{"report_id":"9ae02694-88ae-4525-8d16-6f2f08b6dbdd","version":0,"status":"done","tags":["netflix","phishing"],"date":"2026-09-05T15:05:12Z","url":{"schema":"http","addr":"autii.com/","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"autii.com/","fqdn":"autii.com","domain":"autii.com","tld":"com"},"title":"Netflix","dom":{"size":4075,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2897)","md5":"96719bdc49b1b74c45ddd272093bd50d","sha1":"ccecaf830a7f0dd70f4126442727c662b6152448","sha256":"dcc86daf28c906fb05ce0704e4add4f687a8d974991978ecf4eb2a3b958e1aeb","sha512":"9e3dad82db62d30547fd6eff8c4735e52da4f094e2967c6c0dbd291d5aaaccdd211cfb3af5757945bb37ef2ac2f639c2cb439881838bce6f51011963204ddff6","ssdeep":"","tlshash":"c381b6b68c95d96b8e9102c3f41d774fb9c2534adb6346806ae8cee075e06e4ccd6149","dom_hash":"domhash154fc1e892caea4481f1b9e5e307c060","first_seen":"2026-07-11T07:31:08.09167Z","last_seen":"2026-09-05T20:19:05.564818Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"autii.com/","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T15:05:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"autii.com","ip":{"addr":"172.67.145.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-07-20","domain_rank":0,"first_seen":"2015-05-25T23:33:10Z","last_seen":"2025-09-14T09:46:28.40687Z","alert_count":21,"request_count":7,"received_data":2073001,"sent_data":3215,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"autii.com/","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"604dfef56228af0d399399c3e54a6a2d","sha1":"4e22b148fb97b5b26bc5ff647e1b89a41324dca9","sha256":"ad86e8decf22bf891ed34fe130877236915f2ce104827e7385ad5baac52a7f63","sha512":"eb542dfad8c313e2891753fd9a95a9010c29e4ffba31afb2347dd9897623dfbb699092a6dbe85f7a4b69db262fedc75186c7b568de67114064c9dddb8f88d6d8","ssdeep":"","tlshash":"f3f0a39d3c56f05737f93634c2238a6f3755170075839524ca45cc3468549865886d4d","size":443,"data":"","first_seen":"2026-06-07T13:30:32.982086Z","last_seen":"2026-09-05T20:19:05.572494Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"autii.com/assets/index-aMka_Kdt.js","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0d240ed5a939c31254bda3c7b3960de","sha1":"e1c949133bee075888a950fce9e22a1952c5436e","sha256":"7e557a57691186e4f9baef064a552f610bd4b8f4170defcc9767d08e7e8dcdc3","sha512":"2a55a09335dea6ee2ff91c54e71413655842982f758d6da82a35730d63e88611e29b966a991b65538c08f7f2610054faba0a5dc1cddac94cfef6408763411eea","ssdeep":"49152:MzetIAO168VxBzmJuvAEHhWa5XzyfuFdEZi7y0ua8TxDuozFiRFo0/Yg4ZHzF/lT:x868t4cX4uFdNjgL","tlshash":"869529d97277e83a499a3284355f0117762b1be0f4ceca80b398ca4539e153cb937b79","size":2043721,"data":"","first_seen":"2025-02-22T22:51:45.416053Z","last_seen":"2026-09-05T20:19:05.574876Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Error fetching IP address:map[actor:server1.conn0.watcher17.process7//obj25 class:Object extensible:true frozen:false isError:false ownPropertyLength:6 preview:map[kind:Object ownProperties:map[code:map[configurable:true enumerable:true value:ERR_NETWORK writable:true] config:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj26 class:Object extensible:true frozen:false isError:false ownPropertyLength:17 sealed:false type:object] writable:true] message:map[configurable:true enumerable:true value:Network Error writable:true] name:map[configurable:true enumerable:true value:AxiosError writable:true] request:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process7//obj27 class:XMLHttpRequest extensible:true frozen:false isError:false ownPropertyLength:0 sealed:false type:object] writable:true]] ownPropertiesLength:6 safeGetterValues:map[stack:map[enumerable:false getterPrototypeLevel:2 getterValue: writable:true]]] sealed:false type:object]","filename":"https://autii.com/assets/index-aMka_Kdt.js","line_number":80,"column_number":5403},{"level":"error","text":"Error fetching data:cc argument must be an ISO 3166-1 alpha-2 string, but got 'undefined' instead.","filename":"https://autii.com/assets/index-aMka_Kdt.js","line_number":95,"column_number":235}]},"http":[{"url":{"schema":"https","addr":"autii.com/Panel/stats/update.php?put=totale","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://autii.com/","date":"2026-09-05T15:04:42.973Z","timestamp":1788620682973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 21:52:32 GMT","end":"Tue, 20 Oct 2026 22:51:04 GMT"},"fingerprint":{"sha1":"F5:13:14:54:83:A7:5C:FB:40:33:1E:4C:79:A3:0D:55:E9:8F:E5:AD","sha256":"34:CA:BE:22:CC:42:D8:0E:F4:E4:18:B7:F2:21:1B:F3:B7:5B:5D:4F:33:F4:1C:1E:A3:3A:79:BF:D1:98:C8:F1"}}},"request":{"raw":"GET /Panel/stats/update.php?put=totale HTTP/1.1\r\nHost: autii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autii.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 15:04:43 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IN2LY4Qhh5bgbZdiLxbxOKiM2%2BBAhpMIDR4Xgr79uJM%2BBoMPnMQE0c1kOxpQsRl5F4%2FRzNKl7w%2FjI8mf5FJVbFu3Thtcjx3JJBmkmajqQxPU%2BURZHKls1Y2tCcw%3D\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a36620c499fb0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":725,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"6b2ded51d81a4403d8a4bd25fa1e57ee","sha1":"e5fd9cfe0e8039111d54b588e77b2bb0cad41c3a","sha256":"a4c3ed04a95a3da14a9d235c83d868bed7c0f45cf7f3faa751ee8f50598d2211","sha512":"07b8a32b38151e20c27bf64ee5fa32cf2f19e2ef0f749e50ecf8069a368eddd1f0822b7b4dea7e8380d9e26425efbeb54ccac432c09b75b82356afcf94cec37d","ssdeep":"","tlshash":"54300000000000003000000c00003000000000000c0000000000000000000000000000","first_seen":"2023-03-09T12:27:28Z","last_seen":"2026-09-05T20:19:05.567488Z","times_seen":2691,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"autii.com/assets/index-aMka_Kdt.js","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://autii.com/","date":"2026-09-05T15:04:41.605Z","timestamp":1788620681605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 21:52:32 GMT","end":"Tue, 20 Oct 2026 22:51:04 GMT"},"fingerprint":{"sha1":"F5:13:14:54:83:A7:5C:FB:40:33:1E:4C:79:A3:0D:55:E9:8F:E5:AD","sha256":"34:CA:BE:22:CC:42:D8:0E:F4:E4:18:B7:F2:21:1B:F3:B7:5B:5D:4F:33:F4:1C:1E:A3:3A:79:BF:D1:98:C8:F1"}}},"request":{"raw":"GET /assets/index-aMka_Kdt.js HTTP/1.1\r\nHost: autii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autii.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 15:04:41 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 09 Jan 2025 12:29:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NuxcWwC%2BM%2F42BHDWUv6bfgXGA5ftLXLkV9lSnuHo1N5%2Fep3pQgmTxOFAxrG58%2BhD9Frs%2BdETKoK6KeRJbS45ECLzqJqQoOiNUptp71qC52Etp54l%2FMRLIdCWPNU%3D\"}]}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a36620bc09b10b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2043721,"size_decoded":633615,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37550)","md5":"ee82927aeb57371b18add4c25d82b001","sha1":"2195bdf1ac1008f1ebad7df9464ef6a639166f86","sha256":"207c2eb04337273324b37f918720e072bf92bbb198c17427d89aed00ef0e0faa","sha512":"cbdf6f5a90833cdc4d249bce0000a48d3a25df754d1ddf2893ec5eba23da9a4deb8fd1ff05e4bc52fcf32bfebc9913a3338ec70a5d94e79cf6d43d93b1804445","ssdeep":"24576:MzetIOnrVQ16jzP/MqkMH4YQ3w1uq6xBzmJuvAEHhWa6QK:MzetIAO168VxBzmJuvAEHhWa5K","tlshash":"d125a2d9663bdd3e09993344364f0213ba6f1be1f1de9a8063c4da0539e053cb9366b9","first_seen":"2025-07-28T04:52:12.165243Z","last_seen":"2026-09-05T20:19:05.566268Z","times_seen":57,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":708,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"autii.com/favicon.ico","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://autii.com/","date":"2026-09-05T15:04:43.084Z","timestamp":1788620683084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 21:52:32 GMT","end":"Tue, 20 Oct 2026 22:51:04 GMT"},"fingerprint":{"sha1":"F5:13:14:54:83:A7:5C:FB:40:33:1E:4C:79:A3:0D:55:E9:8F:E5:AD","sha256":"34:CA:BE:22:CC:42:D8:0E:F4:E4:18:B7:F2:21:1B:F3:B7:5B:5D:4F:33:F4:1C:1E:A3:3A:79:BF:D1:98:C8:F1"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: autii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autii.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 15:04:43 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Jun 2024 21:54:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yy0UsqRvfZq85KCu9oxbjNWM4DXoBb%2FcVjxny7TJSQmAQ0VZEeQdabRGFgnJS0KoYNl5%2Fr3RfcZPQxrrUmAAKiuEfPjgJpnVSDNjUmfakb08pX5u%2Fd%2B7llATH2c%3D\"}]}\r\ncontent-type: image/x-icon\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a36620c54a030b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9854,"size_decoded":2469,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"58f54d9ea15176671802bebeee4da4cb","sha1":"4ba1cb97814772435962f3ac25af0def81851735","sha256":"9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3","sha512":"32e6c1ac6220b03bafb9215e4db4cf91352573c34a82accc893b4c7d4d3194d495e241c2f814372930a988688492926fe1d9a5576d2e46378c9f6d1e927c71db","ssdeep":"48:5uZhmwr2VEbaA+8H3J7HZqH0S/DHDHp8HfH5gAaqHwMqHBVqH/6BqHAtvqHAAcqK:shm0AN6YHEOFtwVPmyqPmorAtAco","tlshash":"8a12a02710c35d6cfe016eb8d297ec3a517d40ddeefe82e79a81bd390612146a5cb8e4","first_seen":"2023-09-08T13:51:14Z","last_seen":"2026-09-06T02:17:11.350773Z","times_seen":2226,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"autii.com/config-30/panel.php","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://autii.com/","date":"2026-09-05T15:04:43.154Z","timestamp":1788620683154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 21:52:32 GMT","end":"Tue, 20 Oct 2026 22:51:04 GMT"},"fingerprint":{"sha1":"F5:13:14:54:83:A7:5C:FB:40:33:1E:4C:79:A3:0D:55:E9:8F:E5:AD","sha256":"34:CA:BE:22:CC:42:D8:0E:F4:E4:18:B7:F2:21:1B:F3:B7:5B:5D:4F:33:F4:1C:1E:A3:3A:79:BF:D1:98:C8:F1"}}},"request":{"raw":"GET /config-30/panel.php HTTP/1.1\r\nHost: autii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autii.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 15:04:43 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpoEaR%2FMvtp3RR8aBeyGyzsmrvAieeq3TCGPT9PfZVr5%2BILfryY071gohoPNRpoY2IGqT%2FZP8Ln8iCDEL5cMXBYJxQRMpjhN9%2B2QO%2BYV6ynuW97jwkpAHYW6B9g%3D\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a36620c5ba040b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191,"size_decoded":865,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"cef6dab686077f0162211a819396c9df","sha1":"3af7b104c6c94bb6f9e4ef7695e116af5e4011b5","sha256":"b2775ae30257b83b3beedf4f619f84611cd7b6c400910c2f4022f92d44757127","sha512":"12d381253334b1481506332b287283a78a1237a79466534f20b715c511a87a3e032ec7586f6867f47d1ca84a2d75f1d343628ceaf3ce5ac00e849012293bfc3e","ssdeep":"","tlshash":"c2c0222284846c3dc034081101623fa2ae3ea6339005e802308e08857433803202c46b","first_seen":"2026-05-11T06:07:50.924709Z","last_seen":"2026-09-05T20:19:05.568549Z","times_seen":14,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"autii.com/antibots/check.php?ip=null","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://autii.com/","date":"2026-09-05T15:04:43.603Z","timestamp":1788620683603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 21:52:32 GMT","end":"Tue, 20 Oct 2026 22:51:04 GMT"},"fingerprint":{"sha1":"F5:13:14:54:83:A7:5C:FB:40:33:1E:4C:79:A3:0D:55:E9:8F:E5:AD","sha256":"34:CA:BE:22:CC:42:D8:0E:F4:E4:18:B7:F2:21:1B:F3:B7:5B:5D:4F:33:F4:1C:1E:A3:3A:79:BF:D1:98:C8:F1"}}},"request":{"raw":"GET /antibots/check.php?ip=null HTTP/1.1\r\nHost: autii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autii.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 15:04:43 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dJxyGWZ4FVwCMihxkGUlvQYsd%2FHRrcQ9J3zELNgiDy0vi%2FYPqxAWQuuRv%2FvqqcLJQ75a%2BasL%2FY6vgEFo5XQqd8j%2B2atI06wuN%2BpsxG4nTD1cH4rRyAlCqx%2Bdm3s%3D\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a36620c88a1b0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":767,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"c0c359a2817e4f3a450168227ee6f8d3","sha1":"c84ad71c3c7b87d35baef95bf93cfa149e5008ce","sha256":"1b8105e8c3dc56befae26dac6c55c61233052455da99916f0d65b28ff56bf590","sha512":"afc890049cc954186d5c7c47eaecafa0bdad98471757700c8c76dde15b01e2cab894f86b361b774d0754a1267effa35c733accb97fa12336de6cdf106461694e","ssdeep":"","tlshash":"f1900475c501540d505135035153d0304ff15c05435570350ccc0c04100cc0137d7540","first_seen":"2026-07-07T06:56:54.870963Z","last_seen":"2026-09-05T20:19:05.569711Z","times_seen":8,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"autii.com/","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T15:04:40.932Z","timestamp":1788620680932,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 21:52:32 GMT","end":"Tue, 20 Oct 2026 22:51:04 GMT"},"fingerprint":{"sha1":"F5:13:14:54:83:A7:5C:FB:40:33:1E:4C:79:A3:0D:55:E9:8F:E5:AD","sha256":"34:CA:BE:22:CC:42:D8:0E:F4:E4:18:B7:F2:21:1B:F3:B7:5B:5D:4F:33:F4:1C:1E:A3:3A:79:BF:D1:98:C8:F1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: autii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 15:04:41 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 05 Nov 2024 21:19:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OVhE1PH2Yl54pvW4vW2t7Yb72yzYhleDbBRe6D3DiZRb%2BVHk75JM8s7WnKFT4MU%2F3TpJVLmBMwVU7%2F5p0P6zDYCAdagr1svYxZn62Pcp9rzBNrLbNx5qBwaOmr4%3D\"}]}\r\ncontent-type: text/html\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a36620b8199a0b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1165,"size_decoded":1329,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"98f31d6c289ea89f6b41ca3a772266b0","sha1":"7ee3288aa32547b691a32f7cc658e7d68f2b953c","sha256":"66ff02e98e7a94c742331f6419eee5948dfa4e54f43c5a40a07b8243e420abb0","sha512":"0ed7a09115eb39325b9925af801348fd71a4f998a36a848febf3370e10fcb322d9e6bf9e5e8e9d604b872862cb3ecea9302c2d5e3eea3935858c0ffdd15740bc","ssdeep":"","tlshash":"fa2133091c01e81613b25234fab2d60de77653066782fe04f6d2843a3f90a858ccb59c","first_seen":"2024-11-11T09:51:02.171172Z","last_seen":"2026-09-05T20:19:05.570791Z","times_seen":77,"resource_available":true,"data":null}},"time_used":472,"timings":{"blocked":0,"dns":16,"connect":20,"send":0,"wait":436,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"autii.com/assets/index-DmeVuRrr.css","fqdn":"autii.com","domain":"autii.com","tld":"com"},"ip":{"addr":"172.67.145.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://autii.com/","date":"2026-09-05T15:04:41.606Z","timestamp":1788620681606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autii.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 21:52:32 GMT","end":"Tue, 20 Oct 2026 22:51:04 GMT"},"fingerprint":{"sha1":"F5:13:14:54:83:A7:5C:FB:40:33:1E:4C:79:A3:0D:55:E9:8F:E5:AD","sha256":"34:CA:BE:22:CC:42:D8:0E:F4:E4:18:B7:F2:21:1B:F3:B7:5B:5D:4F:33:F4:1C:1E:A3:3A:79:BF:D1:98:C8:F1"}}},"request":{"raw":"GET /assets/index-DmeVuRrr.css HTTP/1.1\r\nHost: autii.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://autii.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 15:04:41 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 21 Aug 2024 01:26:52 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cw1Z8xFQPmooLnRnlxmR8RyM4lZb5hgVtrM3Mmf1kCARAlFR8va6jCEJSxzIJwgCvdygpxd7XSlUVjo%2FGbJ0zLi9n9hpwL5T3P5UUzF4De%2FXQYbcR4Ul18kCRQE%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a36620bc09b20b41-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13333,"size_decoded":4591,"mime_type":"text/css","magic":"ASCII text, with very long lines (13332)","md5":"f6d14b7be48b1b6c56bc0e4620d37e6e","sha1":"b4272007722b701e2846da86fbc9b5d9deb34c2a","sha256":"4e85734a29bd47f9f47994b75f046edf3566ca99fba709b51bf7ffaf464cf618","sha512":"463351ed8e4fa03366e517ec216aba9da0ee0acc8fca1b719c0dd498f6753433c6ed2239a4e80308ad5de894498fe74a1001f6ac3b0cd54a1f5531cb06176e1c","ssdeep":"192:vxwOW9JyW9Jy7ecONu1ps2ZNQOLXM6/s86l3rHN:5wRojZNP/6","tlshash":"c45298296754103abd1380faf8d4fa49b11ab0d1df3bd7baa5876504f7d22e318a3708","first_seen":"2024-08-23T10:38:11Z","last_seen":"2026-09-05T20:19:05.57133Z","times_seen":110,"resource_available":false,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"autii.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}