{"report_id":"a10090cf-4b4b-4494-a907-c52b102cf307","version":6,"status":"done","tags":[],"date":"2026-01-07T16:55:54Z","url":{"schema":"http","addr":"www.0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"www.0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"title":"Sign in to Xfinity","dom":{"size":3769,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3432)","md5":"c74a0abea9c75df7c38cf44106fe3235","sha1":"b7a7957817e8fa7625e4ed920e3c5513646aefc6","sha256":"ba13e287071c2471fe82a4e99653520e0b5fd5df2b61489a38016008c3453c27","sha512":"3c7cb4336c94ccf035401238902c5015efc48c2d5eda3ced94b1a8d9dd73431f3bba3b7a551b1c2d942d24d2fc5bac0e52e71c769a18bcddc71ed1d819d645be","ssdeep":"","tlshash":"f87182337b69211af333c89fa1c26b993010a122d1abcab5ff57df15d5ca1655e0278c","dom_hash":"domhash31a19887ab60b039e33ca13a230f9f62","first_seen":"2026-01-07T16:56:04.032665Z","last_seen":"2026-01-07T16:56:04.032665Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"www.0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-11T16:55:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.cimcontent.net","ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2008-10-17","domain_rank":228070,"first_seen":"2018-06-06T22:15:44Z","last_seen":"2026-01-02T13:32:33.390356Z","alert_count":0,"request_count":2,"received_data":119842,"sent_data":1191,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"www.0-autht-lo-xfin-ity-w0965.vercel.app","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-01-07T16:55:55.457004Z","last_seen":"2026-01-07T16:55:55.457004Z","alert_count":19,"request_count":4,"received_data":438789,"sent_data":1952,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"polaris.xfinity.com","ip":{"addr":"23.44.40.18","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2003-01-23","domain_rank":292399,"first_seen":"2017-04-08T11:22:46Z","last_seen":"2026-01-02T13:32:33.527083Z","alert_count":0,"request_count":1,"received_data":255738,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"jezqzfixgomcanhrbtvb.supabase.co","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-01-11","domain_rank":0,"first_seen":"2024-12-12T09:08:53.504458Z","last_seen":"2026-01-06T17:28:55.889184Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":507,"comment":"","tags":null,"fingerprints":null},{"fqdn":"login.xfinity.com","ip":{"addr":"95.101.11.170","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2003-01-23","domain_rank":28072,"first_seen":"2018-01-15T14:52:54Z","last_seen":"2026-01-06T10:04:29.771805Z","alert_count":0,"request_count":2,"received_data":5026,"sent_data":981,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.xfinity.com","ip":{"addr":"23.45.145.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2003-01-23","domain_rank":181423,"first_seen":"2021-02-08T21:22:48Z","last_seen":"2026-01-02T13:32:33.569225Z","alert_count":0,"request_count":1,"received_data":379695,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}]},{"fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-01-06T17:28:55.432901Z","last_seen":"2026-01-06T17:28:55.432901Z","alert_count":190,"request_count":38,"received_data":776557,"sent_data":18718,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee478a99837ce64c8ce1750fd9df8027","sha1":"2743500c0148e5bfce4b490dd044b77e5c43abed","sha256":"8e7f5a54e240cb989542dc3fa919d2d097cde36bea91d99ee877ba6fde578b11","sha512":"022911dc3e2871d91d0442343bef6223355577097c50e34f50cfe05269d7a4a1bde9ad22b4cc238466ef73fa0f2a75a5651c21cc48c8a34045374e4ded285461","ssdeep":"","tlshash":"a6d05e5c1832cab08213698f653bff496561159a521ad08f9b88ff486f24e65cc3dc64","size":259,"data":"","first_seen":"2025-12-01T14:52:09.721084Z","last_seen":"2026-04-18T11:55:22.029073Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fde76703ba482b9c601c518ef2d741b1","sha1":"0f6a5724871a62f1db31f7335185ac283b02c8f2","sha256":"247f1e7faa40cf6e0d50bb49b6ab7cbb92ffe8e780587daf243cd7cbd059a189","sha512":"27ce97a3cf99b12d3391b4f81c2cc44231e480a7a8222b62c87a0422bf46e07e9b79bd56e0ec2e9244469a0a2171c6472a4b1f7122dc30995a86a75a83d1f478","ssdeep":"","tlshash":"df615cd3ed9a03af742885ce40f50322b126768368ec46a70ba2eb0957e334595fd358","size":3411,"data":"","first_seen":"2025-12-01T14:52:09.72244Z","last_seen":"2026-04-18T11:55:22.034828Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/polaris.wc.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79229a735a20fa7064ba4866e76ea168","sha1":"30814aaa45c83d54fb7fda69880b3a5db5bb65f2","sha256":"6a76b7f4ea7f8b6bdd06737cf2fdee12714ed42a498aab9631019842c34da288","sha512":"63809be2fac4edb838974b8bf6115d93d7e04b8ac8e231510dd2e03e97434c7b539f4a52106461e1779c02a08a1e82301d55170c3053b0956669ec1595f847d3","ssdeep":"1536:AW6HRg0xIxIZI5IGIlIpIaIxIZIvIGIzIpInfjUTDYNXwWOW83IpWpM:AWORmSqKDO6/SqgDc6nfYD8+GWK","tlshash":"9b24c6351114723a59235ff2b2efb212b22f2094dfb781d4fbd2100aeec86d2966d95d","size":219729,"data":"","first_seen":"2025-03-11T12:54:16.412126Z","last_seen":"2026-08-14T18:25:45.579466Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7aea9282185623f6b3b81c49900002d8","sha1":"87af2cae610a17f3af7d21fc86700887085332fd","sha256":"eef6c51bfa7afb89ea195dc4a99b572076e07e5014d2debd50b77b0fc884146c","sha512":"7bf9cf375048cd1ffb883224c7b41e11856c6b04964969edcf6de60bcdfa0ab25b06b181f3ca38f2e692b74f69f241a46865021123a361b22a359bc6ddc06d30","ssdeep":"","tlshash":"41c08c3d192c04794a8a62b830aae3883d3840c030833c71441cc8854a24dd42096c89","size":146,"data":"","first_seen":"2025-12-01T14:52:09.723801Z","last_seen":"2026-08-14T18:25:45.597828Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polaris.xfinity.com/globalnav/polaris.wc.js","fqdn":"polaris.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"23.44.40.18","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f5c0946b9aa864b992f3a29bb910114","sha1":"57f68109a9367136a76677b6d42d8615c97320ca","sha256":"3490b1809dc58888412a4dc512b018e5255bff0c1a3917f4bb4ef59f650c0f94","sha512":"ba5cb6d110df8ca59b344dcb0cbd7800c26c30dff1db7a1f6ccc297e22ba46595ecba24e5f8dc1aa4790f1ddc627836441df524f87993ef9c2a84856ae62b63b","ssdeep":"3072:D9ZbtYSqKDO6/SqgDc6ZfI4t7iJJZDj4t7iJJ/GWK:HBYSqKDO6/SqgDc6ZfaJRFJY","tlshash":"8444d6711154723e59239ff6b3efb211732e2094eeb780c1fbc6440efec8691a669958","size":255082,"data":"","first_seen":"2026-01-06T17:29:06.38174Z","last_seen":"2026-01-21T15:50:38.391413Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"83bb3c58e40fdb631dc9be2e2ee09d7a","sha1":"fcc2db8e80a1480e6d782fcfe2248971d328ba27","sha256":"a002ad7d61855f88b8c970a2ad9003cfc5a7afe750655a5d29b93c2fe6a61fb4","sha512":"f9df28544cca572b7825dc3dac170c065b5120f445d083c195817b60b9110493f8ef2d2e5548e143734fd7fd2d4b4510d402ec43169156d0abefeb5ab1964a0b","ssdeep":"","tlshash":"4131bb15359a0bb00daf65bb23cebbc1316a10d73905dd44befd4b541f1aa220736bd9","size":1576,"data":"","first_seen":"2025-12-01T14:52:09.725109Z","last_seen":"2026-04-18T11:55:22.037878Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"34b000b46f75c5b6305d8ed5549fc3f6","sha1":"f46e69c7ba19db14383e438a466172317cc6ed95","sha256":"965adc0ff9d0755e021f8f6580a0c2a845273b7bf68b310c0a5e4f6f11df80db","sha512":"1c467f0641bf29502ec41464ddd5bec715deea3728dbbe5cc242fa044370763433071e88c9ebcf0c7bbcb3ef4a3f4d364c7dea2daa61bd3a483140b8ccfd01bc","ssdeep":"","tlshash":"90d0233cf67754315127fd66b78f52cd7674c44330495463740c53042fc395944e1445","size":212,"data":"","first_seen":"2025-12-01T14:52:09.726646Z","last_seen":"2026-04-18T11:55:22.041297Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/Sign%20in%20to%20Xfinity_files/launch-46f715e51bac.min.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /Sign%20in%20to%20Xfinity_files/launch-46f715e51bac.min.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::lxt4n-1767804933837-ae50c26feaa4\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"bbfd34ef0c19d6e22b6f1d63481c1853","sha1":"f0880cfed8c7a96de6b96c585c69d8a0e089bcac","sha256":"6a15f4c6bbcf4f2b236d0af761be88e634ae8cfcd5bc68f68115c4186853b5f1","sha512":"80a70a9c98614242cbf3d127c6131e647453a223c9b1db729bc9050cfbf74a5aa7142ca58a882fa46d6b2d29cf5da684cf661364be5cb7c7970333a19390c83d","ssdeep":"","tlshash":"a5a0025d0dd54a4e32d404201553553519245532ef65d51157cd9615611458d9344595","first_seen":"2026-01-07T16:56:04.036321Z","last_seen":"2026-01-07T16:56:04.036321Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cimcontent.net/common-web-assets/fonts/dm-sans/dmsans-regular.woff2","fqdn":"static.cimcontent.net","domain":"cimcontent.net","tld":"net"},"ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cimcontent.net","organization":"Comcast Corporation"},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Thu, 06 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:96:BA:CC:3A:6E:16:07:34:F6:2E:65:E1:80:BA:5F:7A:C1:4B:3E","sha256":"57:7E:26:1A:D8:C7:8B:09:B0:3E:AE:94:B3:41:F9:FA:13:B7:ED:EA:77:42:3C:0C:49:75:B8:B0:E3:AD:CB:7F"}}},"request":{"raw":"GET /common-web-assets/fonts/dm-sans/dmsans-regular.woff2 HTTP/1.1\r\nHost: static.cimcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://0-autht-lo-xfin-ity-w0965.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 29920\r\nlast-modified: Wed, 07 May 2025 17:42:38 GMT\r\netag: \"b9d5e5cad821648da76e2fedb6c6a680\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: B6Y2UPZ8HumiPBqb9Tc2GO2DjkgxwQ9e\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: LHR50-P4\r\nx-amz-cf-id: rnNc1lJa6lOwPJVAjpApAMfhkimHlQOqLCzTINdUcxFTPYKFwNnjsQ==\r\ncache-control: max-age=31536000\r\ndate: Wed, 07 Jan 2026 16:55:34 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":29920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29920, version 1.0","md5":"b9d5e5cad821648da76e2fedb6c6a680","sha1":"f99e9d4c60c524dfb2e5015dfc754ae325773ff9","sha256":"40aefc09f33205666c2c42f20d54285147ae9434ef5f8018481950fd67ddcb68","sha512":"4a94b57c36cef25992c4324289e3ceb6fd5e22cb053d1d6a0c81749d421192c4cd9f8abeed548fd716492674b0cf568dd1182fe402a0f36c77b21a37cb0aca7a","ssdeep":"768:YUyDoffo32x6g0X+TIhsqOGmalsmzanisIZFk7:qmKcksqOGmJsg","tlshash":"1bd2e189fbc2b957ca45816c2e707da9061d8500a5afeb3499d31f3d83e24b7b880d5f","first_seen":"2023-04-06T07:47:01Z","last_seen":"2026-08-18T01:54:33.401235Z","times_seen":1569,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":264,"dns":234,"connect":8,"send":0,"wait":34,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/Sign%20in%20to%20Xfinity_files/data-layer.jpg","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /Sign%20in%20to%20Xfinity_files/data-layer.jpg HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933975-185c4ff12e66\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"95e0a575de5bd8faef2d5c5c1cf4994b","sha1":"c2d1dc3d33e6d0a5e3f81d874e99fcf694261999","sha256":"19c90c969c27909b28a3960e2ea447b6bef3081d1b8ba62212322a802c36dcb0","sha512":"e2de206ea63dcd1283c91f9a47c8696eab450fdd135aaa443cdea64dc02c8aa1455ed51430f6386b366d82527ddcef228c8b502bc38521cfdc9f4baec053f8e7","ssdeep":"","tlshash":"b5a0118e0c880a8c33c8002022a2233808088232af28aa00a0ccea28a0000cee300882","first_seen":"2026-01-07T16:56:04.041227Z","last_seen":"2026-01-07T16:56:04.041227Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"www.0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T16:55:31.286Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T15:30:33.742415Z","times_seen":17993318,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":369,"dns":0,"connect":1,"send":0,"wait":0,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"www.0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T16:55:31.693Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 308 Permanent Redirect\r\nContent-Type: text/plain\r\nLocation: https://www.0-autht-lo-xfin-ity-w0965.vercel.app/\r\nRefresh: 0;url=https://www.0-autht-lo-xfin-ity-w0965.vercel.app/\r\nserver: Vercel\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T15:30:33.742415Z","times_seen":17993318,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/bundle-b305f73.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /bundle-b305f73.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::kmzz5-1767804933762-225ce143d63c\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"07425b558c583689ea357f7b01452ab8","sha1":"e0ffedf16eb01866c29bab615469b9176f8848fc","sha256":"363b7e977ee4f3f102b119022d44284280e5f0e83efc156de8ec93bd1c8ac524","sha512":"ba1607af31867e65f0b163f427d78bb734d3b492229a2d3386c308f83b43d99ad46390e6f014eeb390820fbb4a0332d7ea81dae15f286bee72f38753f5ac58c8","ssdeep":"","tlshash":"cba0128d0f90094933d400142132113d0c484a319f24ad0000c8b50430201cd9302084","first_seen":"2026-01-07T16:56:04.045222Z","last_seen":"2026-01-07T16:56:04.045222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/static/ui-common/cookie-consent-2.1.3.js","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /static/ui-common/cookie-consent-2.1.3.js HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::lxt4n-1767804933755-ef030f32728c\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T15:30:33.742415Z","times_seen":17993318,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/AppMeasurement_Module_AudienceManagement.min.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /AppMeasurement_Module_AudienceManagement.min.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::lxt4n-1767804933797-3050f9267943\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"89c29a3b4b5f2c3903816c0955888251","sha1":"aded2c987e21fb14bf82f87fd8201e74616aae12","sha256":"e89a72c6d8e6a6303970f40d8def6241ce264d2bbd702fba3ecdeba6602c6619","sha512":"64111768b60be59c4a35582f5da403cf1bab5a74ac10511869bcdab4616e2f5651ebe325e20f33f4b649c4901f0c06fa3a2bcfcd87398ff8bdecd82cb031a632","ssdeep":"","tlshash":"afa0112e0ce20a0e32c00030200382b80ca00a33efb0aa2222c8eb08200008ee380080","first_seen":"2026-01-07T16:56:04.047536Z","last_seen":"2026-01-07T16:56:04.047536Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/ot_company_logo.png","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /ot_company_logo.png HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933981-ac3598844208\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"17547f3373e3b6953e4460fec2ff4abb","sha1":"1c9ffe3387ec30203cb5d5eed5110ab5cd0786cf","sha256":"4b91a4dd8bd31c1461bd5ef75861eebbca0915821e3caa2c1c1729cb544b2865","sha512":"2bf30caa914a9da9426f1d468050d9ce5123ca7b40c391ba145e9169683e6c976e7bbf0a52ae7bdae043ab5cedd1f978d5a4cb9a9f62595bf99c5168c031171e","ssdeep":"","tlshash":"c3a0118e0c880a8ab38000202003023808000a3aaf28b2e0a0e8a288222008ee3000a0","first_seen":"2026-01-07T16:56:04.049972Z","last_seen":"2026-01-07T16:56:04.049972Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/AppMeasurement.min.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /AppMeasurement.min.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::wfqz5-1767804933571-b4a4fc3993e4\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"60e34b24867fcaae450f2d6fe90045a8","sha1":"b31667d6b8f07af2c1043dae7ee4f0adec58d916","sha256":"2f7fab4b67479429f50c0e046c22d1c8fadf5a8902ea99b21036089ca1dd4aa6","sha512":"b524e74ea600cd78c3d09e6bda54603e464f6ca4937eaaab99dce75e733c2a0a3f6b6e8f91d42d958376aa88897e6957b131e5631cf22a84d519cc4ada3a9a6d","ssdeep":"","tlshash":"51a001ae4e8a2e4a769808602196623928144bb2eb69b65261c9e62861486dee780185","first_seen":"2026-01-07T16:56:04.051888Z","last_seen":"2026-01-07T16:56:04.051888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/Sign%20in%20to%20Xfinity_files/launch-46f715e51bac.min.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /Sign%20in%20to%20Xfinity_files/launch-46f715e51bac.min.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933577-2869b14330f2\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"6ebc699408fbfc16da626f7a797422f8","sha1":"d70aea1a47611e6cac1b744e0a8cbc617b3042ec","sha256":"356d05e7a068a352853907b3637b0a662fe946fd10a518d925af1da1bbd424ce","sha512":"d95f582397f09495e273f4931b4f664bd450547e04474d938905b882901da59c23941b00ab42f8e0dbc51cffcc722dacd03ea4eba853f3dec8fba3a5526302b1","ssdeep":"","tlshash":"eea022ce0cc00e0c33c000203003c33c0c000a3aef28e202e0ccea20bc280cee30008e","first_seen":"2026-01-07T16:56:04.053669Z","last_seen":"2026-01-07T16:56:04.053669Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/saved_resource","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /saved_resource HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933581-7175535413f1\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7d8ccb2cc2f7533d7481d17e5fb8ff2e","sha1":"9647a73d87fa47dc548ddd21bfcd3dbc8721e83c","sha256":"4d3c05e34cec25a8c089915f79369d082be1f41fab85e62d04f0d74c9990cbfe","sha512":"c96d8e115f00eb03940b8c73342cffce661619f94205f56c4fc9e75a2dae3b883d767d2027a96e97e5c5db06bdca191743e9555408619e9d56d25f4f70893ff8","ssdeep":"","tlshash":"e9a0228e0cc00e0c33c800202003023c38000233efecfba0a0cee28032222cef380080","first_seen":"2026-01-07T16:56:04.055512Z","last_seen":"2026-01-07T16:56:04.055512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/ot_company_logo.png","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /ot_company_logo.png HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933588-50b7c3429f7b\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"dfb66a121280afdeb6552d2fbdb3e01e","sha1":"bf189a9c82262bb9821f238634b6e541e3dc0777","sha256":"ed95234fb78a0794bcb0ad12f0ef1727dd4923ee634861e17b08414eefda84dc","sha512":"600feeb4600666c0b26ff3387bea84af1048cf6ed0ee4c8b73b52bbde384f50822b977506f87eda854de4e9b22259b3df03a9360b4ffc19f60eb401a848f0bd8","ssdeep":"","tlshash":"f4a022ae0cc00e8c33c800202203c33808280233ef28f2a0a0cefb00b0080cee3c00c0","first_seen":"2026-01-07T16:56:04.057082Z","last_seen":"2026-01-07T16:56:04.057082Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/AppMeasurement_Module_ActivityMap.min.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /AppMeasurement_Module_ActivityMap.min.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933795-68fb2d554d48\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"207206ae77d44680f6b0a2008873c7df","sha1":"f7150a0219a9c2ce502357d5345da37339fb8e1c","sha256":"ed8f910bdee010d4b71c22f50334e0495872f8c0f2f641d895e9048da4f281c8","sha512":"86f5265ad1cef28ac6bbbc56820f7cbda625953ef988ddcf27f50a4735c75d3903cca60685a86b3ab1da11700ec9534d76d7782ee7fd346485a75582d30ee448","ssdeep":"","tlshash":"20a0118e0c880a0833a000202803023a28280abaef28a2a0a0ece300300088fe300080","first_seen":"2026-01-07T16:56:04.058613Z","last_seen":"2026-01-07T16:56:04.058613Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T16:55:33.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 38712\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\netag: \"b158fbe4056ad6bb6b8adadd5d9418aa\"\r\nlast-modified: Wed, 07 Jan 2026 06:10:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lxt4n-1767804933331-e242c4c1a3b0\r\ncontent-length: 61520\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"OneTrust","description":"OneTrust is a cloud-based data privacy management compliance platform.","website":"https://www.onetrust.com","common_platform_enumeration":"","icon":"OneTrust.svg","categories":["Cookie compliance"]}],"data":{"size":438220,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"b158fbe4056ad6bb6b8adadd5d9418aa","sha1":"807951d63333a395e84116153becdbbd969da00a","sha256":"2090ca32e028bec887ee684f4ab195f197586fa02d8acf3731ea5014a7c4cc37","sha512":"509b3b49a4e0e3b29fb53bef3824ebc303fe8c3014f11d5e2d0538952e120ff85e98c22335e8b4045913a33f89835b2451d7f3bc5095adbe8107b8cb3827a558","ssdeep":"12288:Zn9IjiP5EoJu+IQ6pnDFso8KJBccj5AE9vwg:Zs","tlshash":"b094b7491163622f9c9363b8a3dbb20672265087fe67dcdcfbcd5224cf887e9486164d","first_seen":"2025-12-01T14:52:09.682197Z","last_seen":"2026-06-14T01:11:40.074407Z","times_seen":9,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":51,"dns":22,"connect":2,"send":0,"wait":10,"receive":15,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/Sign%20in%20to%20Xfinity_files/s55795643539887","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /Sign%20in%20to%20Xfinity_files/s55795643539887 HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::kmzz5-1767804933621-13b7aa65f8d0\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"aec3c92275e5697219d6563f28ba0840","sha1":"f32667b390c1a1471ccca3f08c567bc52b3cce0b","sha256":"9d81a3747908c2db4ca480bff4b2af68944e7fe1f4959e372c66e24ea9faad31","sha512":"b4a7cda95bbe46b1971c76294ddc800f7d04761ffddcddde73fc5fd72a9e4f45ab45e7c4a995abb79fd7368501ab76bcf0c442d16248c3adb9c6d6bf25b6e13f","ssdeep":"","tlshash":"dea011ae0c800e0e328082202283223a2c888a32bf2af20080c8aa003000acee302088","first_seen":"2026-01-07T16:56:04.061426Z","last_seen":"2026-01-07T16:56:04.061426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/comcast-common.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /comcast-common.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::br5sc-1767804933562-66b7115be73d\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"0a1e35a7e5e402f5582e399640ca6159","sha1":"1db7aef633f9923821547e7acad6a9884582acc9","sha256":"64086673af32b62fe2107b0ea3257c70fce12aef19f1964e487e3aadf5120803","sha512":"6f65e22fa73084bf8ba80c496b92d75ddc9b273b413abe290dc5178fa9e9b565eb2e5ba0f7b79927de59fa3d0f4751858d49b818b700b17bbd632690b168ec73","ssdeep":"","tlshash":"5ea0112e0c828a08b3a008302023223a28280332af20eb2a20c8a38830200cee300080","first_seen":"2026-01-07T16:56:04.06324Z","last_seen":"2026-01-07T16:56:04.06324Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/bundle-b305f73.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /bundle-b305f73.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::prd82-1767804933565-febb28370227\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"85e05df6474c36281c1c22acf89ae7f9","sha1":"c920ad5c8d39cf9b0a6bfc8c4d733e0e4627ad35","sha256":"5ae4eaa5ab439197f2480264cf82a43182fa9cb52dc17321e09852e4442f9586","sha512":"bc6a18adcb28a92485579883330f0306ad62904bb6f819ce5a54b46cf0b9d20b436e58dd7e0e9a3ad3550cbada2f5c89c72706bd425c5f8649c8d4865846cb2d","ssdeep":"","tlshash":"6aa0112f0cc20e0a32a808302a22023828280a32ab20ea00a0c8e2002002a8ea300082","first_seen":"2026-01-07T16:56:04.064506Z","last_seen":"2026-01-07T16:56:04.064506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/polaris.wc.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /polaris.wc.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 37753\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"polaris.wc.js.download\"\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\netag: \"79229a735a20fa7064ba4866e76ea168\"\r\nlast-modified: Wed, 07 Jan 2026 06:26:20 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::fxz52-1767804933565-12c1a74c7933\r\ncontent-length: 35205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":219729,"size_decoded":0,"mime_type":"application/octet-stream","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79229a735a20fa7064ba4866e76ea168","sha1":"30814aaa45c83d54fb7fda69880b3a5db5bb65f2","sha256":"6a76b7f4ea7f8b6bdd06737cf2fdee12714ed42a498aab9631019842c34da288","sha512":"63809be2fac4edb838974b8bf6115d93d7e04b8ac8e231510dd2e03e97434c7b539f4a52106461e1779c02a08a1e82301d55170c3053b0956669ec1595f847d3","ssdeep":"1536:AW6HRg0xIxIZI5IGIlIpIaIxIZIvIGIzIpInfjUTDYNXwWOW83IpWpM:AWORmSqKDO6/SqgDc6nfYD8+GWK","tlshash":"9b24c6351114723a59235ff2b2efb212b22f2094dfb781d4fbd2100aeec86d2966d95d","first_seen":"2025-03-11T12:54:16.412126Z","last_seen":"2026-08-14T18:25:45.579466Z","times_seen":18,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polaris.xfinity.com/globalnav/polaris.wc.js","fqdn":"polaris.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"23.44.40.18","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.xfinity.comcast.net","organization":"Comcast Corporation"},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Thu, 30 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"79:7A:38:96:4E:0E:DE:7E:D4:C5:41:6F:A8:4F:B5:0C:58:7A:BB:81","sha256":"B3:C5:CF:B6:32:60:32:AE:CF:E6:74:CF:07:4D:94:ED:09:CD:32:6F:5C:4D:83:27:DB:91:14:98:DB:9B:9E:88"}}},"request":{"raw":"GET /globalnav/polaris.wc.js HTTP/1.1\r\nHost: polaris.xfinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 05 Jan 2026 15:08:30 GMT\r\netag: W/\"1f5c0946b9aa864b992f3a29bb910114\"\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\nx-xss-protection: 1\r\nenv: prod\r\nx-content-type-options: nosniff\r\nx-globalnavheader: /globalnav/polaris.prod.en.js\r\ncontent-encoding: gzip\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: wDJiM4etOGrnxxEfk-Uu6kskAyO_doqoR9avWnb4Ijg4WPmPw70HNw==\r\ncache-control: public, max-age=300\r\nexpires: Wed, 07 Jan 2026 17:00:34 GMT\r\ndate: Wed, 07 Jan 2026 16:55:34 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":255082,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1f5c0946b9aa864b992f3a29bb910114","sha1":"57f68109a9367136a76677b6d42d8615c97320ca","sha256":"3490b1809dc58888412a4dc512b018e5255bff0c1a3917f4bb4ef59f650c0f94","sha512":"ba5cb6d110df8ca59b344dcb0cbd7800c26c30dff1db7a1f6ccc297e22ba46595ecba24e5f8dc1aa4790f1ddc627836441df524f87993ef9c2a84856ae62b63b","ssdeep":"3072:D9ZbtYSqKDO6/SqgDc6ZfI4t7iJJZDj4t7iJJ/GWK:HBYSqKDO6/SqgDc6ZfaJRFJY","tlshash":"8444d6711154723e59239ff6b3efb211732e2094eeb780c1fbc6440efec8691a669958","first_seen":"2026-01-06T17:29:06.38174Z","last_seen":"2026-01-21T15:50:38.391413Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1559,"timings":{"blocked":402,"dns":311,"connect":2,"send":0,"wait":746,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/AppMeasurement.min.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /AppMeasurement.min.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::lxt4n-1767804933794-1d250979a0f9\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7347fe2bea114bfdace26b0dd8f01523","sha1":"43a30e38ceaaedc35c68c9dd7876aca379e7d809","sha256":"e7af00a638203e0da76965d6489d2c54a83c2d422f6352468726749fab294835","sha512":"b1b3c5d762f97af55a01108eed577d941a59d3e568fdf2ff75b2d171eaada4fe1581b89f67bac0a993c2eeede112d33bc9b15a2bfcb92bf59305969dd3011402","ssdeep":"","tlshash":"69a0121f0cc00a0f33c4442410138138291419339f64d51015d9a20020001ced340081","first_seen":"2026-01-07T16:56:04.068103Z","last_seen":"2026-01-07T16:56:04.068103Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/Sign%20in%20to%20Xfinity_files/dest5.html","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /Sign%20in%20to%20Xfinity_files/dest5.html HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933992-613b51175ec7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3718,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3412)","md5":"c62528e046aead37f14bbe49c6470743","sha1":"1ba3fb05099d5ca6c175805b33999b30fd2ab423","sha256":"2e4bed3388403ade7d15e8d9491f565a21a268f47e216aeba022793c97e22f28","sha512":"21707fcc826d0edc5bf3d8f7a76fd898aaa38755f1a8a4d73b72d2635a007355fb0df340896923101331357f95722c198d1a5da81ba2c21892f436d082a40399","ssdeep":"","tlshash":"297172373b28211af333c89fa1c26b993010a522d1bb8ab4ff57df16d5ca1641e1278c","first_seen":"2026-01-07T16:56:04.069411Z","last_seen":"2026-01-07T16:56:04.069411Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"www.0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T16:55:31.722Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T15:30:33.742415Z","times_seen":17993318,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":30,"dns":0,"connect":1,"send":0,"wait":0,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/Sign%20in%20to%20Xfinity_files/otSDKStub.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /Sign%20in%20to%20Xfinity_files/otSDKStub.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933562-2c7d086eaa86\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4a555c3bbd3b4710540ed2be10d7395c","sha1":"fd9563ffbc85a7a31d6f038fd13d2af198aa45ec","sha256":"efb714292f5cde57584b2ba6f19c8ed2d967e96e7b2b13e019609d67287bccc9","sha512":"26d37e434ec43cf500e1ee526d57b0ba35480b601cd6ee65a5d4cf06a6db2d56f895705e17b9f548c4f76294b81640a0a9ffd7791f10b538e9b902ec992d1e94","ssdeep":"","tlshash":"62a0228f0ce00e8e33e000202003223b0e000232ef2afb30a0ccea0030300cee300c88","first_seen":"2026-01-07T16:56:04.070923Z","last_seen":"2026-01-07T16:56:04.070923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/bundle-b305f73.css","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /bundle-b305f73.css HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 577527\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bundle-b305f73.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\netag: \"340677497d9c20654e68df9b17c8213c\"\r\nlast-modified: Thu, 01 Jan 2026 00:30:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dddcd-1767804933563-bd87f30181c1\r\ncontent-length: 13633\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":94317,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65472)","md5":"721e9da05d8b91685220d2bbd61b49ac","sha1":"f506375a69f146e7bb384874c018ede0e03fee94","sha256":"1f3629249c7dc2ede28d83dcdc61fb7ccb51fc7722536874c7e54ff3fc7679e7","sha512":"1f51c7850d87a801a213a4544cb1b0cd5c6c0ad1cb0dca331e5455064c7b5b076c4b45585b2becbde9cb5cf1deb13287cccc882c8671b710e13675a2ee661299","ssdeep":"768:SI5IhI7IYI1IhI1Frm5RbdEDhmwCATTZxFqj19VGA3YaLqOjTTZhOoHH54pGnhcz:SI5IhI7IYI1IhI1XYvH54pGnhcCJmY92","tlshash":"0b930115fb01522f781a86be10acb1a397270147db6b47f9f64b100b7bdf9c7929720a","first_seen":"2024-08-12T22:42:14Z","last_seen":"2026-08-14T18:25:45.520965Z","times_seen":20,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/AppMeasurement_Module_AudienceManagement.min.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /AppMeasurement_Module_AudienceManagement.min.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933573-b240c2ec2c00\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"899670f003a8894205e92d43d1480499","sha1":"dbb21265bbcd96a3e17d1e6555cc89fb577b6940","sha256":"601f5ada48cd4b23e1dab83f168d2a9419d92f9665e2021c15aa2a87b948e9ce","sha512":"0e3b2f72358fb28fe9d117ff9dad3d84e41e015c34c43d56debc0fe9f577a6e509922ee7e8f427f00d8b5e1c559adff47b743434949688f6e5d1938c6c275287","ssdeep":"","tlshash":"bca011ae0cc88e0a33c0002820022238080802b2bfa8a202a0cca3a020002aeab00080","first_seen":"2026-01-07T16:56:04.073444Z","last_seen":"2026-01-07T16:56:04.073444Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/otBannerSdk.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /otBannerSdk.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::dddcd-1767804933573-5168909a9c95\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"8859462ce8050ea4dbbab7c7b2edf636","sha1":"181d8c481fe64038fffdca2af30e53f2f28dd8b5","sha256":"a79f4b88d265ef826245ad2524ae73aa63d3c2a92a1979cdb7e504db08ba76b7","sha512":"fa894eaa2884d9f1d4720b189d91638da018cd86c43227386291c69f533b77df93f44d98c94c9a82c4e01bb855b284864089f0eff18ee60991b4f017a50f574b","ssdeep":"","tlshash":"4da0110e0e820a8a32a808a8200302b80c000a32ab20e20080c8ab20300088ea300082","first_seen":"2026-01-07T16:56:04.074602Z","last_seen":"2026-01-07T16:56:04.074602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jezqzfixgomcanhrbtvb.supabase.co/storage/v1/object/public/assets/infinity.png","fqdn":"jezqzfixgomcanhrbtvb.supabase.co","domain":"jezqzfixgomcanhrbtvb.supabase.co","tld":"supabase.co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.861Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/v1/object/public/assets/infinity.png HTTP/1.1\r\nHost: jezqzfixgomcanhrbtvb.supabase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T15:30:33.742415Z","times_seen":17993318,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/Sign%20in%20to%20Xfinity_files/powered_by_logo.svg","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /Sign%20in%20to%20Xfinity_files/powered_by_logo.svg HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::lxt4n-1767804933983-d1cf402ae61b\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"10e45366783365e8fac05feb04072e64","sha1":"aec7d3510c6c4459f02198a3b173e6ce165ff1ae","sha256":"759e855dccad5cae706d24b97ead559bf78ebc28cecc9d2bb5e49578c55635d4","sha512":"d994f87c7dcc529799a61b1d7b7d2c6fb0bb582b7ca1e3ba611157ab92c91287bca3370b9513727478e4b677fca93d97b788e44ce7b7d23ff48101f9700a8f50","ssdeep":"","tlshash":"a2a0110e0cc00ece32c80820a083a23808000a3befa0aaa022c8e388a02008ee3c0080","first_seen":"2026-01-07T16:56:04.075816Z","last_seen":"2026-01-07T16:56:04.075816Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.xfinity.com/static/images/favicon/favicon-16x16.png","fqdn":"login.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"95.101.11.170","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:34.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login.xfinity.com","organization":"Comcast Corporation"},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:AE:B5:13:FA:D2:2D:2A:C0:B7:8E:29:95:DC:AC:2E:8A:1C:9D:E6","sha256":"5E:03:92:9D:5B:E4:F4:0C:83:CA:FC:B1:31:E5:D4:49:AB:A1:5C:D5:19:38:84:AD:F0:7A:41:C6:D6:F1:6F:D1"}}},"request":{"raw":"GET /static/images/favicon/favicon-16x16.png HTTP/1.1\r\nHost: login.xfinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 184\r\nlast-modified: Tue, 25 Nov 2025 16:41:56 GMT\r\naccept-ranges: bytes\r\ndate: Wed, 07 Jan 2026 16:55:35 GMT\r\nset-cookie: AWSALBTG=hdchvAfN+xAwsuo6ubSuNahwOvbtzRi0oBqiZZT55iLJdyGMHI1P0TD7eQSPpfp4KUfN7JJrN3th5hEH845dWmTZ2GC/kdmDaMO006lOwU7AvM5ymitsQlF2j9tOie3SG1skV0XwFtCICi7gvZd0dPGbpC9FObs4c+9NSgewfO+e; Expires=Wed, 14 Jan 2026 16:55:35 GMT; Path=/\nAWSALBTGCORS=hdchvAfN+xAwsuo6ubSuNahwOvbtzRi0oBqiZZT55iLJdyGMHI1P0TD7eQSPpfp4KUfN7JJrN3th5hEH845dWmTZ2GC/kdmDaMO006lOwU7AvM5ymitsQlF2j9tOie3SG1skV0XwFtCICi7gvZd0dPGbpC9FObs4c+9NSgewfO+e; Expires=Wed, 14 Jan 2026 16:55:35 GMT; Path=/; SameSite=None; Secure\nAWSALB=LwGtXhk3RRqZx7LK7qFHQqJ82Asz6/LQHgMQfrzxCFjQ4ykQ0vFvA8/GFbxLlTgxatgFH3SYfAMlF3llUWTkuH7PUOSBYPwOsHzBklVQU4RJUFzzkWPAGj4BAIaH; Expires=Wed, 14 Jan 2026 16:55:35 GMT; Path=/\nAWSALBCORS=LwGtXhk3RRqZx7LK7qFHQqJ82Asz6/LQHgMQfrzxCFjQ4ykQ0vFvA8/GFbxLlTgxatgFH3SYfAMlF3llUWTkuH7PUOSBYPwOsHzBklVQU4RJUFzzkWPAGj4BAIaH; Expires=Wed, 14 Jan 2026 16:55:35 GMT; Path=/; SameSite=None; Secure\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit grayscale, non-interlaced","md5":"db142cad60d6acbf015835843f35071f","sha1":"56261a4d35ff1ad9c210376f025f8762e608494f","sha256":"1a819ccf88edbedbdce80f8f48844260c685edf389ba39ba92e42c7291522801","sha512":"73373b61b828ddc6223a9a48286efe5efc5610f3358738035cc347acecc1a98dbf6d8697b0e04131925a54cf97c4bb1f39de408ebddc69a2867a6391b63f5272","ssdeep":"","tlshash":"71c0c0ef73643c7de8080e3f6c0204b19c2543c1c6f1049013b48030e300f3c02b8502","first_seen":"2023-06-04T02:44:54Z","last_seen":"2026-08-14T18:25:45.537894Z","times_seen":1489,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":-1,"dns":268,"connect":1,"send":0,"wait":557,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/comcast-common.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /comcast-common.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::kmzz5-1767804933729-525cf62d4d65\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"d02fdc969abde2a640aed39fa86f4dfd","sha1":"7a3432be9fdcfa80d0f6c17576455fd2728df572","sha256":"733e22e287e12e034daad8d97e95a711c12da8aed014c016b1e9548e0e55f1cf","sha512":"f64c438abf6ca31e6c654026e37ea43a431c13c106df8f5071b1777cbed29db2210848b46ee25403571f37fc5638c8a442bb2036b497c0e825bcdde7743bdf75","ssdeep":"","tlshash":"79a0118e0c800e8a328800222282a23e08080b32ab3ae20028c8aa20200028ea30208a","first_seen":"2026-01-07T16:56:04.077639Z","last_seen":"2026-01-07T16:56:04.077639Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/prism-ui-b305f73.css","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /prism-ui-b305f73.css HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::lxt4n-1767804933760-cb4fbd13940f\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"cad263cdae5e06980ab1cedd3fd2b012","sha1":"7188f16ac6a817eb877e0d8e8ef36fff81f689ab","sha256":"77bc0a313f0487540433b2d5ab6e6298348716fca266ac585fdfb3d2aa66bf78","sha512":"0364512216df26ac08ce8fda0d3a5298ee10b2fc84f68923d25ea8270a69d7a12f5e929ff9a524772d25e5e9bd8f701bed7b4a6861d9b4f6d394656ef3430ac8","ssdeep":"","tlshash":"4aa0112e0ec00a0e32c800202a23a2be0c000a32afb0aa002accaa00302a0cee380088","first_seen":"2026-01-07T16:56:04.078819Z","last_seen":"2026-01-07T16:56:04.078819Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/saved_resource","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.951Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /saved_resource HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::lxt4n-1767804933954-2f31e830938e\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c692ae77c6a135eb152059b57e149fa2","sha1":"9830790790a738bcdef5d38b4e49d398e83076c4","sha256":"ee85f48877c52bb8575aa54b2d836393b5f1c5cc5db8170c5133c539fac1da33","sha512":"41573dfa6a3cd9e23f9d12cfc0d457fa4970eb4c29c4760f272a0b4eec38802fc8a13aa7c10dd44c075bc1f3e9bff72ab6d94c84a7ed6d8018c0e7db4ceb4a5e","ssdeep":"","tlshash":"38a0118e0cc20acf32c00030222382b828000a33efa2ea2822c8e20c230808eeb80088","first_seen":"2026-01-07T16:56:04.080181Z","last_seen":"2026-01-07T16:56:04.080181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/saved_resource.html","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /saved_resource.html HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::dddcd-1767804933993-498fdfef48c3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3718,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3412)","md5":"e8760f6a13e8c5ede99cc08e236b5591","sha1":"b14e8789a5f352bea907c81856906e7c93c4e2da","sha256":"44bc79f2104cc49a78bc929afd2ac802aeb6325dd8b0b8304a3564adc730f46c","sha512":"fd154fc6ff1ef9c4798bc1eb43495b528687b560dfb28a5b5a8d0a73d1b86337beab1e696b3ffcc1c6d5c36e55779e7fb6d9c10228888932fde3a28da5433d75","ssdeep":"","tlshash":"257141377b29211af333c89fa1c26b993010a522d1ab8aa4ff57df25d5ca1651e1278c","first_seen":"2026-01-07T16:56:04.081347Z","last_seen":"2026-01-07T16:56:04.081347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.0-autht-lo-xfin-ity-w0965.vercel.app/","fqdn":"www.0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-07T16:55:32.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nlocation: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-id: arn1::pjkxx-1767804933258-dccf06e23999\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":438220,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T15:30:33.742415Z","times_seen":17993318,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":348,"dns":1,"connect":1,"send":0,"wait":11,"receive":0,"ssl":349},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"www.0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/cookie-consent.css","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /cookie-consent.css HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::wfqz5-1767804933562-8df00f318ea5\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7f50f276bf39d90d64d041efa37031bd","sha1":"30a8839226f46d548fa8472f03fd5363c5ab7809","sha256":"503dadf1a1963b4d86e10448a55600b3781e91c8fc3cb7a6f4f4c39daed34b6f","sha512":"5337ae3a966a9e94654449e87254aa80b86ab15c63b70714b2be1317f63194767879ead66a8ad3ba5d88e73e537b0c292ec1766c13ebc6fd3ce555f74a750dff","ssdeep":"","tlshash":"e3a0019e0d895b4d33d804212152623918184b32ab69af5262c9e6187158acee340599","first_seen":"2026-01-07T16:56:04.082545Z","last_seen":"2026-01-07T16:56:04.082545Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/Sign%20in%20to%20Xfinity_files/data-layer.jpg","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /Sign%20in%20to%20Xfinity_files/data-layer.jpg HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933585-5c393d9f8b96\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5e11ee86447c73c41873e0c0e36378eb","sha1":"cec9751e098e3226bec27e8f24af2b0b6ef9007f","sha256":"add651083eb95b0cc5423f1d6fbf02770f6299f8e580a36226aec6081b36a13b","sha512":"9d62f37e9347463ffd54d0d6d7a09cf9e527e70a9b837dbaa933c9d57da71180cd773b9046c60c8fc8ebe7bf2c53edeb92d491f827f32999004cb1f62b3a70d3","ssdeep":"","tlshash":"74a0118e0c820a0833c80c202002a2380820023aaf28a2a0a0caa20832208aee3000a8","first_seen":"2026-01-07T16:56:04.083744Z","last_seen":"2026-01-07T16:56:04.083744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/cookie-consent.css","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /cookie-consent.css HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::kmzz5-1767804933755-c5c4bc133f60\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"593d4878e6fe65b757c9c9bcd8258d4e","sha1":"a5913033244fd5a8cf6c7a4813a6e8df1aaec624","sha256":"82630a298686bff3faec41687a92ec529476757147341289f115cf69ded88198","sha512":"4a03a748ad7afe0ac638bd04d06cb56a1b617bf22a668bd8a93f82348ad395dadac044a75dae48702f3c43cd4d5c81de063e9db34ba4f66f57ec86bf04d44a6f","ssdeep":"","tlshash":"f5a0118e0c800e0a328802282202223e088c2ab2fb28a20000ccb20832002cfa38208e","first_seen":"2026-01-07T16:56:04.084881Z","last_seen":"2026-01-07T16:56:04.084881Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cimcontent.net/common-web-assets/fonts/xfinity-brown-optimized/xfinitybrown-bold.woff2","fqdn":"static.cimcontent.net","domain":"cimcontent.net","tld":"net"},"ip":{"addr":"23.49.28.112","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"static.cimcontent.net","organization":"Comcast Corporation"},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Thu, 06 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:96:BA:CC:3A:6E:16:07:34:F6:2E:65:E1:80:BA:5F:7A:C1:4B:3E","sha256":"57:7E:26:1A:D8:C7:8B:09:B0:3E:AE:94:B3:41:F9:FA:13:B7:ED:EA:77:42:3C:0C:49:75:B8:B0:E3:AD:CB:7F"}}},"request":{"raw":"GET /common-web-assets/fonts/xfinity-brown-optimized/xfinitybrown-bold.woff2 HTTP/1.1\r\nHost: static.cimcontent.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://0-autht-lo-xfin-ity-w0965.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 88920\r\nlast-modified: Wed, 07 May 2025 17:42:40 GMT\r\netag: \"ee9034e40cbca864ab03bdfab7ea3f8f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Ofy5R4oRndMAR.EFfuRjwoA12AA4J.7t\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 4nPow_q2YH3AbDijKvcumv15vLX1TuK0yiyP4Lr0i5-wqPa8bVUOEw==\r\ncache-control: max-age=31536000\r\ndate: Wed, 07 Jan 2026 16:55:34 GMT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":88920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 88920, version 1.66","md5":"ee9034e40cbca864ab03bdfab7ea3f8f","sha1":"3cef49523c4a637cdd09e58037d653b85055d4ec","sha256":"69420c9db91c689c4ea04655f57a0bcea09b71003f21cd5e56afa71b80f049f0","sha512":"eec9442dbd9b6ad9a419fa90054a7fef4ec466dd86c83228db9035ab93570bf17b1235b13da38ab6783c9a67e99c3dcb62f0b355083175071cfb0610fc8ab6f9","ssdeep":"1536:iLLz/aDJVANzAKWeLOUPUldBcw/xHLnclN4xBzejUGBxShP+4J3beUn:iUkCKWNUclwSHLsNtjUQxS5xbDn","tlshash":"d79312d75a16aa9e4e6c25b12971ab30033c53d41d9619fd22d120ceb7f1f1fb84bc2a","first_seen":"2023-04-15T05:38:27Z","last_seen":"2026-08-18T01:54:33.418885Z","times_seen":219,"resource_available":false,"data":null}},"time_used":551,"timings":{"blocked":258,"dns":228,"connect":8,"send":0,"wait":30,"receive":5,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.xfinity.com/assets/cima/login/default/ad/Wicked_CIMA_Desktop.png","fqdn":"assets.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"23.45.145.44","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"t.xfinity.com","organization":"Comcast Corporation"},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Mon, 29 Sep 2025 00:00:00 GMT","end":"Tue, 29 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"11:01:59:26:4E:85:CD:CC:7E:EF:2C:2C:34:AA:D7:94:D2:BE:B1:DB","sha256":"E3:64:8A:BA:7E:3C:69:99:1B:C5:35:B9:47:C2:61:87:AF:5D:03:B0:46:C7:2F:44:04:66:1D:1C:FF:59:E7:E1"}}},"request":{"raw":"GET /assets/cima/login/default/ad/Wicked_CIMA_Desktop.png HTTP/1.1\r\nHost: assets.xfinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\netag: \"d3574f49d1c087a4a5e9e18e7a26862d\"\r\nlast-modified: Tue, 11 Mar 2025 13:43:24 GMT\r\nserver: Akamai Image Manager\r\nx-serial: 1267\r\nx-edgeconnect-midmile-rtt: 59\r\nx-edgeconnect-origin-mex-latency: 209\r\ncontent-length: 379018\r\ncontent-type: image/webp\r\ncache-control: private, no-transform, max-age=782101\r\nexpires: Fri, 16 Jan 2026 18:10:35 GMT\r\ndate: Wed, 07 Jan 2026 16:55:34 GMT\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=1, ak_p; desc=\"1767804934019_388255501_1298257852_154_11925_2_97_22\";dur=1\r\nx-robots-tag: index, follow\r\naccess-control-allow-headers: \r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Akamai","description":"Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions.","website":"https://akamai.com","common_platform_enumeration":"","icon":"Akamai.svg","categories":["CDN"]}],"data":{"size":379018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d80fa5f5b07c2f4d66bb12785ff2b6d0","sha1":"4b26921fce34fabbd16f86585510352b6515e23a","sha256":"6cf7aa7898f4710247b859cf903f4aac32bbd6a527d4234093b466591328770b","sha512":"5c53ff1f38d3e63c5ebbdcd1386c346ac5e9ede722f0c49753e774d626b7e79a5dbd0c58a50db36288d21e530d71c9f54c851c3d178ea1deaf2e44fbd3a7f675","ssdeep":"6144:AcpJCV+2sC7T2ZHj+ppJNAWk/5mVEbDDXUwgdjvKiug93ADat+as0v984:AYC/sqfaf2rdxf3A23s0vr","tlshash":"36842330df06ae79db4bad385d054a86c2f1248745768a071cf2f417bdc1de92aa3772","first_seen":"2025-12-01T14:52:09.689602Z","last_seen":"2026-08-14T18:25:45.549758Z","times_seen":17,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":254,"dns":152,"connect":3,"send":0,"wait":16,"receive":14,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/prism-ui-b305f73.css","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /prism-ui-b305f73.css HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::zdn4z-1767804933563-c211d10c82ef\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"1191a064151df6e176c589a8f1c235ac","sha1":"c6334429f6b5600949930baa12703bbe43bbad42","sha256":"b2894a2b376bf2b89d191e4c85911289073aa631c8de9df96c51accbe61987a8","sha512":"4f8eda9ef695f7f80724acd7c6d3da98b615b2108eb9b2a285d13bea69d72f2587a8481778321196ffcb911626855d94c74787b2220640b62965fbb27a25fa09","ssdeep":"","tlshash":"e0a0110e8e800a0833e0083a2802023828200232ef28aa2022c8f200308828ef380082","first_seen":"2026-01-07T16:56:04.088001Z","last_seen":"2026-01-07T16:56:04.088001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/polaris.wc(1).js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /polaris.wc(1).js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::prd82-1767804933571-f5b3637762c5\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5ac2f197d11b033e481ebb3c7745f336","sha1":"df9dd8015f280570473e1c2f90930c57fc8d8fe5","sha256":"134c1b69d5d9eef4956c578b56a3e58a7cf3a78c39f62a07fc07f6e881f5b7a8","sha512":"d231fc28844206426f265cd75fdb653e548edeb70328035f922b457a8007af31b4e030ebcf62b0836fe201df2f3d3715896921f6e05b8ad87cf8984d03f580e4","ssdeep":"","tlshash":"67a0112f0c820a0ab3e800302002823a0a282232ab20aa0020c8b300a003aceb380082","first_seen":"2026-01-07T16:56:04.089246Z","last_seen":"2026-01-07T16:56:04.089246Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/Sign%20in%20to%20Xfinity_files/powered_by_logo.svg","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /Sign%20in%20to%20Xfinity_files/powered_by_logo.svg HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933592-45f2bd24cb34\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"43ec125ca20292d27a10a13362d47949","sha1":"8db07baa527ab9cfa089cf3a090c001e1a7d10be","sha256":"23fbc4b822ae557cdba765a57fe753dd98c700777b5dd00e10865c61ca6d9a5a","sha512":"6901923abe67f126160991471398496da588e540cf41acb0ddf09677184f44793397e06d717ac8eb10b50691de4d0e6ad2bf640e1912799f823a4b62c622cf7f","ssdeep":"","tlshash":"2ea011ae0e800e8ab3c008302002223a0c208a3aafaae300a0cae200a02088ea300080","first_seen":"2026-01-07T16:56:04.090611Z","last_seen":"2026-01-07T16:56:04.090611Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login.xfinity.com/static/images/favicon/android-icon-192x192.png","fqdn":"login.xfinity.com","domain":"xfinity.com","tld":"com"},"ip":{"addr":"95.101.11.170","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:34.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login.xfinity.com","organization":"Comcast Corporation"},"issuer":{"commonName":"COMODO RSA Organization Validation Secure Server CA","organization":"COMODO CA Limited"},"validity":{"start":"Thu, 16 Oct 2025 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:AE:B5:13:FA:D2:2D:2A:C0:B7:8E:29:95:DC:AC:2E:8A:1C:9D:E6","sha256":"5E:03:92:9D:5B:E4:F4:0C:83:CA:FC:B1:31:E5:D4:49:AB:A1:5C:D5:19:38:84:AD:F0:7A:41:C6:D6:F1:6F:D1"}}},"request":{"raw":"GET /static/images/favicon/android-icon-192x192.png HTTP/1.1\r\nHost: login.xfinity.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2569\r\nlast-modified: Tue, 25 Nov 2025 16:41:56 GMT\r\naccept-ranges: bytes\r\ndate: Wed, 07 Jan 2026 16:55:35 GMT\r\nset-cookie: AWSALBTG=vyIENMs7nGSLmnss7A89YNBegMq1N6x9429IFPnsY4p6mMj0PSiu9Jj7sC1Q+TssQkSmY9MaZdnzJl3OKVfqhyFWlDPUx26YoQtUcf5iykz3tznlmAG3sXFgl51K5+t+UvTyBK6/zFmKQZgP8EuY1Qne/yFp/w/hwOA5Go77g7Ts; Expires=Wed, 14 Jan 2026 16:55:35 GMT; Path=/\nAWSALBTGCORS=vyIENMs7nGSLmnss7A89YNBegMq1N6x9429IFPnsY4p6mMj0PSiu9Jj7sC1Q+TssQkSmY9MaZdnzJl3OKVfqhyFWlDPUx26YoQtUcf5iykz3tznlmAG3sXFgl51K5+t+UvTyBK6/zFmKQZgP8EuY1Qne/yFp/w/hwOA5Go77g7Ts; Expires=Wed, 14 Jan 2026 16:55:35 GMT; Path=/; SameSite=None; Secure\nAWSALB=WptdaBQkil4081pZPbkSuMl6qYKVqf0Zq95L+d+1AJzU8Q7iguTYVnEtTDFbrMaC+FqS1vB/EbpVUway4N6pFAnzuwzDfy1erp+etemxvbYFA7ntTXq+/3CMTDMq; Expires=Wed, 14 Jan 2026 16:55:35 GMT; Path=/\nAWSALBCORS=WptdaBQkil4081pZPbkSuMl6qYKVqf0Zq95L+d+1AJzU8Q7iguTYVnEtTDFbrMaC+FqS1vB/EbpVUway4N6pFAnzuwzDfy1erp+etemxvbYFA7ntTXq+/3CMTDMq; Expires=Wed, 14 Jan 2026 16:55:35 GMT; Path=/; SameSite=None; Secure\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit grayscale, non-interlaced","md5":"4d5a72cfafe8a0e67a3a4e3684ae379f","sha1":"2140780ff72470e5a9d63fdf950d7b816ce804be","sha256":"b8bbda2990b5611317f747bf13de3a78e1de77fd7d864a27d845194988490375","sha512":"a2323abb4342312eeaf8cb9d5003287a64665dcc859424f84a80868fc9cc3d684464627e728ea9d688d9af50fea2d55a849ed753615667f4226bef751345776f","ssdeep":"","tlshash":"86513a75d7229ed994c95bbcb11d230ae425841c3c60899bd73f84ae8a92c16bad8fc4","first_seen":"2023-06-04T02:44:54Z","last_seen":"2026-08-14T18:25:45.561298Z","times_seen":1489,"resource_available":false,"data":null}},"time_used":962,"timings":{"blocked":-1,"dns":270,"connect":1,"send":0,"wait":572,"receive":1,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/Sign%20in%20to%20Xfinity_files/OtAutoBlock.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /Sign%20in%20to%20Xfinity_files/OtAutoBlock.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::9fsh4-1767804933561-e93fdf3db925\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"47bd72754b91942d3126e019d092a234","sha1":"1cd1dfbe2bab1b9e4162d56c690c067a187a859b","sha256":"6ff76c1dbcfab02c573eb05100573b13048469b6e2e3ef3b57fb0cee771a1b38","sha512":"d0225da2d44a637cf169e15d4aca083e62fb8e37eb7348d61ae249ea734234beb320bbdeb5eaf26267c7134922a47f6a45cc389c7a38f69bb2f2f4adfa374d64","ssdeep":"","tlshash":"a1a0118e0e882e0832c000203023833a2e288232ab20bb2000cea2002208a8fb300080","first_seen":"2026-01-07T16:56:04.092562Z","last_seen":"2026-01-07T16:56:04.092562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/prism-ui.esm-b305f73.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /prism-ui.esm-b305f73.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::hqnln-1767804933564-ef828ffeb530\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T15:30:33.742415Z","times_seen":17993318,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/AppMeasurement_Module_ActivityMap.min.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /AppMeasurement_Module_ActivityMap.min.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::prd82-1767804933573-dd604d40653f\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"958056521eefb3aaffd2b1387ada66d6","sha1":"f3dd76ec549187906b69e145399ef83b52d94aad","sha256":"28e9b58aee0059e9ad4efe9a027baec4bd15119b40c19517b3ac7c483e9f3a91","sha512":"42b594212e00e74e2fe090e8a8ca1a4652161b0686e7df49ff52e821bd07922245623c5925f3968bb42f808dc8a824094437883f10e31e449ed77d59a52a6ee3","ssdeep":"","tlshash":"95a011ae0e800a8a32f800302022823808280a32ef28ba2020e8b30020032cea3000ca","first_seen":"2026-01-07T16:56:04.094111Z","last_seen":"2026-01-07T16:56:04.094111Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/polaris.wc(1).js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /polaris.wc(1).js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::kmzz5-1767804933792-d215aa9673ba\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"800fbded834116f01e25ea2aa054f2bd","sha1":"0d4c8cdd34fcfb80ace84182ffc0b1249c4e89ea","sha256":"6e8c0054dc7dfbbad1a88e0877ced7d3bd71ae1ce4049dafed6c59fb4fa9b420","sha512":"dfd3d485db771571cd7d95b835e04cb21f3110eac227d7aebfd34600ce4cdcbae6a46eda3f3038f5a465d3bc4c9a4b24e73dbe704b30458ddcfb38ae5f01ad44","ssdeep":"","tlshash":"99a0128d0c440d5933c800183142513d18184f319f24a16010cca100610019d9300044","first_seen":"2026-01-07T16:56:04.101091Z","last_seen":"2026-01-07T16:56:04.101091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"0-autht-lo-xfin-ity-w0965.vercel.app/otBannerSdk.js.download","fqdn":"0-autht-lo-xfin-ity-w0965.vercel.app","domain":"0-autht-lo-xfin-ity-w0965.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://0-autht-lo-xfin-ity-w0965.vercel.app/","date":"2026-01-07T16:55:33.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /otBannerSdk.js.download HTTP/1.1\r\nHost: 0-autht-lo-xfin-ity-w0965.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://0-autht-lo-xfin-ity-w0965.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Wed, 07 Jan 2026 16:55:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::lxt4n-1767804933798-5ed6d20e1108\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"3cd9a76713f0633c2c9309ef6ab64049","sha1":"1e64a3220a93a17c5b43cb1b96ceaa0791e4c86b","sha256":"8e921af2a66f637a57c60505d8e37852c4a200cd1a7657a3511103d7696ad4f7","sha512":"a12824f7d44422778edc0201d430fab365a6f138cc8048a25ede04df2420040cd472a985396d66b757ee14029b57e314dca2f17322d6edfb87b95e0ccc8e27b5","ssdeep":"","tlshash":"f2a0110e8ce00a0e32c000202203823c0e280a32efa0aa302bcea200200008eab80088","first_seen":"2026-01-07T16:56:04.103305Z","last_seen":"2026-01-07T16:56:04.103305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-07","alert":"Phishing Block","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-07","alert":"Sinkholed","trigger":"0-autht-lo-xfin-ity-w0965.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}