XcC40y7f8ne4+GpqWYQRlx","tlshash":"9033ebc5f791b03653a661d0445f040bf27aeb2e640e08e8f250d8e638b959a95fff78","size":51193,"data":"","first_seen":"2024-08-20T09:30:35.990744Z","last_seen":"2026-07-30T08:02:40.356777Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/98-ea885d88c6c2ad77.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"73353d8c27c320e46b16a9d636f53420","sha1":"8dee7bff4c70258a1e24af30c238cf08b4cd6ca8","sha256":"e6d351228b7c03213324d3648167077d5bc0703c41ba7647f608ed680dd49ee2","sha512":"437b5816dd09bbad28350b2c360d50c621be63f5ebe74c66ffdcbb0c4d3fa080fb909ff4f24f62caabe3839e447eb32ad71f3c06bff8507bc4ca9ac8c313455d","ssdeep":"768:01Z0oCMOMzMtM0MpMcMqMXMhy0zBmjNcnmkRCjg2MLi5Vxia:Q0GzAyR2Z3chy0zkFk7irj","tlshash":"4603a5c9b1d2f4a203d39165403f6106f22a1d6d640ef4d0e365dee2e97895ea133fba","size":37708,"data":"","first_seen":"2023-08-21T02:45:52Z","last_seen":"2025-11-04T14:07:13.097202Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/main-4f7a7f9819877c91.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b392ab045ea59f53a2188b88db90ed3","sha1":"0bf1f073815296df62d6071dab07835bb3b7dda1","sha256":"fd4ce2ff356af8b44e3bf508d930dec77ff1e44207176b00a324d31da3b06ef3","sha512":"3d3ca7d0ff2544daeb83a9b06ff51966ab5bae07140edfc1f980067e8ab8e056a4f0eb08bd7da8efef71cf7a6aedebb8e9b73ab16f903651a0c9b408f5bdc158","ssdeep":"1536:EpBW9YswdNLFqfKRRzDA3mL67P768pI1aJtmyy:qdznzDcmL67P71SMEyy","tlshash":"3ca309b672d1f8a203cb4194843b0006f3761d7e546f6045f3eadcd6b9a199ea0e2f79","size":102363,"data":"","first_seen":"2025-01-10T10:03:06.61035Z","last_seen":"2025-11-04T14:07:13.096317Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/1bfc9850-ee9594b91b258940.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb280bb31d1e28fb1e5fb92fce3c12d","sha1":"0ef31da0f9338254aea18e92ede13163f1b8d5d9","sha256":"244a22ecbbb0ff2de9eccfdcce177db6aa05bcab1aa1cd2ea628baf6516ff600","sha512":"9753286eae8e93f7e860de3dfdc7f61d079ebab19628ce5f6599162d3021623b402ccb3a7658db162e15ae50660d333d50247015f1005dbefce4a41b54d4f721","ssdeep":"","tlshash":"0f31dd7d9294d7eccdb62ded8a3b50b9548f992d20d19b068b60c6b0b5b00c8816eccf","size":1561,"data":"","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-18T16:23:45.008735Z","times_seen":549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/pages/auth-aca56c4bd0d28055.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fca7269d2f88e07876f14fc62e9d90c4","sha1":"35414f1dd26d0f35f887708a15f05571f3c3d74c","sha256":"ce5b5f3523e4dfe1b6638dcba6460b03ac28a945f96242a50e96aabc23aec38c","sha512":"6ee640f39e04f8a2a5cedf0e10b94754af5da9befe41aeeea69f545a4f996d4cf830160f8d038cc8d8a94da44c45895d28e193c86ef6b8917e5fe4a265835565","ssdeep":"","tlshash":"30612208b0626edea8670494649fc00cb16eb748dd1b8c94b7f86c1a2dc64d47bc5bd9","size":3472,"data":"","first_seen":"2025-01-10T10:21:33.02749Z","last_seen":"2025-11-04T14:07:13.085974Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/xOM_JHSnmWhDoLXTnnHWj/_buildManifest.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"140e24b425846db1a66fb4b32718c555","sha1":"f17fe7e03cf3458a9d84ab8c7fa496796e58973f","sha256":"601b48a6ba353db97fe95ad003c900d35631a463779fe0be7ed3cf90a67055d6","sha512":"fedcea81a61f57f1e4bbe55d090bb71879e98afc683ca6c53b23ba9278be825e1bbf08440d99cc6581bc10e88c5e075b4575b142e095209fddf8ed8060bdb44d","ssdeep":"","tlshash":"65113a83451af8164df0ecd8741b5723af91ca32053406e3a6ec1e6d45911fb9f9d435","size":974,"data":"","first_seen":"2025-01-10T10:21:33.031016Z","last_seen":"2025-11-04T14:07:13.087666Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/webpack-266da34e2468c883.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef221f899e2d11923a50989edaafdf2d","sha1":"b3363ce054fc7893d9d84ecedc39ffc7cb85413b","sha256":"0f6e20d195600990f757d2f5c2d0a43d86c9369d1a2eb7e2be1a6b170a8995f7","sha512":"364034f26830fa2d955f245efdb79fb45d561e9cbc0dc3b01ff958455e461f5326a9e03d59ea9fb6a1c0f7752e1a3b2851bbde77055d95af9ce4157488a5f5b2","ssdeep":"","tlshash":"f73142c932e2f8d82717a965482f809bb03a9973146ee5f2eb11d1b97c311584237f7a","size":1685,"data":"","first_seen":"2023-05-23T19:12:32Z","last_seen":"2026-08-11T08:02:36.751278Z","times_seen":222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/pages/_app-ae907860a06fe57a.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"768cbcb9138a7faedb5692db4ba275be","sha1":"ca9bf9959ca7c77ab53743cd29cf742ddde3a23f","sha256":"8f9cf107610cc3629ff1d01223a1bd558c0c779871d66624040585e9e3badf6e","sha512":"fd39b044831360389fe57ecc42a8a27df583b5917f892008a4222d5b37cbb609c9e6a8d4d6b6e4d842261359ba5d381a0cd88b473ead15c9a05c440210f9ddb5","ssdeep":"","tlshash":"1af097983cc3b82822a751b841bf245e33bf2d5824ac64506ba2d0d93e3125c9022f8c","size":471,"data":"","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-18T16:23:45.017372Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"739ca4ff1562e6418fe90a93135d9ddb","sha1":"1dee7b0d39f7aae0c381831390daa0cea3bcef8b","sha256":"6aad604817dd874413449cce9af0b4ddd8ab618984a35d970a1899db987dc9f2","sha512":"4833078975c6304f2111637a233ca835386a894d3b3b4246b8006879dce060ab8769f4d04f4e7822f036d2fb8bec21c5ae85f64cec3d6423062a08e013476dbc","ssdeep":"","tlshash":"752168c4237074add9c52c3850b2266616b8145f34e6c594b77f04c8de61bd45868c6f","size":1264,"data":"","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-18T16:23:44.996498Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/framework-63157d71ad419e09.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb527e07c24685aa3fb6938c6c4ca068","sha1":"e2e29c2956e4800f2de9d76c477f9f5e50e4643a","sha256":"9a67c791841e3e122c4961cbe8bac2ffbf8ccac274d6475ac4bf8597eede4379","sha512":"63e0732ec2a9fe5292e5d20293e8d8a44e7e3bd5cfc952fbab72c1c0a044c8e148b455e022ece5705e119bffda3ff334f2585e09cdfe706d0024bcb2396ca11c","ssdeep":"1536:2Yjv9NX6lMuuPhNj3Lapvj6uedG7y3ZfuQ3:Dj3/Wpr6BdVv3","tlshash":"01d3f9e83995f6516ab311a700ef1803737d2a1b280c4960e215fd9e75b842bb1bbfdd","size":141016,"data":"","first_seen":"2023-08-28T12:50:01Z","last_seen":"2026-07-15T17:12:42.484317Z","times_seen":293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/auth","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T17:59:27.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /auth HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015847\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"auth\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"a53eb06ffb849fc494c268175778fd02\"\r\nlast-modified: Sun, 05 Oct 2025 23:48:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /auth\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gqh98-1760723967156-95ad910524ae\r\ncontent-length: 2619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6295,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3443), with CRLF line terminators","md5":"a53eb06ffb849fc494c268175778fd02","sha1":"8ac21a15a48ec358a24c5ea0b8422fec6cf62fa2","sha256":"7aab737ab8f3076206fea46576feef470bc1e8745436e8cb6bdd93aefdc2118b","sha512":"d5ef04f1e3497118050cb3e2b52488da4b58b184ab2062c31a809e076508dd02641aff4995521f307b15c75892386af885dd417f7550427d82afb4b4e0f00d9a","ssdeep":"96:dDDyxq7Pw5CHRiz9ZmvmROssgRAbm1qb1o68g73WntzuId6h1+m4pS:Zuxq7Pw3mvmR+mAbmAbd8kSRxd61yk","tlshash":"a2d1b8995e12cadec8134decb572b37e708ec22ec4b28548e3dc816c2b91dc58e5cc99","first_seen":"2025-01-10T10:21:33.021581Z","last_seen":"2025-11-04T14:07:13.09808Z","times_seen":14,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":35,"dns":2,"connect":1,"send":0,"wait":10,"receive":171,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/framework-63157d71ad419e09.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/framework-63157d71ad419e09.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015846\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"framework-63157d71ad419e09.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"fb527e07c24685aa3fb6938c6c4ca068\"\r\nlast-modified: Sun, 05 Oct 2025 23:48:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/framework-63157d71ad419e09.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bct5x-1760723967563-e41a6fb7177f\r\ncontent-length: 46587\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141016,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"fb527e07c24685aa3fb6938c6c4ca068","sha1":"e2e29c2956e4800f2de9d76c477f9f5e50e4643a","sha256":"9a67c791841e3e122c4961cbe8bac2ffbf8ccac274d6475ac4bf8597eede4379","sha512":"63e0732ec2a9fe5292e5d20293e8d8a44e7e3bd5cfc952fbab72c1c0a044c8e148b455e022ece5705e119bffda3ff334f2585e09cdfe706d0024bcb2396ca11c","ssdeep":"1536:2Yjv9NX6lMuuPhNj3Lapvj6uedG7y3ZfuQ3:Dj3/Wpr6BdVv3","tlshash":"01d3f9e83995f6516ab311a700ef1803737d2a1b280c4960e215fd9e75b842bb1bbfdd","first_seen":"2023-08-28T12:50:01Z","last_seen":"2026-07-15T17:12:42.484317Z","times_seen":293,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/1bfc9850-ee9594b91b258940.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/1bfc9850-ee9594b91b258940.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1bfc9850-ee9594b91b258940.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"ceb280bb31d1e28fb1e5fb92fce3c12d\"\r\nlast-modified: Fri, 17 Oct 2025 17:59:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/1bfc9850-ee9594b91b258940.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::98xbm-1760723967567-2dda12a69aa3\r\ncontent-length: 821\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1561,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1561), with no line terminators","md5":"ceb280bb31d1e28fb1e5fb92fce3c12d","sha1":"0ef31da0f9338254aea18e92ede13163f1b8d5d9","sha256":"244a22ecbbb0ff2de9eccfdcce177db6aa05bcab1aa1cd2ea628baf6516ff600","sha512":"9753286eae8e93f7e860de3dfdc7f61d079ebab19628ce5f6599162d3021623b402ccb3a7658db162e15ae50660d333d50247015f1005dbefce4a41b54d4f721","ssdeep":"","tlshash":"0f31dd7d9294d7eccdb62ded8a3b50b9548f992d20d19b068b60c6b0b5b00c8816eccf","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-18T16:23:45.008735Z","times_seen":549,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/css/6c09a128eb21f5e4.css","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/css/6c09a128eb21f5e4.css HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015846\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"6c09a128eb21f5e4.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"f2ebc84bd71308bb3169591a6d1230cd\"\r\nlast-modified: Sun, 05 Oct 2025 23:48:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/6c09a128eb21f5e4.css\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gqh98-1760723967562-fb48044e906b\r\ncontent-length: 4154\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16842,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16778)","md5":"f2ebc84bd71308bb3169591a6d1230cd","sha1":"fd022d49a0ddae6bd452930005bfba33ce483273","sha256":"fc0a4a7658737b8aef5e45353b163c7efd505ee44f05f5897bf7d588999117a6","sha512":"12feff0333832e46a0d420e4c78aa344e8de997d887d8b2660e12fe53f85d55505fbd27cf4dd793ecc639425e8e6ce8e22f0b48706fee803586855bfc31b698e","ssdeep":"192:s6wWs7JXYY7JXYdsfNsfvQsfAjL+RlZFS8x0gM5ZNuMtRsfYsfJXsf8sfLsfjsfw:Lwd5WRl10t5ZNuezi","tlshash":"4272751daf55003f6c2680f6dad4fa9c711a70c1de3b5ababa931101afd13f60de6618","first_seen":"2025-01-10T10:21:33.026292Z","last_seen":"2025-11-04T14:07:13.089981Z","times_seen":14,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/pages/_app-ae907860a06fe57a.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-ae907860a06fe57a.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_app-ae907860a06fe57a.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"768cbcb9138a7faedb5692db4ba275be\"\r\nlast-modified: Fri, 17 Oct 2025 17:59:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/pages/_app-ae907860a06fe57a.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gqh98-1760723967566-abdd4f00d09e\r\ncontent-length: 471\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":471,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (471), with no line terminators","md5":"768cbcb9138a7faedb5692db4ba275be","sha1":"ca9bf9959ca7c77ab53743cd29cf742ddde3a23f","sha256":"8f9cf107610cc3629ff1d01223a1bd558c0c779871d66624040585e9e3badf6e","sha512":"fd39b044831360389fe57ecc42a8a27df583b5917f892008a4222d5b37cbb609c9e6a8d4d6b6e4d842261359ba5d381a0cd88b473ead15c9a05c440210f9ddb5","ssdeep":"","tlshash":"1af097983cc3b82822a751b841bf245e33bf2d5824ac64506ba2d0d93e3125c9022f8c","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-18T16:23:45.017372Z","times_seen":298,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/xOM_JHSnmWhDoLXTnnHWj/_buildManifest.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/xOM_JHSnmWhDoLXTnnHWj/_buildManifest.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015846\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_buildManifest.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"140e24b425846db1a66fb4b32718c555\"\r\nlast-modified: Sun, 05 Oct 2025 23:48:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/xOM_JHSnmWhDoLXTnnHWj/_buildManifest.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::65frv-1760723967572-01813f194ec7\r\ncontent-length: 974\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":974,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (974), with no line terminators","md5":"140e24b425846db1a66fb4b32718c555","sha1":"f17fe7e03cf3458a9d84ab8c7fa496796e58973f","sha256":"601b48a6ba353db97fe95ad003c900d35631a463779fe0be7ed3cf90a67055d6","sha512":"fedcea81a61f57f1e4bbe55d090bb71879e98afc683ca6c53b23ba9278be825e1bbf08440d99cc6581bc10e88c5e075b4575b142e095209fddf8ed8060bdb44d","ssdeep":"","tlshash":"65113a83451af8164df0ecd8741b5723af91ca32053406e3a6ec1e6d45911fb9f9d435","first_seen":"2025-01-10T10:21:33.031016Z","last_seen":"2025-11-04T14:07:13.087666Z","times_seen":14,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/xOM_JHSnmWhDoLXTnnHWj/_ssgManifest.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/xOM_JHSnmWhDoLXTnnHWj/_ssgManifest.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_ssgManifest.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"b6652df95db52feb4daf4eca35380933\"\r\nlast-modified: Fri, 17 Oct 2025 17:59:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/xOM_JHSnmWhDoLXTnnHWj/_ssgManifest.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bct5x-1760723967572-c727961253cd\r\ncontent-length: 77\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-21T12:53:35.104548Z","times_seen":254680,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/webpack-266da34e2468c883.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/webpack-266da34e2468c883.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-266da34e2468c883.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"ef221f899e2d11923a50989edaafdf2d\"\r\nlast-modified: Fri, 17 Oct 2025 17:59:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-266da34e2468c883.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ld4z2-1760723967563-030cd127a924\r\ncontent-length: 883\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1685,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1685), with no line terminators","md5":"ef221f899e2d11923a50989edaafdf2d","sha1":"b3363ce054fc7893d9d84ecedc39ffc7cb85413b","sha256":"0f6e20d195600990f757d2f5c2d0a43d86c9369d1a2eb7e2be1a6b170a8995f7","sha512":"364034f26830fa2d955f245efdb79fb45d561e9cbc0dc3b01ff958455e461f5326a9e03d59ea9fb6a1c0f7752e1a3b2851bbde77055d95af9ce4157488a5f5b2","ssdeep":"","tlshash":"f73142c932e2f8d82717a965482f809bb03a9973146ee5f2eb11d1b97c311584237f7a","first_seen":"2023-05-23T19:12:32Z","last_seen":"2026-08-11T08:02:36.751278Z","times_seen":222,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/main-4f7a7f9819877c91.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/main-4f7a7f9819877c91.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015846\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-4f7a7f9819877c91.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"0b392ab045ea59f53a2188b88db90ed3\"\r\nlast-modified: Sun, 05 Oct 2025 23:48:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-4f7a7f9819877c91.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h2fcx-1760723967564-8c3ca6b75779\r\ncontent-length: 30594\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":102363,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0b392ab045ea59f53a2188b88db90ed3","sha1":"0bf1f073815296df62d6071dab07835bb3b7dda1","sha256":"fd4ce2ff356af8b44e3bf508d930dec77ff1e44207176b00a324d31da3b06ef3","sha512":"3d3ca7d0ff2544daeb83a9b06ff51966ab5bae07140edfc1f980067e8ab8e056a4f0eb08bd7da8efef71cf7a6aedebb8e9b73ab16f903651a0c9b408f5bdc158","ssdeep":"1536:EpBW9YswdNLFqfKRRzDA3mL67P768pI1aJtmyy:qdznzDcmL67P71SMEyy","tlshash":"3ca309b672d1f8a203cb4194843b0006f3761d7e546f6045f3eadcd6b9a199ea0e2f79","first_seen":"2025-01-10T10:03:06.61035Z","last_seen":"2025-11-04T14:07:13.096317Z","times_seen":27,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/154-454aae7a1f6cc481.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/154-454aae7a1f6cc481.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"154-454aae7a1f6cc481.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"a02902b0f68910cb8f6385b219861521\"\r\nlast-modified: Fri, 17 Oct 2025 17:59:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/154-454aae7a1f6cc481.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mct4h-1760723967568-948c30ea10fb\r\ncontent-length: 18938\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51193,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49564)","md5":"a02902b0f68910cb8f6385b219861521","sha1":"91c815c2eb295856e52c2f92e6e8b17ce566c558","sha256":"741b7b693aafef4268e557ee046f3ea1f463520d4dbfb25e51ea83a4b20cc0c3","sha512":"86ec486c356a075236cc1bf116b13e045716ceada3b7ac66b9e1d16cb03b3583a4d0d466816ccac0a5490f89d253869afe0d4a45ce4608f44d447f19b3a9ff8a","ssdeep":"768:ySc5E40fEfcAWpeTInCDTURvLoj/KkbEnLn1BgXGYc5OUsCf31k4:XcC40y7f8ne4+GpqWYQRlx","tlshash":"9033ebc5f791b03653a661d0445f040bf27aeb2e640e08e8f250d8e638b959a95fff78","first_seen":"2024-08-20T09:30:35.990744Z","last_seen":"2026-07-30T08:02:40.356777Z","times_seen":30,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/pages/auth-aca56c4bd0d28055.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/pages/auth-aca56c4bd0d28055.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"auth-aca56c4bd0d28055.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"fca7269d2f88e07876f14fc62e9d90c4\"\r\nlast-modified: Fri, 17 Oct 2025 17:59:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/pages/auth-aca56c4bd0d28055.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::7w4km-1760723967569-7b07fcf2238e\r\ncontent-length: 1450\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3472,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3472), with no line terminators","md5":"fca7269d2f88e07876f14fc62e9d90c4","sha1":"35414f1dd26d0f35f887708a15f05571f3c3d74c","sha256":"ce5b5f3523e4dfe1b6638dcba6460b03ac28a945f96242a50e96aabc23aec38c","sha512":"6ee640f39e04f8a2a5cedf0e10b94754af5da9befe41aeeea69f545a4f996d4cf830160f8d038cc8d8a94da44c45895d28e193c86ef6b8917e5fe4a265835565","ssdeep":"","tlshash":"30612208b0626edea8670494649fc00cb16eb748dd1b8c94b7f86c1a2dc64d47bc5bd9","first_seen":"2025-01-10T10:21:33.02749Z","last_seen":"2025-11-04T14:07:13.085974Z","times_seen":14,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/images/logo.png","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"9f92a087bbfb01ddb0a85ed962650039\"\r\nlast-modified: Fri, 17 Oct 2025 17:59:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /images/logo.png\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h7kqb-1760723967573-ffedcfe6f525\r\ncontent-length: 18043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 346, 8-bit/color RGBA, non-interlaced","md5":"9f92a087bbfb01ddb0a85ed962650039","sha1":"da354e20a5d0d9d88a222e2c841f025a970dfba4","sha256":"52edac7b27bc236a816dce4f818204b5eef293f036914fd12fec2bc476126a85","sha512":"000ae8a7969d863e52f3894b9e62e92152db3a7d4b863ff1b1dac87b5be52882656c97be6b96651e87ec4347eb7fb30e19baafae9343d297ec618b0801b301c3","ssdeep":"384:SQfXXODBNLlIr6SpbT3fhU29IeXQN39i59drWj2+6Hjn:NonLlI2eHueXQN3Qndre2L7","tlshash":"8682af89dcdb84dafc188034d6ef8f517b62dc8f5160172683e8c9b71d07abca4ad590","first_seen":"2023-05-06T08:35:42Z","last_seen":"2026-08-18T16:23:45.003549Z","times_seen":754,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"b98bc7c3-3b2716b59bdfc294.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"739ca4ff1562e6418fe90a93135d9ddb\"\r\nlast-modified: Fri, 17 Oct 2025 17:59:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::w5c89-1760723967566-2a82e45d32f8\r\ncontent-length: 653\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1264), with no line terminators","md5":"739ca4ff1562e6418fe90a93135d9ddb","sha1":"1dee7b0d39f7aae0c381831390daa0cea3bcef8b","sha256":"6aad604817dd874413449cce9af0b4ddd8ab618984a35d970a1899db987dc9f2","sha512":"4833078975c6304f2111637a233ca835386a894d3b3b4246b8006879dce060ab8769f4d04f4e7822f036d2fb8bec21c5ae85f64cec3d6423062a08e013476dbc","ssdeep":"","tlshash":"752168c4237074add9c52c3850b2266616b8145f34e6c594b77f04c8de61bd45868c6f","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-18T16:23:44.996498Z","times_seen":624,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/chunks/98-ea885d88c6c2ad77.js","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/98-ea885d88c6c2ad77.js HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1015846\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"98-ea885d88c6c2ad77.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"73353d8c27c320e46b16a9d636f53420\"\r\nlast-modified: Sun, 05 Oct 2025 23:48:40 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/98-ea885d88c6c2ad77.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8hs62-1760723967568-0083c63f8646\r\ncontent-length: 11378\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37708,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37708), with no line terminators","md5":"73353d8c27c320e46b16a9d636f53420","sha1":"8dee7bff4c70258a1e24af30c238cf08b4cd6ca8","sha256":"e6d351228b7c03213324d3648167077d5bc0703c41ba7647f608ed680dd49ee2","sha512":"437b5816dd09bbad28350b2c360d50c621be63f5ebe74c66ffdcbb0c4d3fa080fb909ff4f24f62caabe3839e447eb32ad71f3c06bff8507bc4ca9ac8c313455d","ssdeep":"768:01Z0oCMOMzMtM0MpMcMqMXMhy0zBmjNcnmkRCjg2MLi5Vxia:Q0GzAyR2Z3chy0zkFk7irj","tlshash":"4603a5c9b1d2f4a203d39165403f6106f22a1d6d640ef4d0e365dee2e97895ea133fba","first_seen":"2023-08-21T02:45:52Z","last_seen":"2025-11-04T14:07:13.097202Z","times_seen":29,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/images/hero.jpg","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /images/hero.jpg HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/_next/static/css/6c09a128eb21f5e4.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hero.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Oct 2025 17:59:27 GMT\r\netag: \"a737c03b02520f8f95eebaccd0a67cf9\"\r\nlast-modified: Fri, 17 Oct 2025 17:59:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /images/hero.jpg\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8hs62-1760723967604-d9130298510a\r\ncontent-length: 305755\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305755,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"a737c03b02520f8f95eebaccd0a67cf9","sha1":"338fda630759a03dc136a3aaa3ff3134cb6391c8","sha256":"7218b6041ee8b2d63be9bb7aab4322cab1f92bc795586693bffea561b4df9047","sha512":"11d56297c94a94249fa4e53f6ea00b836d103f3683a5f3a828edcaa3ca0cc90a43639e9d441a52eb40ae81bb79229a9910ab6ceefffd8f14cbf48ce9d4973a08","ssdeep":"6144:qEyQZGPMVDNPA3nXDnfr6c9FyqPSe/jCnwj1NkCl693RTLsN1Bja:rnZPA3nXDfrFvyetdjnY9RTo4","tlshash":"4b5423728d532cc634ecdf982454eec8b46bfde694c7246e015dc854392d068daee71a","first_seen":"2023-05-06T08:35:42Z","last_seen":"2026-08-18T16:23:45.016497Z","times_seen":679,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-6ewu47an3-mario-oliver.vercel.app/favicon.ico","fqdn":"netflix-6ewu47an3-mario-oliver.vercel.app","domain":"netflix-6ewu47an3-mario-oliver.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-6ewu47an3-mario-oliver.vercel.app/auth","date":"2025-10-17T17:59:27.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: netflix-6ewu47an3-mario-oliver.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-6ewu47an3-mario-oliver.vercel.app/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Fri, 17 Oct 2025 17:59:28 GMT\r\netag: \"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Fri, 17 Oct 2025 17:59:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /favicon.ico\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::8hs62-1760723967952-b4659bd980fe\r\ncontent-length: 9308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-21T13:29:50.482098Z","times_seen":41544,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"netflix-6ewu47an3-mario-oliver.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}