{"report_id":"7a8e54ab-dd6c-49bf-a2c0-2c8194dc4111","version":6,"status":"done","tags":[],"date":"2026-03-20T18:34:41Z","url":{"schema":"https","addr":"extraordinary-pastelito-8d4c5e.netlify.app","fqdn":"extraordinary-pastelito-8d4c5e.netlify.app","domain":"extraordinary-pastelito-8d4c5e.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"extraordinary-pastelito-8d4c5e.netlify.app/","fqdn":"extraordinary-pastelito-8d4c5e.netlify.app","domain":"extraordinary-pastelito-8d4c5e.netlify.app","tld":"netlify.app"},"title":"네이버 : 로그인","dom":{"size":12182,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"144da3309e8d817b790093ee9851b982","sha1":"8411ee75d561b7a7aa4edd47198885304e67380c","sha256":"255f94045e71ab046b6ab05128d9c2848e4c94e46e8999a1e605cc6e2fedddcc","sha512":"0179f76b1b389935080b705f62c69c24d164e780912c456bdfe24804ad3ef78b89aa2ba08b67e030fe8af07e1172b9b451e64df987ed47caf3d675c8d5ece677","ssdeep":"192:145CxBCx/CbrtIU8x9Fa9cFGFFp9EFGKcL3pGK3AFK3UKLwKRmK4rwjCvCDUkoPE:i5CxBCx/CbrtIhFa9cFGFFp9EFGKcL3F","tlshash":"3842d850a5dd4c3b012381dab0e9bba854ff0e34d7198891f6ff4a316f93c81752a5ba","dom_hash":"domhash7f91d438c5559613627042f318253add","first_seen":"2026-02-02T03:10:35.429084Z","last_seen":"2026-03-21T11:59:57.990561Z","times_seen":24,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"extraordinary-pastelito-8d4c5e.netlify.app","fqdn":"extraordinary-pastelito-8d4c5e.netlify.app","domain":"extraordinary-pastelito-8d4c5e.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":0,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-24T18:34:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-20T18:34:20Z","timestamp":1774031660,"ip_dst":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"Client IP","port":34546,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET HUNTING Suspicious Netlify Hosted TLS SNI Request - Possible Phishing Landing","source":"{\"timestamp\":\"2026-03-20T18:34:20.177902+0000\",\"flow_id\":659181164886621,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":34546,\"dest_ip\":\"35.157.26.135\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2032760,\"rev\":1,\"signature\":\"ET HUNTING Suspicious Netlify Hosted TLS SNI Request - Possible Phishing Landing\",\"category\":\"Possible Social Engineering Attempted\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"Medium\"],\"created_at\":[\"2021_04_14\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0001\"],\"mitre_tactic_name\":[\"Initial_Access\"],\"mitre_technique_id\":[\"T1566\"],\"mitre_technique_name\":[\"Phishing\"],\"signature_severity\":[\"Critical\"],\"tag\":[\"Phishing\"],\"updated_at\":[\"2021_04_14\"]}},\"tls\":{\"sni\":\"extraordinary-pastelito-8d4c5e.netlify.app\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"f4febc55ea12b31ae17cfb7e614afda8\",\"string\":\"771,4865,43-51\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":944,\"bytes_toclient\":3503,\"start\":\"2026-03-20T18:34:20.129629+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"extraordinary-pastelito-8d4c5e.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"extraordinary-pastelito-8d4c5e.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"extraordinary-pastelito-8d4c5e.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"extraordinary-pastelito-8d4c5e.netlify.app","ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2018-05-08","domain_rank":0,"first_seen":"2026-03-20T12:35:43.857723Z","last_seen":"2026-03-20T12:35:43.857723Z","alert_count":3,"request_count":1,"received_data":13187,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}]},{"fqdn":"nid.naver.com","ip":{"addr":"125.209.233.29","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"domain_registered":"1997-09-12","domain_rank":10343,"first_seen":"2013-11-07T14:13:54Z","last_seen":"2026-03-16T23:50:35.081963Z","alert_count":0,"request_count":1,"received_data":27884,"sent_data":491,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-15T23:03:26.25948Z","alert_count":0,"request_count":1,"received_data":268969,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ssl.pstatic.net","ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2011-09-06","domain_rank":71086,"first_seen":"2012-10-18T18:40:49Z","last_seen":"2026-03-19T03:06:52.219242Z","alert_count":0,"request_count":4,"received_data":164355,"sent_data":1918,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"extraordinary-pastelito-8d4c5e.netlify.app/","fqdn":"extraordinary-pastelito-8d4c5e.netlify.app","domain":"extraordinary-pastelito-8d4c5e.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"fafcfcaea3b48bed0fb8e413bbdcb63b","sha1":"5511b3d584a075447473b3442a8f6848420cc28f","sha256":"1dd3fbbb59c962bf8cd419fa4a65f60790c8c7eeea8874b4f3acc3e14a31a9ff","sha512":"0ed06b286ea4a9e0777f00426e4353f1d57acc5d7889bb32f375e368ebd3fdc7942434d219c8f9e537a00e051891b44d89c6c3dc12549678029d708bf5abadfb","ssdeep":"","tlshash":"3ee022ea384d96bc4a6a21feb01742c92c20a6641c05f0b2ee0cb8705c20e42c1be6e1","size":398,"data":"","first_seen":"2023-03-07T01:28:11Z","last_seen":"2026-04-23T23:51:16.735546Z","times_seen":201,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extraordinary-pastelito-8d4c5e.netlify.app/","fqdn":"extraordinary-pastelito-8d4c5e.netlify.app","domain":"extraordinary-pastelito-8d4c5e.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b94757422e94e6e83d2656c591e44496","sha1":"c3031ffd41fa3f6065c773f62a87c29203265126","sha256":"e4cddd479c41f0838884dd63cdaff05f499f446efd9dc7cc65dffd8750487ffe","sha512":"328ec3c9e7f08eb176b8c90073a44a5cec88923b640270abca51e708c01b2b487805bf985740a911ea8422477861cf49befc9ee6043c0076aa555cedfac0b1d2","ssdeep":"","tlshash":"6321ef0ab75d169028732039797f62847abe637b18419dc17c4c29b83f29f4e885e796","size":1288,"data":"","first_seen":"2026-02-02T03:10:35.436601Z","last_seen":"2026-03-21T11:59:57.995868Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.9.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08c235d357750c657ac1db7d1cf656a9","sha1":"9257afd2d46c3a189ec0d40a45722701d47e9ca5","sha256":"7bd80d06c01c0340c1b9159b9b4a197db882ca18cbac8e9b9aa025e68f998d40","sha512":"d62700e7a1ff41f9d6326ca024ba2be1d391bc8fbb2aeae0f427d74837899b230940bf7c2df3d193f5300a68bb3686706d4c31328234b5cda026a1bf52ef9e70","ssdeep":"6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i","tlshash":"fa44b6d8f78c112e8232316aad2f51cdb67cd172561058afbd8d597c24a083d42faf7a","size":268381,"data":"","first_seen":"2023-03-07T01:03:57Z","last_seen":"2026-08-18T19:15:23.482541Z","times_seen":39287,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nid.naver.com/login/css/global/desktop/w_20220216.css?20210812","fqdn":"nid.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"125.209.233.29","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extraordinary-pastelito-8d4c5e.netlify.app/","date":"2026-03-20T18:34:20.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corporation"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 10 Mar 2026 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"95:3E:16:7E:72:59:F6:98:96:BA:A0:BC:7D:E1:FB:08:46:19:EC:5A","sha256":"F2:C6:12:BB:A7:7B:CE:90:2D:0A:81:33:C8:C7:00:9B:3A:0F:FA:F6:1F:F3:F8:15:9A:74:2D:51:5C:D5:CA:56"}}},"request":{"raw":"GET /login/css/global/desktop/w_20220216.css?20210812 HTTP/1.1\r\nHost: nid.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extraordinary-pastelito-8d4c5e.netlify.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 20 Mar 2026 18:34:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 18 Mar 2026 07:33:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69ba555f-6a84\"\r\naccept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang, ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile, sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile\r\naccept-ch-lifetime: 86400\r\nx-ua-compatible: IE=edge\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27268,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27268), with no line terminators","md5":"989cd6da83bce8fc028712e3dea87a44","sha1":"6b2c58b13a735e1a4d9f811e18d0cdd61f68edda","sha256":"de1f6ef9f776adff8398700d0253745557df93c37972e8be399b11f31f408256","sha512":"0ef9f46c566ca8239d3dbffc169383d054cf6188d7c7a53958f12e8ef3893f79c9a3f9bae868a568a20967aafe91ea6d488a0d3939aea15919689b6f53c1cd1a","ssdeep":"384:rD2LRwOnh0YW6MGdVTxSfFPqDyfFihiyaGf+n4eLP8Kxfv9kG/Z4e/:GRfh0Yr0fFihiyaGf+n4K/F","tlshash":"44c297329664202ef63bde22b5917bde3134c117d5278f3eea57777486820e62933b84","first_seen":"2023-04-07T09:00:50Z","last_seen":"2026-04-26T09:50:09.680249Z","times_seen":124,"resource_available":false,"data":null}},"time_used":1565,"timings":{"blocked":644,"dns":26,"connect":270,"send":0,"wait":271,"receive":0,"ssl":351},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.9.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.130.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extraordinary-pastelito-8d4c5e.netlify.app/","date":"2026-03-20T18:34:20.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-1.9.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extraordinary-pastelito-8d4c5e.netlify.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-4185d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 20 Mar 2026 18:34:20 GMT\r\nage: 622631\r\nx-served-by: cache-lga21952-LGA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 31, 970\r\nx-timer: S1774031661.667466,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 79506\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":268381,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"08c235d357750c657ac1db7d1cf656a9","sha1":"9257afd2d46c3a189ec0d40a45722701d47e9ca5","sha256":"7bd80d06c01c0340c1b9159b9b4a197db882ca18cbac8e9b9aa025e68f998d40","sha512":"d62700e7a1ff41f9d6326ca024ba2be1d391bc8fbb2aeae0f427d74837899b230940bf7c2df3d193f5300a68bb3686706d4c31328234b5cda026a1bf52ef9e70","ssdeep":"6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i","tlshash":"fa44b6d8f78c112e8232316aad2f51cdb67cd172561058afbd8d597c24a083d42faf7a","first_seen":"2023-03-07T01:03:57Z","last_seen":"2026-08-18T19:15:23.482541Z","times_seen":39287,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":25,"dns":1,"connect":26,"send":0,"wait":27,"receive":35,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/static/nid/login/banner/m_banner_2step_924x294.png","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extraordinary-pastelito-8d4c5e.netlify.app/","date":"2026-03-20T18:34:20.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /static/nid/login/banner/m_banner_2step_924x294.png HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extraordinary-pastelito-8d4c5e.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Testa/6.2.11\r\nlast-modified: Mon, 12 Apr 2021 07:18:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55608\r\nreferrer-policy: unsafe-url\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ncache-control: max-age=327742\r\nexpires: Tue, 24 Mar 2026 13:36:42 GMT\r\ndate: Fri, 20 Mar 2026 18:34:20 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 920 x 294, 8-bit/color RGBA, non-interlaced","md5":"c072311f1036d8a351056f3f2aa04bc8","sha1":"c21f7f277db8c62055dd546c2ae741539713fec8","sha256":"dbec0a6f4f63ad346cc2e20fd1c52dd79a019978ee031ba0f76dbcb9d3fac6df","sha512":"cdbc3e321036ac768f7fb281a4883eca283cb62dcf623c5e05af78da40c3fdb970b3a8485a1664805e85f823b13d1ba015e0fe695f524fa2c181e78058e835cd","ssdeep":"768:GFzZBXEkPNNnOFlmlkui/LZ7C6q2e0gmGf0sciusedgtTQ66uHGwbGVz6fSfiZSp:G9Zhfolm8TAdNoTsd066uHGX5LMzE","tlshash":"5343e006f39175e359b2a2216e1b0c593c1ac49d7218c7dd449b34b4ae327adfcb392d","first_seen":"2023-05-01T11:21:54Z","last_seen":"2026-05-06T03:22:32.523469Z","times_seen":782,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":6,"dns":33,"connect":1,"send":0,"wait":3,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/static/nid/login/m_sp_00_common_978240a6.png","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extraordinary-pastelito-8d4c5e.netlify.app/","date":"2026-03-20T18:34:21.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /static/nid/login/m_sp_00_common_978240a6.png HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nid.naver.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Testa/6.2.11\r\nlast-modified: Thu, 28 Oct 2021 05:48:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21505\r\nreferrer-policy: unsafe-url\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ncache-control: max-age=422788\r\nexpires: Wed, 25 Mar 2026 16:00:49 GMT\r\ndate: Fri, 20 Mar 2026 18:34:21 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 488 x 214, 8-bit/color RGBA, non-interlaced","md5":"978240a64630afc18684d2b835a27ae2","sha1":"d4605e0721901ac73e8b9e92526c06d715e964f9","sha256":"3be89f766c6a9ac418ec1c6f33dc7a24607a6e067c0731e77b8cc01fb3355bc7","sha512":"49da669a13e87333d599ceba735df00fa73e70c1446f1296a6f14e9dfea7b7853858f914019be10560347c86a0e743b79f20a0fe09bee561d6ae7fa6673c8561","ssdeep":"384:32utVj9x+pdRkpT1KM31767kkbMw6t8oce2zEeT3ae/5kxVKT7Z:GaZVTu7kJhqc09/Cxq7Z","tlshash":"54a2e1c0443de6df34e6bf310a5a114c28ae674b202a1fbbdd14d8eda5d604c8c4acd3","first_seen":"2023-05-17T15:15:42Z","last_seen":"2026-08-02T17:18:00.750632Z","times_seen":1296,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/static/nid/login/m_sp_01_login_008d5216.png","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extraordinary-pastelito-8d4c5e.netlify.app/","date":"2026-03-20T18:34:21.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /static/nid/login/m_sp_01_login_008d5216.png HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nid.naver.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Testa/6.2.11\r\nlast-modified: Wed, 16 Feb 2022 12:15:27 GMT\r\naccept-ranges: bytes\r\ncontent-length: 85176\r\nreferrer-policy: unsafe-url\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ncache-control: max-age=154088\r\nexpires: Sun, 22 Mar 2026 13:22:29 GMT\r\ndate: Fri, 20 Mar 2026 18:34:21 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 532 x 450, 8-bit/color RGBA, non-interlaced","md5":"008d521652f80f71b294b846c4cc8e5e","sha1":"c46c493d564ad2c3cc8120b5d7cebe11398aa220","sha256":"1bf14b8b72b6a63f58405cf21a1954a75b85b00c85fec19bc784d33f6c8e4a64","sha512":"79b3969bbbebeaaeac1ca88a013c65dd01e9fa47bb4abea9e4404369c9eeb86e8175ae6dc7033dd0e4af661df0cf87c3e9e46515e15d18d7b08147d214235456","ssdeep":"1536:/S9Ip6xUXShrDaId1rzM0dLLZ33sNWtdZihWQaInIfQf3sl:/L6xUXSlrfMKLLB3scAlaInMmcl","tlshash":"5e830285b30afc9808843548020b14be5a9091b4ddbdda4f19ea19779ef4be77cb1b93","first_seen":"2023-05-17T15:15:42Z","last_seen":"2026-07-12T23:43:28.474563Z","times_seen":165,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/sstatic/search/common/og_v3.png","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.77.25","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extraordinary-pastelito-8d4c5e.netlify.app/","date":"2026-03-20T18:34:21.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /sstatic/search/common/og_v3.png HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extraordinary-pastelito-8d4c5e.netlify.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Testa/6.2.11\r\nlast-modified: Fri, 15 Jul 2016 09:40:49 GMT\r\netag: \"2d4-537a969e26a40\"\r\naccept-ranges: bytes\r\ncontent-length: 724\r\ncontent-type: image/png\r\ncache-control: max-age=29492135\r\nexpires: Thu, 25 Feb 2027 02:49:56 GMT\r\ndate: Fri, 20 Mar 2026 18:34:21 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit colormap, non-interlaced","md5":"0fc26506aec9e07d6bfdd99d2e31d88d","sha1":"46f433723062f8700bf61fe68ea648d79a2b292d","sha256":"624901f7513fa4aae712d94f8e47cbc3be38a4d3ac0d433c5eac74c23007c777","sha512":"e3c85677583914aba4dd84384cc0dccfe5465d0ec7124e0d507313a8aa86a699ddf9b403d3f78993d18c15ff486a64e4f0f366072c373e5e9920ef8a77ca9e3d","ssdeep":"","tlshash":"290144c30a70ef85cc0a9e33e8b256128a9338e3b1c5a61988d9721959b5a58d982a54","first_seen":"2023-05-01T11:21:54Z","last_seen":"2026-05-06T03:22:32.524836Z","times_seen":784,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extraordinary-pastelito-8d4c5e.netlify.app/","fqdn":"extraordinary-pastelito-8d4c5e.netlify.app","domain":"extraordinary-pastelito-8d4c5e.netlify.app","tld":"netlify.app"},"ip":{"addr":"35.157.26.135","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-20T18:34:20.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.netlify.app","organization":"Netlify, Inc"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 16 Feb 2026 00:00:00 GMT","end":"Fri, 19 Mar 2027 23:59:59 GMT"},"fingerprint":{"sha1":"34:CF:A1:69:24:C8:27:24:03:C7:7C:E7:F2:A1:8C:86:4A:EB:8B:FA","sha256":"BC:3A:81:34:C2:1A:84:2E:64:EA:34:D4:88:82:6D:D2:BA:50:F5:9A:3B:CB:AE:D1:E6:B7:1A:42:42:DE:14:78"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: extraordinary-pastelito-8d4c5e.netlify.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; fwd=miss\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 20 Mar 2026 18:34:20 GMT\r\netag: \"9ccd739a19565d82686fe452c7bef8f8-ssl-df\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nx-nf-request-id: 01KM68DS6NWZ6TEG65X1Z500VF\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]}],"data":{"size":12725,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8325cef86e78f8e4a534e3498cd30034","sha1":"e714cbe24a95618c096875c74de936f7cff9b277","sha256":"b88b41aca34565c46b3f077f0014d5ed8dabb8f95823613793d8cd682941b9fd","sha512":"310d92c8f9033c84607dae128dd6c49592f427835b89ae5a62b11be228dd42a041ea07882750abf871565c7adcdee66eb14894db94072eae5fbe2395ff3fcb74","ssdeep":"384:X5CxBCx/CbltIBFZ9cFGFF09EFGKoLppGK3AFK3UKLwKRmK4rwjC44or95M:X5wCjoKG9Dy89K","tlshash":"c642d890a5dd5c3b002381dab0e9bba850ff0e34d7194891f6ff4a316f93c81752a5ba","first_seen":"2026-02-02T03:10:35.433267Z","last_seen":"2026-03-21T11:59:57.994804Z","times_seen":24,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":125,"dns":27,"connect":24,"send":0,"wait":189,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"extraordinary-pastelito-8d4c5e.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-20","alert":"Sinkholed","trigger":"extraordinary-pastelito-8d4c5e.netlify.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-20","alert":"Phishing Block","trigger":"extraordinary-pastelito-8d4c5e.netlify.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}