{"report_id":"75085e61-ab30-4464-876e-fe094b3c9ed8","version":6,"status":"done","tags":["netflix","phishing"],"date":"2025-10-17T18:01:42Z","url":{"schema":"http","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/auth","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/auth","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"title":"first-clone-93tjo56w3-gianruta28.vercel.app/auth"},"submit":{"url":{"schema":"http","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/auth","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-21T18:01:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-04-03T17:33:47.579126Z","last_seen":"2025-10-11T20:52:55.255744Z","alert_count":87,"request_count":16,"received_data":713223,"sent_data":8166,"comment":"","tags":null,"fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"NextAuth.js","description":"NextAuth.js is a complete open-source authentication solution for Next.js applications.","website":"https://next-auth.js.org","common_platform_enumeration":"","icon":"Next-Auth.png","categories":["Authentication"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/webpack-38cee4c0e358b1a3.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26a485e9fb19732af7bc08f2ebf0154d","sha1":"3af402b5971c083af89dc1fdd17320e98eb01d99","sha256":"c1e92a1c5827b02b976fdd931b13ee9f09d45d31db0edbaadf03ca82b96e9a5a","sha512":"5e632a912e250b250f921d654b51bfbfaa7ee3a37999cdd7ec0abcf729b5dddf019ebac0eec1772da71c9631ad5411b5e0d0eccbf5e1056296afa8c9b35481f7","ssdeep":"","tlshash":"b13145c932e2f8d81717ad65482f809bb03a9973146dd5f2eb11c1b57c351584237f7a","size":1700,"data":"","first_seen":"2023-03-14T04:03:47Z","last_seen":"2026-08-18T16:23:45.00785Z","times_seen":763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"739ca4ff1562e6418fe90a93135d9ddb","sha1":"1dee7b0d39f7aae0c381831390daa0cea3bcef8b","sha256":"6aad604817dd874413449cce9af0b4ddd8ab618984a35d970a1899db987dc9f2","sha512":"4833078975c6304f2111637a233ca835386a894d3b3b4246b8006879dce060ab8769f4d04f4e7822f036d2fb8bec21c5ae85f64cec3d6423062a08e013476dbc","ssdeep":"","tlshash":"752168c4237074add9c52c3850b2266616b8145f34e6c594b77f04c8de61bd45868c6f","size":1264,"data":"","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-18T16:23:44.996498Z","times_seen":624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/_aH7k1ljjjJG8k-E23qPA/_buildManifest.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fc1a7fdb0606c98db4c7c813990dd13","sha1":"9689e2d53a4dad0e3f55de4d1383d0da264a6e69","sha256":"b0f6460ed1a25284b12e0cd2581e59dbd08debc04df14df3f40ef7a33446bae6","sha512":"b4e7a04c9b14ea9e3b52ad02c28e3a88d959fbd94e9313241a2c082ceeaae5d65e084ac63b3d87014ec053ca2f800c8e4cc4fa525b6628acbc0bd7efd9e6c6bc","ssdeep":"","tlshash":"e81166e3561af8065ef2dc8a386f4323ffd28436553506d6d6ec1e2844805738f8e836","size":914,"data":"","first_seen":"2025-04-03T17:33:49.600772Z","last_seen":"2025-11-18T18:21:52.621081Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/827-a4669c1bd6f6fdf9.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc2ef3969a1787f9d0b0840bb7d09205","sha1":"1611040319abf22ccb8ff138f42af7cdf73878ea","sha256":"d79669bb344f75e8c95da4433c3b2c6c74333373f5f4364562c86acbfa78c58f","sha512":"378bbef60cf51f5e487fb17f3757b8f1df480a37bf4064868b375457acb45ad66223cd9a43802f1857a15a6eb3cbe5ea723ec340a56754997e340420207954f7","ssdeep":"768:FScnE40fEfcAWp3TInCD1UqvT/YwYHsDrZnwmfBr50zk6KeM1ej/Ovqq:McE40y7m8neG4/1wMWz0mGvt","tlshash":"8833e9c5f7a1b03603a621d0445f440af279ea3d644e48a8f251e8e738f958a95fff78","size":51290,"data":"","first_seen":"2023-04-01T10:57:31Z","last_seen":"2026-05-07T13:25:59.338276Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/pages/_app-ccfaa41ed030afea.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f555c3ae32d0fb14695977ca859c43c","sha1":"2e2b04a15dce881729e766c1956e153dafea2d20","sha256":"d13535d5f125bd872e15a080c43dafeb4aaa6f059d4f89a56e0c06e8d9933daa","sha512":"a5b6eb7769c5d8fca5a86b86c76bea0aa335f90c8e3550bf8c39d87b0185084972807db78015e6a2313dfd177a80cc2a980d0f5e50bfc94e60af4384c18564b4","ssdeep":"768:o1J0oCMOMzMtM0MpMOMSMlMhPuv8BxikNmnotRCJ9ttLi5Vx1A:00GzAyR2zfKhPuqxPtcirM","tlshash":"73f2a6ca71d2f4a103d39161402f5206f22e5d69640ef4d0e365eed2ea3895fa133fba","size":36053,"data":"","first_seen":"2025-04-03T17:33:49.592859Z","last_seen":"2025-11-18T18:21:52.61165Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/1bfc9850-ee9594b91b258940.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb280bb31d1e28fb1e5fb92fce3c12d","sha1":"0ef31da0f9338254aea18e92ede13163f1b8d5d9","sha256":"244a22ecbbb0ff2de9eccfdcce177db6aa05bcab1aa1cd2ea628baf6516ff600","sha512":"9753286eae8e93f7e860de3dfdc7f61d079ebab19628ce5f6599162d3021623b402ccb3a7658db162e15ae50660d333d50247015f1005dbefce4a41b54d4f721","ssdeep":"","tlshash":"0f31dd7d9294d7eccdb62ded8a3b50b9548f992d20d19b068b60c6b0b5b00c8816eccf","size":1561,"data":"","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-18T16:23:45.008735Z","times_seen":549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/pages/auth-77d0b0c6dc7e01cf.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2471a844891fcf4ebbc549ef3d661233","sha1":"f1764be9feb11b18e120de337a5229609f13990f","sha256":"2b6826ead0840e07429a733b9afb14a73071ff764e335234b0f5a064da94a973","sha512":"0706855c9579e1fa04132aefd7f7583b13cc8472a238f39c78bbad70581dff8a7280fd4d9a553eb9587749ec24eab996b76a81e1589754aae507be87d99c7e7f","ssdeep":"96:fAZ3tZmBTeyXFeQpZei0ciqOnG0Xfi39K7tgqURN5favi6:QdZmBeSFPei0cz+K3EBgvRNtX6","tlshash":"44a1d888b4623edda67340ec50bf500df22f5a58dd1e0d90b2f4f0653896894678afed","size":5046,"data":"","first_seen":"2025-04-03T17:33:49.602282Z","last_seen":"2025-11-18T18:21:52.616551Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/_aH7k1ljjjJG8k-E23qPA/_ssgManifest.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-19T09:46:52.250517Z","times_seen":254214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/framework-2c79e2a64abdb08b.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fc4bed6b4319c62343f0bf5db91a5bb","sha1":"6e283c4ea2b12da64476af280236a8c5d85dbbbc","sha256":"f2ae26ff518d9519afd2a3dc277d84e098458e6b6b85fa9548cda2bed24435e7","sha512":"e2e0072386f2f35690899509229136406c27c2b95e3e8cc810aeb6630d7f13bd0872e0f6e650b4fddce2567680e7c42eea49c62bd2653006f5151d9ba0430cd7","ssdeep":"1536:2YjvmNg6kMudjY+o3F36qmk1S/qcnde//ZQg:Dj7UN6qT1S5cXmg","tlshash":"a3d309e83995f6526ab311a700af2803733d2a1b280c4960e615fd9e75b841fb17bfdd","size":141052,"data":"","first_seen":"2023-03-13T20:58:32Z","last_seen":"2026-08-18T16:23:44.99128Z","times_seen":2328,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/main-0ecb9ccfcb6c9b24.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b45b8c17501e286fcd07bbf878db8e2","sha1":"7699d22e057eac148d69f3fe7b9fa7853b99e774","sha256":"25fd6cd79b8ba2617614386cf09115f23130d24d136354469033122928635453","sha512":"3942c5771e96634974ea5684e7387c63cd85048bf801b65c6b32ac14b8684d863869c9679a92f04bd598a8124c9303e26a218b8f8f56c4ac55ed4d8513b64a69","ssdeep":"1536:2vdUvNYbmuiBN3hZHVmgvE7XCQm2CJ3LkNk:A+zvUXCWCJb2k","tlshash":"779319b572d1f8a207db41a5c43b0202f3661d3e601fa855e3ebdcd67560d8fa0a2f66","size":90168,"data":"","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-05T22:50:12.311414Z","times_seen":443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/auth","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T18:01:15.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /auth HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:15 GMT\r\netag: W/\"bimc2pn4py4sd\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /auth\r\nx-powered-by: Next.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::wrr44-1760724075357-29c185bfe25c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":6205,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3361), with CRLF line terminators","md5":"63b147c8a053e4d753ec9e6004a66ab5","sha1":"32a07b64e922d03425318edcb5232d4a6de84ca4","sha256":"b318b6ed8d97ac03fe75d95b697a1cb2c44b3a0a81e8e8141259fef527eda9d8","sha512":"f461e667c35603263233680926cb62fb65d2cd989588ffa62861ec5d75715dd2deec16eb1e22a52b51c2a9971c2740349648173ba5711e8234056737892f541d","ssdeep":"96:dDFynq7h6vPnzBTZ1HOykgRAbm1qb1my8g73WntzuId6h1emnZ:Z8nq7hiZ1H2mAbmAbz8kSRxd61tZ","tlshash":"6ed1b8645922c6dec8934decb675637ea08ec12fc4b38548e7dc816c1ba1dc58e5cc99","first_seen":"2025-04-08T02:13:33.281282Z","last_seen":"2025-11-18T18:21:52.608266Z","times_seen":14,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/pages/_app-ccfaa41ed030afea.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-ccfaa41ed030afea.js HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_app-ccfaa41ed030afea.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"7f555c3ae32d0fb14695977ca859c43c\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/pages/_app-ccfaa41ed030afea.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xcksd-1760724076082-088478c98839\r\ncontent-length: 10780\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36053,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36053), with no line terminators","md5":"7f555c3ae32d0fb14695977ca859c43c","sha1":"2e2b04a15dce881729e766c1956e153dafea2d20","sha256":"d13535d5f125bd872e15a080c43dafeb4aaa6f059d4f89a56e0c06e8d9933daa","sha512":"a5b6eb7769c5d8fca5a86b86c76bea0aa335f90c8e3550bf8c39d87b0185084972807db78015e6a2313dfd177a80cc2a980d0f5e50bfc94e60af4384c18564b4","ssdeep":"768:o1J0oCMOMzMtM0MpMOMSMlMhPuv8BxikNmnotRCJ9ttLi5Vx1A:00GzAyR2zfKhPuqxPtcirM","tlshash":"73f2a6ca71d2f4a103d39161402f5206f22e5d69640ef4d0e365eed2ea3895fa133fba","first_seen":"2025-04-03T17:33:49.592859Z","last_seen":"2025-11-18T18:21:52.61165Z","times_seen":16,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/827-a4669c1bd6f6fdf9.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/827-a4669c1bd6f6fdf9.js HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"827-a4669c1bd6f6fdf9.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"bc2ef3969a1787f9d0b0840bb7d09205\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/827-a4669c1bd6f6fdf9.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wrr44-1760724076088-a2d21a292cea\r\ncontent-length: 18904\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51290,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49661)","md5":"bc2ef3969a1787f9d0b0840bb7d09205","sha1":"1611040319abf22ccb8ff138f42af7cdf73878ea","sha256":"d79669bb344f75e8c95da4433c3b2c6c74333373f5f4364562c86acbfa78c58f","sha512":"378bbef60cf51f5e487fb17f3757b8f1df480a37bf4064868b375457acb45ad66223cd9a43802f1857a15a6eb3cbe5ea723ec340a56754997e340420207954f7","ssdeep":"768:FScnE40fEfcAWp3TInCD1UqvT/YwYHsDrZnwmfBr50zk6KeM1ej/Ovqq:McE40y7m8neG4/1wMWz0mGvt","tlshash":"8833e9c5f7a1b03603a621d0445f440af279ea3d644e48a8f251e8e738f958a95fff78","first_seen":"2023-04-01T10:57:31Z","last_seen":"2026-05-07T13:25:59.338276Z","times_seen":67,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/_aH7k1ljjjJG8k-E23qPA/_ssgManifest.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/_aH7k1ljjjJG8k-E23qPA/_ssgManifest.js HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_ssgManifest.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"b6652df95db52feb4daf4eca35380933\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/_aH7k1ljjjJG8k-E23qPA/_ssgManifest.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4f4sn-1760724076096-82d24133deeb\r\ncontent-length: 77\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-19T09:46:52.250517Z","times_seen":254214,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/img/logo.png","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 462746\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"9f92a087bbfb01ddb0a85ed962650039\"\r\nlast-modified: Sun, 12 Oct 2025 09:28:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /img/logo.png\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bct5x-1760724076104-246282826dc7\r\ncontent-length: 18043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 346, 8-bit/color RGBA, non-interlaced","md5":"9f92a087bbfb01ddb0a85ed962650039","sha1":"da354e20a5d0d9d88a222e2c841f025a970dfba4","sha256":"52edac7b27bc236a816dce4f818204b5eef293f036914fd12fec2bc476126a85","sha512":"000ae8a7969d863e52f3894b9e62e92152db3a7d4b863ff1b1dac87b5be52882656c97be6b96651e87ec4347eb7fb30e19baafae9343d297ec618b0801b301c3","ssdeep":"384:SQfXXODBNLlIr6SpbT3fhU29IeXQN39i59drWj2+6Hjn:NonLlI2eHueXQN3Qndre2L7","tlshash":"8682af89dcdb84dafc188034d6ef8f517b62dc8f5160172683e8c9b71d07abca4ad590","first_seen":"2023-05-06T08:35:42Z","last_seen":"2026-08-18T16:23:45.003549Z","times_seen":754,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/main-0ecb9ccfcb6c9b24.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/main-0ecb9ccfcb6c9b24.js HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-0ecb9ccfcb6c9b24.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"3b45b8c17501e286fcd07bbf878db8e2\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-0ecb9ccfcb6c9b24.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rxxck-1760724076082-7d10c4e718b4\r\ncontent-length: 28073\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90168,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3b45b8c17501e286fcd07bbf878db8e2","sha1":"7699d22e057eac148d69f3fe7b9fa7853b99e774","sha256":"25fd6cd79b8ba2617614386cf09115f23130d24d136354469033122928635453","sha512":"3942c5771e96634974ea5684e7387c63cd85048bf801b65c6b32ac14b8684d863869c9679a92f04bd598a8124c9303e26a218b8f8f56c4ac55ed4d8513b64a69","ssdeep":"1536:2vdUvNYbmuiBN3hZHVmgvE7XCQm2CJ3LkNk:A+zvUXCWCJb2k","tlshash":"779319b572d1f8a207db41a5c43b0202f3661d3e601fa855e3ebdcd67560d8fa0a2f66","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-05T22:50:12.311414Z","times_seen":443,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/favicon.ico","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /favicon.ico\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::s8cbb-1760724076675-3c0fc85a71fb\r\ncontent-length: 9308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-19T09:47:31.481023Z","times_seen":40957,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":186,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/css/b75208a8c4dde2a0.css","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/css/b75208a8c4dde2a0.css HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"b75208a8c4dde2a0.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"af7c6d7f16ab4dcc3a2fad076788f057\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/b75208a8c4dde2a0.css\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xkxz7-1760724076078-cb95ba3a54bc\r\ncontent-length: 4252\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17545,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17481)","md5":"af7c6d7f16ab4dcc3a2fad076788f057","sha1":"97d9def9bcd1190f7d129ddee2ad2efdbe2dd831","sha256":"ef045371f5627a7d9c88744ea4b7abc9e9ab300ff825af14bb46c0f9a845a5ad","sha512":"940d747de3a42b4724f2f8639be95517a7364712bff53f21bb7bff91557df45e205289af1f47fcb9c3687362250621032a923265709054572f265b5d5f3f93b7","ssdeep":"192:n6wns7JyYY7JyYsqsfNsf7sfqFsfj+L+YGdOmaS8xgn/AZeZNtTtRsfYsfJXsf8s:6wawmYGdOmOMYZeZNthzl","tlshash":"b372651d6f65003f2c6680f6db94fa9c710a70c1de3b5ab6ba931101afd13f60de5618","first_seen":"2025-04-03T17:33:49.593744Z","last_seen":"2026-06-03T17:19:26.452716Z","times_seen":53,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/webpack-38cee4c0e358b1a3.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/webpack-38cee4c0e358b1a3.js HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 462746\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-38cee4c0e358b1a3.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"26a485e9fb19732af7bc08f2ebf0154d\"\r\nlast-modified: Sun, 12 Oct 2025 09:28:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-38cee4c0e358b1a3.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vl2zl-1760724076080-ecf6f3f8c597\r\ncontent-length: 886\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1700,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1700), with no line terminators","md5":"26a485e9fb19732af7bc08f2ebf0154d","sha1":"3af402b5971c083af89dc1fdd17320e98eb01d99","sha256":"c1e92a1c5827b02b976fdd931b13ee9f09d45d31db0edbaadf03ca82b96e9a5a","sha512":"5e632a912e250b250f921d654b51bfbfaa7ee3a37999cdd7ec0abcf729b5dddf019ebac0eec1772da71c9631ad5411b5e0d0eccbf5e1056296afa8c9b35481f7","ssdeep":"","tlshash":"b13145c932e2f8d81717ad65482f809bb03a9973146dd5f2eb11c1b57c351584237f7a","first_seen":"2023-03-14T04:03:47Z","last_seen":"2026-08-18T16:23:45.00785Z","times_seen":763,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/framework-2c79e2a64abdb08b.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"framework-2c79e2a64abdb08b.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"7fc4bed6b4319c62343f0bf5db91a5bb\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/framework-2c79e2a64abdb08b.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jx86z-1760724076081-1d269af31c4e\r\ncontent-length: 46631\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"7fc4bed6b4319c62343f0bf5db91a5bb","sha1":"6e283c4ea2b12da64476af280236a8c5d85dbbbc","sha256":"f2ae26ff518d9519afd2a3dc277d84e098458e6b6b85fa9548cda2bed24435e7","sha512":"e2e0072386f2f35690899509229136406c27c2b95e3e8cc810aeb6630d7f13bd0872e0f6e650b4fddce2567680e7c42eea49c62bd2653006f5151d9ba0430cd7","ssdeep":"1536:2YjvmNg6kMudjY+o3F36qmk1S/qcnde//ZQg:Dj7UN6qT1S5cXmg","tlshash":"a3d309e83995f6526ab311a700af2803733d2a1b280c4960e615fd9e75b841fb17bfdd","first_seen":"2023-03-13T20:58:32Z","last_seen":"2026-08-18T16:23:44.99128Z","times_seen":2328,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"b98bc7c3-3b2716b59bdfc294.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"739ca4ff1562e6418fe90a93135d9ddb\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::s8cbb-1760724076084-bf335895612d\r\ncontent-length: 653\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1264), with no line terminators","md5":"739ca4ff1562e6418fe90a93135d9ddb","sha1":"1dee7b0d39f7aae0c381831390daa0cea3bcef8b","sha256":"6aad604817dd874413449cce9af0b4ddd8ab618984a35d970a1899db987dc9f2","sha512":"4833078975c6304f2111637a233ca835386a894d3b3b4246b8006879dce060ab8769f4d04f4e7822f036d2fb8bec21c5ae85f64cec3d6423062a08e013476dbc","ssdeep":"","tlshash":"752168c4237074add9c52c3850b2266616b8145f34e6c594b77f04c8de61bd45868c6f","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-18T16:23:44.996498Z","times_seen":624,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/1bfc9850-ee9594b91b258940.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/1bfc9850-ee9594b91b258940.js HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 508124\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1bfc9850-ee9594b91b258940.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"ceb280bb31d1e28fb1e5fb92fce3c12d\"\r\nlast-modified: Sat, 11 Oct 2025 20:52:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/1bfc9850-ee9594b91b258940.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4f4sn-1760724076086-b5ad16f1586c\r\ncontent-length: 821\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1561,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1561), with no line terminators","md5":"ceb280bb31d1e28fb1e5fb92fce3c12d","sha1":"0ef31da0f9338254aea18e92ede13163f1b8d5d9","sha256":"244a22ecbbb0ff2de9eccfdcce177db6aa05bcab1aa1cd2ea628baf6516ff600","sha512":"9753286eae8e93f7e860de3dfdc7f61d079ebab19628ce5f6599162d3021623b402ccb3a7658db162e15ae50660d333d50247015f1005dbefce4a41b54d4f721","ssdeep":"","tlshash":"0f31dd7d9294d7eccdb62ded8a3b50b9548f992d20d19b068b60c6b0b5b00c8816eccf","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-08-18T16:23:45.008735Z","times_seen":549,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/chunks/pages/auth-77d0b0c6dc7e01cf.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/pages/auth-77d0b0c6dc7e01cf.js HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"auth-77d0b0c6dc7e01cf.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"2471a844891fcf4ebbc549ef3d661233\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/pages/auth-77d0b0c6dc7e01cf.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lxz7r-1760724076091-8f5d1ed833fa\r\ncontent-length: 2166\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5046,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5046), with no line terminators","md5":"2471a844891fcf4ebbc549ef3d661233","sha1":"f1764be9feb11b18e120de337a5229609f13990f","sha256":"2b6826ead0840e07429a733b9afb14a73071ff764e335234b0f5a064da94a973","sha512":"0706855c9579e1fa04132aefd7f7583b13cc8472a238f39c78bbad70581dff8a7280fd4d9a553eb9587749ec24eab996b76a81e1589754aae507be87d99c7e7f","ssdeep":"96:fAZ3tZmBTeyXFeQpZei0ciqOnG0Xfi39K7tgqURN5favi6:QdZmBeSFPei0cz+K3EBgvRNtX6","tlshash":"44a1d888b4623edda67340ec50bf500df22f5a58dd1e0d90b2f4f0653896894678afed","first_seen":"2025-04-03T17:33:49.602282Z","last_seen":"2025-11-18T18:21:52.616551Z","times_seen":16,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/_aH7k1ljjjJG8k-E23qPA/_buildManifest.js","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/_aH7k1ljjjJG8k-E23qPA/_buildManifest.js HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_buildManifest.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"1fc1a7fdb0606c98db4c7c813990dd13\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/_aH7k1ljjjJG8k-E23qPA/_buildManifest.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pm2tr-1760724076092-d463df6cc2f7\r\ncontent-length: 914\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":914,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (914), with no line terminators","md5":"1fc1a7fdb0606c98db4c7c813990dd13","sha1":"9689e2d53a4dad0e3f55de4d1383d0da264a6e69","sha256":"b0f6460ed1a25284b12e0cd2581e59dbd08debc04df14df3f40ef7a33446bae6","sha512":"b4e7a04c9b14ea9e3b52ad02c28e3a88d959fbd94e9313241a2c082ceeaae5d65e084ac63b3d87014ec053ca2f800c8e4cc4fa525b6628acbc0bd7efd9e6c6bc","ssdeep":"","tlshash":"e81166e3561af8065ef2dc8a386f4323ffd28436553506d6d6ec1e2844805738f8e836","first_seen":"2025-04-03T17:33:49.600772Z","last_seen":"2025-11-18T18:21:52.621081Z","times_seen":16,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/img/hero.jpg","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /img/hero.jpg HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/_next/static/css/b75208a8c4dde2a0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hero.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Oct 2025 18:01:16 GMT\r\netag: \"a737c03b02520f8f95eebaccd0a67cf9\"\r\nlast-modified: Fri, 17 Oct 2025 18:01:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /img/hero.jpg\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rxxck-1760724076306-29c481d61290\r\ncontent-length: 305755\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305755,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"a737c03b02520f8f95eebaccd0a67cf9","sha1":"338fda630759a03dc136a3aaa3ff3134cb6391c8","sha256":"7218b6041ee8b2d63be9bb7aab4322cab1f92bc795586693bffea561b4df9047","sha512":"11d56297c94a94249fa4e53f6ea00b836d103f3683a5f3a828edcaa3ca0cc90a43639e9d441a52eb40ae81bb79229a9910ab6ceefffd8f14cbf48ce9d4973a08","ssdeep":"6144:qEyQZGPMVDNPA3nXDnfr6c9FyqPSe/jCnwj1NkCl693RTLsN1Bja:rnZPA3nXDfrFvyetdjnY9RTo4","tlshash":"4b5423728d532cc634ecdf982454eec8b46bfde694c7246e015dc854392d068daee71a","first_seen":"2023-05-06T08:35:42Z","last_seen":"2026-08-18T16:23:45.016497Z","times_seen":679,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-93tjo56w3-gianruta28.vercel.app/api/auth/session","fqdn":"first-clone-93tjo56w3-gianruta28.vercel.app","domain":"first-clone-93tjo56w3-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://first-clone-93tjo56w3-gianruta28.vercel.app/auth","date":"2025-10-17T18:01:16.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /api/auth/session HTTP/1.1\r\nHost: first-clone-93tjo56w3-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://first-clone-93tjo56w3-gianruta28.vercel.app/auth\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 17 Oct 2025 18:01:17 GMT\r\netag: \"bwc9mymkdm2\"\r\nserver: Vercel\r\nset-cookie: __Host-next-auth.csrf-token=bcddc1abd59b1f2f2ae1dc5dcb3cd8c137c9e77335012ce91518e410a586241b%7C6d0a67730aaeb8a78e85f5c11677253dd816583dc83698ce1090b20ad5b4473d; Path=/; HttpOnly; Secure; SameSite=Lax\n__Secure-next-auth.callback-url=https%3A%2F%2Ffirst-clone-93tjo56w3-gianruta28.vercel.app; Path=/; HttpOnly; Secure; SameSite=Lax\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /api/auth/[...nextauth]\r\nx-robots-tag: noindex\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::jx86z-1760724076685-b61c25e87241\r\ncontent-length: 2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"NextAuth.js","description":"NextAuth.js is a complete open-source authentication solution for Next.js applications.","website":"https://next-auth.js.org","common_platform_enumeration":"","icon":"Next-Auth.png","categories":["Authentication"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-19T09:44:57.723243Z","times_seen":763101,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-93tjo56w3-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}