{"report_id":"a7fe19e1-cb79-48c0-a084-9a5f12496527","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-05-11T15:04:20Z","url":{"schema":"http","addr":"mynetflixui.vercel.app/","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mynetflixui.vercel.app/","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"title":"Netflix India – Watch TV Shows Online, Watch Movies Online","dom":{"size":10203,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"84b7d763102cd33cb3d7c8a8f77a53b0","sha1":"01f2e27408395b02b81dda0f65a6b25c22f007b7","sha256":"77ae96e2cb95826f691df952bd2b94d82782ee5711ff2f35c1a5e4ca0d60f05e","sha512":"097fda1e541c0501ee840d80e63d0c30d58c5f67692163bd4b01537fbc03fe0304a9512c2b4da55158830c17df453419d4e6e4a235eab12050d553ccfd78d7d2","ssdeep":"96:n3YjsHq8vzWHd80/3H+PqMqaBsK0s/rB9YRO3+pCuA73bVtVuJ50+:AsDip3+SK19Yw7PVq0+","tlshash":"ed22b7b701f8a91b121781c16aa57f2a7e43d207890e5504fafd4ee06f81c89ed236ed","dom_hash":"domhash6403a51733f0eac3df5449a0b8511171","first_seen":"2026-03-26T00:38:01.627322Z","last_seen":"2026-05-11T15:04:22.063078Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mynetflixui.vercel.app/","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-15T15:04:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-10T22:20:44.526759Z","alert_count":0,"request_count":1,"received_data":1925,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-10T22:17:57.86744Z","alert_count":0,"request_count":2,"received_data":26273,"sent_data":1111,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets.nflxext.com","ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"domain_registered":"2011-02-11","domain_rank":22756,"first_seen":"2015-07-22T04:02:07Z","last_seen":"2026-05-10T16:59:28.326485Z","alert_count":0,"request_count":1,"received_data":357467,"sent_data":574,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mynetflixui.vercel.app","ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-26T00:37:57.156586Z","last_seen":"2026-03-26T00:37:57.156586Z","alert_count":50,"request_count":10,"received_data":66229,"sent_data":4601,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"occ-0-6247-2186.1.nflxso.net","ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"domain_registered":"2016-03-25","domain_rank":0,"first_seen":"2023-11-30T21:46:48Z","last_seen":"2026-03-26T00:37:57.629835Z","alert_count":0,"request_count":10,"received_data":186942,"sent_data":6112,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"mynetflixui.vercel.app/","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cf8635f585a0e02213f16b67c887b757","sha1":"0bf435008f4ccc82cf9baf7a9a64067c69e0d594","sha256":"7dfb4795b4a49bece6986878a51b2cd206e8f45723abf7fc1697436e30631c28","sha512":"80d58049316c13f37ec48d4894c843ff8e80178a2d9557c0f93119290171d79d229abba4c34e09f3965df75d442ea0d2aa670d6d7fcece44aff6e76810afbfaa","ssdeep":"","tlshash":"c4e05bdf28e2045059ef7f5e51aec74471704157144aec05795c4a748f54efc14bb989","size":362,"data":"","first_seen":"2026-03-26T00:38:01.643773Z","last_seen":"2026-05-11T15:04:22.111935Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mynetflixui.vercel.app/assets/logo.svg","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:56.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/logo.svg HTTP/1.1\r\nHost: mynetflixui.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 3548\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Mon, 11 May 2026 15:03:56 GMT\r\netag: W/\"388ea1222ddd526f086fe1888e819adc\"\r\nlast-modified: Mon, 11 May 2026 14:04:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::66c8g-1778511836977-0dc104a5fa11\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2363,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"388ea1222ddd526f086fe1888e819adc","sha1":"07ffed56677d1f04cdfc9ae8327cce0a49400c40","sha256":"1d20a6881a737e2f01e59944a5e447830ee443e736d2056c456ed31beb42ea0c","sha512":"018c5321596cce3b2314b3e9b416c393c71bbf0748958c625b49f2e3c6679c9735110fdb17bb1df202c81b0eaa5b1901738f4fa0f3cee9ed6a337d118f0ab018","ssdeep":"","tlshash":"23413e95f3bd1793ac664bcbb6ca0cf33a2747b0f8a0124895bc0e28546a4e0853dd63","first_seen":"2026-03-26T00:38:01.634986Z","last_seen":"2026-05-11T15:04:22.067638Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mynetflixui.vercel.app/assets/arrow.svg","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:56.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/arrow.svg HTTP/1.1\r\nHost: mynetflixui.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019463\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"arrow.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Mon, 11 May 2026 15:03:56 GMT\r\netag: \"77643cf34b3e8495871459ad01404d5e\"\r\nlast-modified: Wed, 29 Apr 2026 19:52:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mznzr-1778511836977-132a7fa9c03c\r\ncontent-length: 419\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"77643cf34b3e8495871459ad01404d5e","sha1":"a660aed36e9ec79d7ab62a23f0d879f32d8f7bb9","sha256":"d40c464144eaffc0e31924822ac677d2293f28a7b2e466b73cdc9b0acd5405e5","sha512":"0b3671fb395ffc0e213b647c24bfb1aea5e545069cd6dc934074852ee839340c16bf9347fe28ea499b5ada0b7f0ee1c8b89a9c9e7a8763a43faaa3679eafbbe2","ssdeep":"","tlshash":"43e0ab459b4dad3caf22c254f3e43265c012b1548698414ceca17831e21449d203f9d4","first_seen":"2026-03-26T00:38:01.631517Z","last_seen":"2026-05-11T15:04:22.07209Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"occ-0-6247-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABYUCgDPIk4LvnEw_j-dC5ca65oxm4yP2Z7RFKlRcN6WYzCwNA4MhTNqTRrSAK9zND3cSjrYEpbQculmTCXPD09ZbvdCosdbuOjc.webp?r=062","fqdn":"occ-0-6247-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:56.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 20:33:09 GMT"},"fingerprint":{"sha1":"F7:28:4A:AF:A9:A1:1B:B4:18:69:CB:00:F4:BC:CD:27:9D:3F:E9:52","sha256":"21:71:1F:E9:EB:1B:CF:6C:4D:D2:EA:C4:F7:FC:7C:5E:A7:E5:42:21:A1:EE:3D:42:02:98:15:9B:CE:55:FF:68"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABYUCgDPIk4LvnEw_j-dC5ca65oxm4yP2Z7RFKlRcN6WYzCwNA4MhTNqTRrSAK9zND3cSjrYEpbQculmTCXPD09ZbvdCosdbuOjc.webp?r=062 HTTP/1.1\r\nHost: occ-0-6247-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 21798\r\nConnection: keep-alive\r\nlast-modified: Wed, 04 Jun 2025 11:04:08 GMT\r\netag: \"4e3cf8ec7fa37ee63b1b7edbc58c1c4c\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21798,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4e3cf8ec7fa37ee63b1b7edbc58c1c4c","sha1":"6e0601dd6b0515111f711e166a50062e75f49a52","sha256":"ff0c9ae27517270f007a8ea3381db2d2a44672ad527a100939a6c323951ea0f5","sha512":"d6027451c7d3cb14d48e592bd853dc61f6a169dc120d673d5b221f64b336f68a4b04ffd4ce819a8c56105f30a6b3fc97ce7b16b8558c8723d0182443c3fc37d9","ssdeep":"384:/k3G5Z9WSD+P41AzV+fRcEGABN/WJy+hVO4mi0NNTPWJvbW1tXIWko:/fz1Ah+EuN+o+hYfNNTP+bYXIWko","tlshash":"11a2f15c669bd4c094dcb5419b7d4d098fe44c2d44bb83e10d8cd298686ac5afb3f99c","first_seen":"2025-06-10T12:35:49.485282Z","last_seen":"2026-07-30T16:18:11.272205Z","times_seen":346,"resource_available":false,"data":null}},"time_used":1025,"timings":{"blocked":840,"dns":0,"connect":0,"send":0,"wait":181,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Martel+Sans:wght@900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:41 GMT","end":"Mon, 13 Jul 2026 08:36:40 GMT"},"fingerprint":{"sha1":"02:32:5A:C8:A9:9E:51:3B:E6:B9:C2:90:57:59:03:86:2E:5E:AF:0C","sha256":"B4:3F:61:34:DD:CF:DC:F3:4F:B9:A3:80:2B:A9:7F:C1:65:62:81:5A:B1:86:17:32:64:43:A8:E7:64:F6:2D:D9"}}},"request":{"raw":"GET /css2?family=Martel+Sans:wght@900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 11 May 2026 15:03:57 GMT\r\ndate: Mon, 11 May 2026 15:03:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"365a5fede8d2be0cc162c2884e170897","sha1":"226df1a10fa2b0cba96fadd61d956b6e42642110","sha256":"f748881858b29a7ddd334969d3adefcef5612df0dba30d4130653f252ff8d363","sha512":"b28ba3763f4e975aad9ca8d258ce1567f5f07e6a1f1f7ca78f4acb9e69cab256c2a720903011bc048f03e3834e90683da35516aaa56aa7607b8e6d768737be10","ssdeep":"","tlshash":"bc21edd2462b9420eb532cc522de7f22de1e52227401c6354ffd18c8ec96d2d0362b5d","first_seen":"2025-11-25T12:54:09.702056Z","last_seen":"2026-06-06T15:26:27.172139Z","times_seen":18,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":1,"connect":28,"send":0,"wait":47,"receive":0,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/martelsans/v14/h0GxssGi7VdzDgKjM-4d8hBb4PuAH0g.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/martelsans/v14/h0GxssGi7VdzDgKjM-4d8hBb4PuAH0g.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mynetflixui.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 09 May 2026 00:09:48 GMT\r\nexpires: Sun, 09 May 2027 00:09:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:47 GMT\r\ncontent-type: font/woff2\r\nage: 226449\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14528,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14528, version 1.0","md5":"4dcebed81632b87c5a314bc701e839ae","sha1":"48564ba800400d4319035241ca5a0121b1bcbb7b","sha256":"666f434150ba2a01553548e3e9c9d8d194e4480f0cee5389e189751bfdffee61","sha512":"370ed03417990fcf5d431684dde2dd7c7f0bda46e972923507c8de413ee91a0050e4ce29e5fc2f0d2d74e374f4bd28570a0c2fbc44d28cec4c89ff9dd0efac93","ssdeep":"384:N/7clVXjCN5xvbSelwNxdyJnbxD0Csxgy5ReNpNUyMR:NolhjkvS1xs1ND0dmmR46R","tlshash":"8162c0c5eecd90e9c5c21520b4ca57a2768aabb3c64af0b1320d4f222a769c5513d4e5","first_seen":"2023-05-10T16:37:20Z","last_seen":"2026-07-30T15:40:02.42058Z","times_seen":638,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":341,"dns":3,"connect":15,"send":0,"wait":16,"receive":3,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mynetflixui.vercel.app/style.css","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:56.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: mynetflixui.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1001178\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 11 May 2026 15:03:56 GMT\r\netag: \"695ca26ae71a024d9f950ddf16fee5f8\"\r\nlast-modified: Thu, 30 Apr 2026 00:57:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dvv8f-1778511836976-fccd9624a2db\r\ncontent-length: 2690\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10732,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"bf360014422415316908168ff5ba1fa1","sha1":"babc706e038de5bae18a345f5058701498064b7a","sha256":"999822388bd21229ded63666ce43e8087a7cd594846badd8b3eef6029a397788","sha512":"df4028c27ebf6a98371d086dc07a2fa593448953bf324c5ea327b7259f8c25c313dded9589be4448bf01853d9854f1e3e4038e619c7a4b6d670aedb0d52c32d1","ssdeep":"192:1a5ZxnHItP6DRHZy6nJL7H8OyTAhp+qXFXxuiLn:1aStAH17XFXxu8","tlshash":"b222cd06c6021604b4b7a7adefb31b4ee7974053c30682a83fddb2948fb505956a5fcd","first_seen":"2026-03-26T00:38:01.630668Z","last_seen":"2026-05-11T15:04:22.08562Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"occ-0-6247-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABYGL4_ns5MGTE5-Yd3ZQVB5apyY9yxQ39lxjT_27ehdoGzrxRwNc4osgXEeifcv9yO_MgMySL-p6hMxtQZnIEkZmyglIJ7wm7ik.webp?r=c23","fqdn":"occ-0-6247-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 20:33:09 GMT"},"fingerprint":{"sha1":"F7:28:4A:AF:A9:A1:1B:B4:18:69:CB:00:F4:BC:CD:27:9D:3F:E9:52","sha256":"21:71:1F:E9:EB:1B:CF:6C:4D:D2:EA:C4:F7:FC:7C:5E:A7:E5:42:21:A1:EE:3D:42:02:98:15:9B:CE:55:FF:68"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABYGL4_ns5MGTE5-Yd3ZQVB5apyY9yxQ39lxjT_27ehdoGzrxRwNc4osgXEeifcv9yO_MgMySL-p6hMxtQZnIEkZmyglIJ7wm7ik.webp?r=c23 HTTP/1.1\r\nHost: occ-0-6247-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 16496\r\nConnection: keep-alive\r\nlast-modified: Fri, 23 May 2025 18:56:24 GMT\r\netag: \"af700c4874d11c45fe7d94dea230f225\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"af700c4874d11c45fe7d94dea230f225","sha1":"3edc6e97afcd64e1f4632eec90e06fd3fb927b44","sha256":"0ff9a753ce1b3311dbfb8820197f0dde7fa20256d0c7dbd6c2ba26a65010e3cf","sha512":"69375c2b22586c08f5eb5c6322ed68dfa4bc400a321ac084efaff557e2a61e8f7d71471961d257d2390b2277dbb124028bc18ce86de0661901013da8ffb96b1a","ssdeep":"384:Y/x5BBN7gJFgaqfNu3dM144FSbNa6AcAg/EUDWVqT:kxMJF/3dM1dFSbNaxi/DWVu","tlshash":"2f72d04952b9d17c4b1274208a9244468fef574cfbe1aa8398fcc48e7cb599c7e35298","first_seen":"2025-05-30T13:09:41.739435Z","last_seen":"2026-07-30T16:18:11.279723Z","times_seen":461,"resource_available":false,"data":null}},"time_used":2042,"timings":{"blocked":845,"dns":10,"connect":167,"send":0,"wait":170,"receive":159,"ssl":688},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"occ-0-6247-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABZ2Btia34ViHOdbGThR2xD0XYVD9vkdTkUULeET8PcHeq12ebMOJyLaTD1yS26NaRfUqDMknk2XnomOCg78WEKeN3VEDdOKzFRayBGveEZ-MeOaVD-v0z5P25idICKgt-nXX.webp?r=a1c","fqdn":"occ-0-6247-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 20:33:09 GMT"},"fingerprint":{"sha1":"F7:28:4A:AF:A9:A1:1B:B4:18:69:CB:00:F4:BC:CD:27:9D:3F:E9:52","sha256":"21:71:1F:E9:EB:1B:CF:6C:4D:D2:EA:C4:F7:FC:7C:5E:A7:E5:42:21:A1:EE:3D:42:02:98:15:9B:CE:55:FF:68"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABZ2Btia34ViHOdbGThR2xD0XYVD9vkdTkUULeET8PcHeq12ebMOJyLaTD1yS26NaRfUqDMknk2XnomOCg78WEKeN3VEDdOKzFRayBGveEZ-MeOaVD-v0z5P25idICKgt-nXX.webp?r=a1c HTTP/1.1\r\nHost: occ-0-6247-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 17480\r\nConnection: keep-alive\r\nlast-modified: Fri, 06 Jun 2025 07:01:12 GMT\r\netag: \"24b7d0accff4186aa1f298e689479189\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17480,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"24b7d0accff4186aa1f298e689479189","sha1":"69d73bb136b688f235a94e809a060210cb2bcad9","sha256":"b3158644078e42b1e9ca06d4e9ec0305b67b8f6b38476fda40e78b7e4fbaae66","sha512":"6a7aab251fe78df4b34bf88fef35810d751f5999f83ed827f19138a67f5db270e21476fc4fccb15376e1eba31e113d35e4551704f62a05b9dd467a802baa7f4b","ssdeep":"384:qpUwIcvyz0W2xCt1NG9SgccjUmTtuL49cYrrrxqufQhhqhkFUZ:NwIcHW24NG99cc7tu8yYr3xquIY","tlshash":"c572c0c561773f6499f0b50020e1e83b04ebf611992a793af534d2ed3f8160b9663a43","first_seen":"2025-06-23T11:40:03.858636Z","last_seen":"2026-07-30T16:18:11.289421Z","times_seen":173,"resource_available":false,"data":null}},"time_used":2353,"timings":{"blocked":977,"dns":8,"connect":180,"send":0,"wait":185,"receive":189,"ssl":810},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mynetflixui.vercel.app/assets/image/download.png","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/image/download.png HTTP/1.1\r\nHost: mynetflixui.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019463\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"download.png\"\r\ncontent-type: image/png\r\ndate: Mon, 11 May 2026 15:03:56 GMT\r\netag: \"7ad06a92c21d9b0d293eb358c4023282\"\r\nlast-modified: Wed, 29 Apr 2026 19:52:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mznzr-1778511836988-b14d2fa539dd\r\ncontent-length: 7892\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7892,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"7ad06a92c21d9b0d293eb358c4023282","sha1":"5354077b7e2ef2522b00568a98a3d84b292e3bdd","sha256":"40245096ba567ec9d5486a16675b93054e76c3ca436fcdd010d59285148f57cd","sha512":"9b69c617f4361c8d36f7505f7f689bf29123f00af7732f47a95a6c72e808238dfd9da1f11d5d2016610eb3c8781e2e2126674b78180fd4f2974bcb89816f3b70","ssdeep":"192:MJ2kEzCyTKvXygsHi46nXllcO0Qe8QiLN:62TzCkIsC4gncG8uN","tlshash":"52f1c0a8c054cac70929bf234712f55abd360b0c677704d94aa71c1a9dd6f7127f28d3","first_seen":"2024-09-24T01:52:11Z","last_seen":"2026-05-18T09:57:39.442352Z","times_seen":30,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mynetflixui.vercel.app/assets/image/kids.png","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/image/kids.png HTTP/1.1\r\nHost: mynetflixui.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019463\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"kids.png\"\r\ncontent-type: image/png\r\ndate: Mon, 11 May 2026 15:03:56 GMT\r\netag: \"f1a732a4bda668d5b1a0c8c00025acd2\"\r\nlast-modified: Wed, 29 Apr 2026 19:52:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dvv8f-1778511836992-7a38447685ba\r\ncontent-length: 3288\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"f1a732a4bda668d5b1a0c8c00025acd2","sha1":"fe29d82e876b9cc4775a4a5c4b7fc2366cbfea9b","sha256":"0b1c6c998f1c433d5dc47554e1cae295ccae9fab2713859582eef6af0afefcb8","sha512":"aa5c705f0e8451280c01304c157037c3bccedebdfe3b7bcb1882564260c438e161aa63f3706a971cda0290a6ffc8d5c4968739a3ca194cb5dd82ff730c761388","ssdeep":"","tlshash":"bb614bd3cb5d5acccb833829423492e98de5e51c49e60029cd1779b6e40c7abf56a372","first_seen":"2024-09-24T01:52:11Z","last_seen":"2026-05-18T09:57:39.444802Z","times_seen":30,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mynetflixui.vercel.app/assets/arrowleft.svg","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:56.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/arrowleft.svg HTTP/1.1\r\nHost: mynetflixui.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1001178\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"arrowleft.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Mon, 11 May 2026 15:03:56 GMT\r\netag: \"4ddec7b10c440dcefbb9492dd31f49da\"\r\nlast-modified: Thu, 30 Apr 2026 00:57:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pvvb6-1778511836978-934895101c02\r\ncontent-length: 363\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":363,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4ddec7b10c440dcefbb9492dd31f49da","sha1":"a154e70cda56f1945028cf81c39d7c3ae4284ede","sha256":"cfa265c00f39f8c3d4e5cc5b2f5dc30502e24f44896d8d6dafb21d154032812a","sha512":"9914a927ed399b3c0561662cbcd8ce709fb00010e0a09c82acdf4137e065728484ef039d763ad75b2edfff42b12fc191eb7b2268d51ded9b1cbd5edf181761fe","ssdeep":"","tlshash":"ebe0c0288a4d9a304b25c240f3e4b159c053f1b483dc404ced80b831f514cde243f1e9","first_seen":"2026-03-26T00:38:01.635774Z","last_seen":"2026-05-11T15:04:22.096872Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"occ-0-6247-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABSlqHrOJU6pt2MtA_pqOW4MzrKY4pEOkg3JC8fr73T43h0DTet1vd1dyN8VIRvvmO13UtztA35mPgP5P_0w1ZuodX47qbMLEaCJ3XZiYxAQwnYZFJPkwEBbU8QeztnQjRQKg.webp?r=e07","fqdn":"occ-0-6247-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:56.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 20:33:09 GMT"},"fingerprint":{"sha1":"F7:28:4A:AF:A9:A1:1B:B4:18:69:CB:00:F4:BC:CD:27:9D:3F:E9:52","sha256":"21:71:1F:E9:EB:1B:CF:6C:4D:D2:EA:C4:F7:FC:7C:5E:A7:E5:42:21:A1:EE:3D:42:02:98:15:9B:CE:55:FF:68"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABSlqHrOJU6pt2MtA_pqOW4MzrKY4pEOkg3JC8fr73T43h0DTet1vd1dyN8VIRvvmO13UtztA35mPgP5P_0w1ZuodX47qbMLEaCJ3XZiYxAQwnYZFJPkwEBbU8QeztnQjRQKg.webp?r=e07 HTTP/1.1\r\nHost: occ-0-6247-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 20870\r\nConnection: keep-alive\r\nlast-modified: Sat, 21 Jun 2025 14:30:06 GMT\r\netag: \"5be238931295a4836b6bb63a05cc3fba\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20870,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5be238931295a4836b6bb63a05cc3fba","sha1":"8f95df9231e6788e09f30b1d5af8d7c4d9a1b0dd","sha256":"29f9e94fc755254f1befb2a73cc4b8e6f698f5f17c173381e1e391a941de22b3","sha512":"431aa3dcc337017740d5938fb1c4e8f2e441f40dbe96b95e8cb0f15dcf5d4fdba5ee3c5f1e5b66ad8049e59bb15ec41f020c36d0180bac987caeff8124f56bce","ssdeep":"384:F7Z4jR+Fqh5xix11d4moi1Gm2foy4KPJx1Z6vi77fvM3IGu8oum/rTpqG/:F7scc1UCGUPoWJx1jnfJfsG/","tlshash":"a792d13205f91d0e50122a80a0f9f74e838d616ed9e2dd15d8afb13632d97f39b68dc6","first_seen":"2025-06-30T14:36:02.669301Z","last_seen":"2026-05-24T05:56:45.877011Z","times_seen":73,"resource_available":false,"data":null}},"time_used":1700,"timings":{"blocked":651,"dns":9,"connect":183,"send":0,"wait":188,"receive":192,"ssl":472},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"occ-0-6247-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABQqOh2yhpKE8385dV9hjlxxXtG63RjSjrlNOkx2yLuGMYe8JFTnA9ScVsioAhTa9Ds34ERhB2R4aBFUng1j54IFwl5JvjgVmGEU.webp?r=d66","fqdn":"occ-0-6247-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 20:33:09 GMT"},"fingerprint":{"sha1":"F7:28:4A:AF:A9:A1:1B:B4:18:69:CB:00:F4:BC:CD:27:9D:3F:E9:52","sha256":"21:71:1F:E9:EB:1B:CF:6C:4D:D2:EA:C4:F7:FC:7C:5E:A7:E5:42:21:A1:EE:3D:42:02:98:15:9B:CE:55:FF:68"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABQqOh2yhpKE8385dV9hjlxxXtG63RjSjrlNOkx2yLuGMYe8JFTnA9ScVsioAhTa9Ds34ERhB2R4aBFUng1j54IFwl5JvjgVmGEU.webp?r=d66 HTTP/1.1\r\nHost: occ-0-6247-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 12916\r\nConnection: keep-alive\r\nlast-modified: Sun, 25 May 2025 18:56:27 GMT\r\netag: \"0fc20aeca51981f7faf79fb554139094\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0fc20aeca51981f7faf79fb554139094","sha1":"e38c43c5fe812eac7ebdbab4945c8c78cb90602b","sha256":"5f0960efa495ecbf81736648127f4390a28638fba2bae301f7809ffdaecf977a","sha512":"fc7c041831dea0da5f59280a09a2195433bea0e87a3d17313982bdc5259458ef1d08ecaa05ba101c10b15c43ffc29265e1c64465572a1889dd7e6442446bba78","ssdeep":"384:OkSn/f2VxSpepiS/OnsymvWVRz+3468gI:S/YcEiYZKN+34h","tlshash":"9e42bf9fd0fcd188fc178524aac05a03488ff62f675172052578eaab54f38f5692a9b4","first_seen":"2025-06-08T13:03:00.089808Z","last_seen":"2026-05-12T02:48:02.32991Z","times_seen":171,"resource_available":false,"data":null}},"time_used":1205,"timings":{"blocked":1020,"dns":0,"connect":0,"send":0,"wait":183,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mynetflixui.vercel.app/assets/image/tv.png","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/image/tv.png HTTP/1.1\r\nHost: mynetflixui.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3548\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tv.png\"\r\ncontent-type: image/png\r\ndate: Mon, 11 May 2026 15:03:56 GMT\r\netag: \"1a1f35d6e3c1ad1e7b3bface82ec7249\"\r\nlast-modified: Mon, 11 May 2026 14:04:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dvv8f-1778511836988-5d3476fc3dc4\r\ncontent-length: 3863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"1a1f35d6e3c1ad1e7b3bface82ec7249","sha1":"6b07680ee82a04853bfeca7963f03fde7dae7f50","sha256":"805628f6bf1afc8cfc77e9ab9a3f0e1c51135b558aa7f6eee3f5c82cdb6640a2","sha512":"1dd9b32e1191a40e50eadb6270b3c771c092ae3fdce18820675fe8c5eaf23bfd855f8bf69c992f1bf01d3cdcc804ddc53feac9c0b6d44b02ee9e61afba4b69c7","ssdeep":"","tlshash":"06816c1146f31fdcf690503014e5a8902a127b210bdcc67fca64b18d61cdb26de7acda","first_seen":"2024-09-24T01:52:11Z","last_seen":"2026-05-18T09:57:39.449936Z","times_seen":28,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/martelsans/v14/h0GxssGi7VdzDgKjM-4d8hBb4PuOH0gXqA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:40 GMT","end":"Mon, 13 Jul 2026 08:36:39 GMT"},"fingerprint":{"sha1":"7F:B3:C1:48:F4:27:B8:68:3C:19:02:13:E1:6F:23:04:AC:C8:65:17","sha256":"FC:08:6D:DD:C4:AF:25:5E:6A:51:A0:A1:4E:27:4A:FF:E3:A5:37:ED:A4:1A:33:C1:27:48:DE:AB:71:AE:5D:2D"}}},"request":{"raw":"GET /s/martelsans/v14/h0GxssGi7VdzDgKjM-4d8hBb4PuOH0gXqA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mynetflixui.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: font/woff2\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 10088\r\ndate: Mon, 11 May 2026 15:03:57 GMT\r\nexpires: Tue, 11 May 2027 15:03:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:26:47 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10088,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 10088, version 1.0","md5":"45f80a5a05e7a07538b5ce7f463fb6fd","sha1":"1e0b1774917eeaee1b2eda3905721de260d782e0","sha256":"703f8da77aa67137f22540fa041f49ffad2992d3a277005e531fb27e2f95a5a4","sha512":"fe5525e0cb1f9f5c9536280e1cd29dc503db2907f648ae562d1e1df7b935487b4bb6234f1627e49b98564aaac85ed0d0e5f99ab5c0067e39f33d09cdf2e3d63d","ssdeep":"192:mAxgjCvCgK65WvfhU9KWS+q+gxJJcuCKIwpM53LQzOjo7d98ChosF:m5y6fhVWSKgxw5KIwS0CIr8sosF","tlshash":"4622cf32ddba0ad894f76dbeca060bdde9b7f5c46a30013e64a81f493860df01665193","first_seen":"2025-09-12T01:54:30.218392Z","last_seen":"2026-07-28T12:51:11.425453Z","times_seen":26,"resource_available":false,"data":null}},"time_used":718,"timings":{"blocked":344,"dns":3,"connect":17,"send":0,"wait":35,"receive":2,"ssl":315},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mynetflixui.vercel.app/favicon.ico","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:58.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mynetflixui.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1019461\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Mon, 11 May 2026 15:03:58 GMT\r\netag: W/\"41b45fdce09bd6acd07c7a8949da675e\"\r\nlast-modified: Wed, 29 Apr 2026 19:52:56 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qlqfb-1778511838319-258bd03bbdcf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"41b45fdce09bd6acd07c7a8949da675e","sha1":"931e18dfc6e7d950dc2f2bbdfe31e1ea720acf7c","sha256":"abe8012eb65c0dc0ac3e87dcc1e60e1908ebd8f12b7c47a5df1856f7a7bb1edd","sha512":"a650426e681161f3673d5e56c1f6c45d609715f07e85b3a3b2c610d293fbcb04a882ac9f92e65977a7145ef45035d08870de3ab6ba331daa2ee2fb4b1ce83296","ssdeep":"48:vXswapDVp0m3T5xuzqnM6ly9mq2FtFe4iMFJ+fPHyc2/4:vcwkDVpr5YGiAVJHiyJ+Sc2/4","tlshash":"f372c8af60d3dd8dfe516ebad125cc38123c38e0edfc956bb0c14e2a0a1294266d39d0","first_seen":"2023-05-01T03:11:06Z","last_seen":"2026-08-12T18:00:39.178444Z","times_seen":6561,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"occ-0-6247-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABWtQdcUd4n6VKz6HTm_IbI2cOq0VDU7fDQpomIXBLuCYqtJ4j8hj2pz7j6spnX2osjRgTMJQ9xkMieYZWqC6xC8G4tGlTLJBm3I.webp?r=cc2","fqdn":"occ-0-6247-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 20:33:09 GMT"},"fingerprint":{"sha1":"F7:28:4A:AF:A9:A1:1B:B4:18:69:CB:00:F4:BC:CD:27:9D:3F:E9:52","sha256":"21:71:1F:E9:EB:1B:CF:6C:4D:D2:EA:C4:F7:FC:7C:5E:A7:E5:42:21:A1:EE:3D:42:02:98:15:9B:CE:55:FF:68"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABWtQdcUd4n6VKz6HTm_IbI2cOq0VDU7fDQpomIXBLuCYqtJ4j8hj2pz7j6spnX2osjRgTMJQ9xkMieYZWqC6xC8G4tGlTLJBm3I.webp?r=cc2 HTTP/1.1\r\nHost: occ-0-6247-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 21510\r\nConnection: keep-alive\r\nlast-modified: Thu, 10 Apr 2025 05:31:08 GMT\r\netag: \"60c7276a4f5df3cb08ab91c066bfe6b5\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"60c7276a4f5df3cb08ab91c066bfe6b5","sha1":"1629178b12e29a38475ebecb83d9423eeb781cbc","sha256":"3b9e616b4230e4f4747ea86e598e90dabb5d31648e8235c707adab2105e58d06","sha512":"701b9acc530c24ed79dc5137670e4b8b2ffe0f3d21a281ece0e94bd6500c29ae94f0c8a40f82725f4f240cbb2c54cc35dda30aaba563f5c7da5fb6ba4a62fb02","ssdeep":"384:7cWlevhVQ7XKuNtZWVYudv+BMetKunQ6lXK5j6bh2RECVyNwsQSJPz:QIevhVOXKItstZ+BhtKwY4agb","tlshash":"aba2e1ac30178ed3bf54ba5d6b66c7ed4b50204b7c19fcadb42018fb2176b94625db80","first_seen":"2025-05-04T12:20:13.163609Z","last_seen":"2026-07-30T15:40:02.412526Z","times_seen":360,"resource_available":false,"data":null}},"time_used":1205,"timings":{"blocked":1020,"dns":0,"connect":0,"send":0,"wait":182,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mynetflixui.vercel.app/","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-11T15:03:56.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mynetflixui.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1416595\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 11 May 2026 15:03:56 GMT\r\netag: W/\"1491196196d716bb53418123d571294c\"\r\nlast-modified: Sat, 25 Apr 2026 05:34:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mznzr-1778511836786-4d73298b3691\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10838,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"76aeb8a27c1745ec7756fd48e5059c98","sha1":"34736f1e50993b4ecff3ddbee14b5377540189a8","sha256":"06fdd44daff8682d274556b388b1cb4ecf20a0046f3ee985db404e869bb2a0ed","sha512":"a69e000beb0f15efac108e1cd501b3976657fe0ecf7930c2ca4dc15ad998fed87bc2b401cd79376564271596421819ba04f90b1b6f044ef5d46ae78934330902","ssdeep":"96:X5u7zvzW/d00/vjH+fq3I/sKW+VQ09w/og5wp5ANZgEr51d:07zudvj+iKT9wVNhrF","tlshash":"a722957b01c9980b523381c19e657f29fe4382074a4a5114b9fe6be36fb1d09ed236ed","first_seen":"2026-03-26T00:38:01.629778Z","last_seen":"2026-05-11T15:04:22.104798Z","times_seen":5,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"occ-0-6247-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABaW57jWqw0Gs9gqgmW816THwyNfPqphIiruQRFy9KXtt9PTPJpB4kzDKriPcpNjPKCj0itu1Yfjl-CR8rGEokBHPKE4O9lZQHXHRRpUHEelwoKk8lOf4gqlws-HnR2iZeSk4.webp?r=609","fqdn":"occ-0-6247-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:56.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 20:33:09 GMT"},"fingerprint":{"sha1":"F7:28:4A:AF:A9:A1:1B:B4:18:69:CB:00:F4:BC:CD:27:9D:3F:E9:52","sha256":"21:71:1F:E9:EB:1B:CF:6C:4D:D2:EA:C4:F7:FC:7C:5E:A7:E5:42:21:A1:EE:3D:42:02:98:15:9B:CE:55:FF:68"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABaW57jWqw0Gs9gqgmW816THwyNfPqphIiruQRFy9KXtt9PTPJpB4kzDKriPcpNjPKCj0itu1Yfjl-CR8rGEokBHPKE4O9lZQHXHRRpUHEelwoKk8lOf4gqlws-HnR2iZeSk4.webp?r=609 HTTP/1.1\r\nHost: occ-0-6247-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 21180\r\nConnection: keep-alive\r\nlast-modified: Sun, 25 May 2025 22:53:53 GMT\r\netag: \"5904a7d9026c36f118c8aa8897bcd24f\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21180,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5904a7d9026c36f118c8aa8897bcd24f","sha1":"be6d4ae5f941bc294835cf62c53e7ec079893ba3","sha256":"7eef39ccf5916fbb59464e95bd95178ac5b9e4507859ef0ff45e7147e1a10d2c","sha512":"23a5d874c726b8efc3269a7522266f11cf794f644ad2f6dad73c383b34916701cbb07b2386452d55f9108826ad900adebb712a21c0509a04c9068cec7520bfe7","ssdeep":"384:aYVf6kh9+PWSPyLuGmLpDJGRRFsnSYHASBuL+vGKCJERmG3ZzQK4GMeJRLjeACr:aYl6kh90PyLPyGRFuSYHAV8GKRRmGAVD","tlshash":"2992d015f6d80da5bc462e0f78012002f57960cf4642e8f66758eaeb9d1ea49d23db2d","first_seen":"2025-06-28T10:55:23.33692Z","last_seen":"2026-08-06T22:26:17.127745Z","times_seen":430,"resource_available":false,"data":null}},"time_used":1661,"timings":{"blocked":645,"dns":8,"connect":172,"send":0,"wait":176,"receive":179,"ssl":477},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"occ-0-6247-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABU73BvQjJgydQFEJ-vZZw9QtO8fL6lIxc71x9tOqxgDWh_BHokCWPIbGC5AxJjDk0D_sIH5KhmmYm9HLr3DKUXg8eo6nzF0rtSI.webp?r=d95","fqdn":"occ-0-6247-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:56.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 20:33:09 GMT"},"fingerprint":{"sha1":"F7:28:4A:AF:A9:A1:1B:B4:18:69:CB:00:F4:BC:CD:27:9D:3F:E9:52","sha256":"21:71:1F:E9:EB:1B:CF:6C:4D:D2:EA:C4:F7:FC:7C:5E:A7:E5:42:21:A1:EE:3D:42:02:98:15:9B:CE:55:FF:68"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABU73BvQjJgydQFEJ-vZZw9QtO8fL6lIxc71x9tOqxgDWh_BHokCWPIbGC5AxJjDk0D_sIH5KhmmYm9HLr3DKUXg8eo6nzF0rtSI.webp?r=d95 HTTP/1.1\r\nHost: occ-0-6247-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15642\r\nConnection: keep-alive\r\nlast-modified: Wed, 25 Jun 2025 06:40:53 GMT\r\netag: \"5edd465587183555aefc35355081ce87\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5edd465587183555aefc35355081ce87","sha1":"ef58fabfe4e3b6037c8cc8492e2f0c91d6d45f7d","sha256":"d424cbe8df5974ce1c4802d9293620db09990bd5bfc0ef96235204f0c8351120","sha512":"f8b7ad988fa67710b7899ff1af3ddf49954b68efdeae07e45facc634271600fc583ad2c9758b944ae27f01df520c7fcfd731db25ae634150adc208a3c26e971e","ssdeep":"384:7s9CHDuFX5qDFwheSIjc44rlW5Rtx5OX4KhOSp0r1PK9B2:7OmDKq+heSIIrEOX4cmy9k","tlshash":"ca62d09cc4a49b27cee1d6b181b61f0851f8e95db1422bc5afd310b7e29e6f351a0ca4","first_seen":"2025-06-28T10:55:23.343175Z","last_seen":"2026-08-06T22:26:17.126811Z","times_seen":454,"resource_available":false,"data":null}},"time_used":1522,"timings":{"blocked":658,"dns":11,"connect":184,"send":0,"wait":184,"receive":1,"ssl":476},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"occ-0-6247-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABcH5_XDKPeXszDIKUeRk9f8gbZf2IIH_vdf4CNwOb7kql21x-tuHFIQn1NVGFCzD79WrtEa2YEWqbSqJAs8AAOymvo6mcwfQlFM.webp?r=e74","fqdn":"occ-0-6247-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:56.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 20:33:09 GMT"},"fingerprint":{"sha1":"F7:28:4A:AF:A9:A1:1B:B4:18:69:CB:00:F4:BC:CD:27:9D:3F:E9:52","sha256":"21:71:1F:E9:EB:1B:CF:6C:4D:D2:EA:C4:F7:FC:7C:5E:A7:E5:42:21:A1:EE:3D:42:02:98:15:9B:CE:55:FF:68"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABcH5_XDKPeXszDIKUeRk9f8gbZf2IIH_vdf4CNwOb7kql21x-tuHFIQn1NVGFCzD79WrtEa2YEWqbSqJAs8AAOymvo6mcwfQlFM.webp?r=e74 HTTP/1.1\r\nHost: occ-0-6247-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 19366\r\nConnection: keep-alive\r\nlast-modified: Thu, 03 Jul 2025 10:14:55 GMT\r\netag: \"900fe9cc9d4c26afa2a7be35ab81c547\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19366,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"900fe9cc9d4c26afa2a7be35ab81c547","sha1":"fc8fef5557016466d394e09da17a298a092dec82","sha256":"b28ada692f9f8638ef71f2a2f186ccd137640cd7e3115dfd672b94f29cc8eb17","sha512":"4ec2fd769dfa9b5a41117e0da89e965080689aed22687bdc27c426bce2d1a35292e83c1cd74e70f4d2030eab880acc339513d730f13be0f80e68e79eccc3cf38","ssdeep":"384:UI/dl0ZIO8H7+tIrUElA/1sMJYn+um+jXGlS1pvlbxnxO7L:rWFmSxEYJY+um+j2SDnxO7L","tlshash":"a092d08e4820830d1613d555bd12a3424c97f795cf9a832fc82deb3a54dbeb6430753e","first_seen":"2025-07-21T20:03:09.192983Z","last_seen":"2026-07-30T15:40:02.437914Z","times_seen":100,"resource_available":false,"data":null}},"time_used":1992,"timings":{"blocked":817,"dns":6,"connect":164,"send":0,"wait":170,"receive":172,"ssl":660},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"occ-0-6247-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABRS_77dhhj6XpMj91rPiEI2g7XGUysu1g0vGaXZNPTTscsBMNJY9OdDkVNsd-Z5CsSX7cdyWSqOjJNRjrWnOBuF4U-MUz7hlmGtIm6gwf_9vAl3_3dpZyOc8EMKt0pxKqXVp.webp?r=2a5","fqdn":"occ-0-6247-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.142.150","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 20:33:09 GMT"},"fingerprint":{"sha1":"F7:28:4A:AF:A9:A1:1B:B4:18:69:CB:00:F4:BC:CD:27:9D:3F:E9:52","sha256":"21:71:1F:E9:EB:1B:CF:6C:4D:D2:EA:C4:F7:FC:7C:5E:A7:E5:42:21:A1:EE:3D:42:02:98:15:9B:CE:55:FF:68"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABRS_77dhhj6XpMj91rPiEI2g7XGUysu1g0vGaXZNPTTscsBMNJY9OdDkVNsd-Z5CsSX7cdyWSqOjJNRjrWnOBuF4U-MUz7hlmGtIm6gwf_9vAl3_3dpZyOc8EMKt0pxKqXVp.webp?r=2a5 HTTP/1.1\r\nHost: occ-0-6247-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15114\r\nConnection: keep-alive\r\nlast-modified: Wed, 02 Jul 2025 04:22:13 GMT\r\netag: \"76a602860dea0a39c006a259a22bd81c\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15114,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"76a602860dea0a39c006a259a22bd81c","sha1":"acd53e5a4b2087db59c7f378b958e2ddf27bab8f","sha256":"9a525323de7f83ce36987305ff1d0f8f5bb42f8b48373f6b2ff1fe9866a3d753","sha512":"0910730d4f6af63161a5e3205e627eec4db3105e224e5e7442537a119ecef3bdcf8f65ecfda63cdb1a8a8bedaf0405f190eda3417ce001846f99485f248d7d25","ssdeep":"384:FdLOl4Cm4Fbjiusyq+xQ0+TpycXDAnT/3lFfzCKoNq:nOpousUl9yDMHzCvq","tlshash":"3e62cfe9f2f2182d298f29ca56b6e5d9374d460eeb2d93dc1a8560801785729cc9bcb0","first_seen":"2025-07-19T21:17:11.850234Z","last_seen":"2026-07-09T01:12:14.253408Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1162,"timings":{"blocked":990,"dns":0,"connect":0,"send":0,"wait":170,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mynetflixui.vercel.app/assets/image/bino.png","fqdn":"mynetflixui.vercel.app","domain":"mynetflixui.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /assets/image/bino.png HTTP/1.1\r\nHost: mynetflixui.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1019463\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bino.png\"\r\ncontent-type: image/png\r\ndate: Mon, 11 May 2026 15:03:56 GMT\r\netag: \"ef6a8d177c4641ff434ab77ff67892f9\"\r\nlast-modified: Wed, 29 Apr 2026 19:52:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6vmdv-1778511836989-5b12e9be8b35\r\ncontent-length: 4102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4102,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"ef6a8d177c4641ff434ab77ff67892f9","sha1":"b80b71a58704884b8ee6eb27bf86a5dce71440b4","sha256":"764d19b29d7fcf636442760101acb0bae7f6dfdd7872a07726b4a0cc81586a99","sha512":"12c9e95811beda1beb61f873eb67992023402d781694a75d274e09b62f74fe687d137682b2888a33c6deb17837498f1027b89114974c2bf9abbfb71bdc1784a9","ssdeep":"96:rw8c7A6ULYjE5Pc0cNEqDg2wUUrdwAZ6QJ5IGOm2nmB6KdtpBG:E8KHrEGgmYwAZ6QvIdJKxs","tlshash":"82819f42436e22eb9e4dd3914b55d4a1345ba346c785f818ce375c333919111bd7ee30","first_seen":"2024-09-24T01:52:11Z","last_seen":"2026-05-18T09:57:39.443247Z","times_seen":30,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-11","alert":"Sinkholed","trigger":"mynetflixui.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-11","alert":"Phishing Block","trigger":"mynetflixui.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/vlv3/05e91faa-6f6d-4325-934e-5418dcc2567b/web/IN-en-20250630-TRIFECTA-perspective_159086b1-425f-435b-bcd5-1ed8039cdef9_large.jpg","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mynetflixui.vercel.app/","date":"2026-05-11T15:03:57.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Sun, 07 Jun 2026 23:34:25 GMT"},"fingerprint":{"sha1":"61:B5:83:69:CC:5D:52:5F:5A:0B:C4:DE:46:25:5F:18:27:22:91:68","sha256":"06:2F:3B:29:22:77:03:A0:48:03:96:1D:B0:0F:7A:4B:59:4A:7A:CB:C9:7D:CA:7D:35:4F:66:58:8B:6E:FB:93"}}},"request":{"raw":"GET /ffe/siteui/vlv3/05e91faa-6f6d-4325-934e-5418dcc2567b/web/IN-en-20250630-TRIFECTA-perspective_159086b1-425f-435b-bcd5-1ed8039cdef9_large.jpg HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mynetflixui.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Mon, 11 May 2026 15:03:57 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 357140\r\nConnection: keep-alive\r\nContent-MD5: NtOSRyifpgrWxRptWyn3zA==\r\nLast-Modified: Wed, 02 Jul 2025 14:43:30 GMT\r\nCache-Control: max-age=604801\r\nExpires: Mon, 18 May 2026 15:03:58 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":357140,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x1125, components 3","md5":"36d39247289fa60ad6c51a6d5b29f7cc","sha1":"c0d4e38d40f3e8b35832014f121dcb07973312a0","sha256":"c7e2d066ab1dede8b9ad5aba943471b2f68de16814496061715e4ca9ff9b82f0","sha512":"4fc836a92ec9e93b5e6d310f575b87063b72ef9d26ceb30f2c54828ad7dd52f2b0241d16da49d2874a8db1bd14387c23e035ffaf5e1e5512f622727c178be153","ssdeep":"6144:kyQtdarxySPFTRUwB7YUkka+Xu63X6f2A1twzMyP3rQEcD34Ss7f68b:kHCrcWRUyXFXuc6l1teP3r1ff6G","tlshash":"7d7423946631f806a3cbca4f4fe333ea3213226655a1a1db1dc35dc681c2da79d0bb95","first_seen":"2025-07-06T09:34:03.871456Z","last_seen":"2026-05-11T15:04:22.111173Z","times_seen":61,"resource_available":false,"data":null}},"time_used":1195,"timings":{"blocked":518,"dns":3,"connect":23,"send":0,"wait":23,"receive":136,"ssl":489},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
