{"report_id":"c182cf8b-a608-475b-bed0-ed1e2b25df24","version":6,"status":"done","tags":["amazon","phishing"],"date":"2026-05-09T04:02:37Z","url":{"schema":"http","addr":"amazon-clone-ivory-beta.vercel.app/","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"title":"Amazon","dom":{"size":8214,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"eaf9d189429c79f87c0a63f755240b98","sha1":"a2cd5e80ec013cf108413d5727dd857dfe3ff65c","sha256":"f8a56d9fd70562b432c2474dbab574363168724bb45668c2d249a705f42c48f5","sha512":"9ec55f83c57ff20723c92311c4e275be1f391fb975b4189cedf5558c948409b4bd6c0c02eef650565d9e3df983af9cf6dc79a2edd24dfd60ae99145ae489f741","ssdeep":"96:nhljJdmPJDakAwShebDwhWOWelP1PKYZhmnvSAL/dszWF2gVpTApv/K4Zz5fJAK+:hPdq4kAuLcgVpTAlKQXAK+","tlshash":"7602773064f2643b01c7d285ba35ab1f6e94da0bea4b571536bc1be19fe3d82dd23019","dom_hash":"domhash8e2b4ae0e582962755779e6735625042","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"amazon-clone-ivory-beta.vercel.app/","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-13T04:02:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"amazon-clone-ivory-beta.vercel.app","ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-16T03:25:33.75514Z","last_seen":"2026-04-25T02:15:28.799239Z","alert_count":92,"request_count":23,"received_data":4136547,"sent_data":10935,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-03T22:34:13.116124Z","alert_count":0,"request_count":2,"received_data":261407,"sent_data":1052,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/top.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /top.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238981\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"top.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"f06885683da5d007b3866f67492a0bfa\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rpwt4-1778299330644-b96b0cbf7f63\r\ncontent-length: 1412295\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1412295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3000 x 1200, 8-bit/color RGB, non-interlaced","md5":"e4032679fa1dc5efddd676f7628f60c4","sha1":"21a7e37de3e9ee4eba49cdb71fb7f8d7bef6477f","sha256":"9a626f8b4b3b8db972a8e0d5bbefc4abfe77d71b432567201f16a12dc05dc4e2","sha512":"f2f9f47f2b00f0190084366bf2a7d2b59396e186b7a81ab60cbf687c5301f9ed9bce27533899318c0ee921467d2ccf05319aee378c77002f5c66085c55a9fc4d","ssdeep":"24576:oVctdYwkytDn3MEdwPCRP5gOV9OVZ/aR/XA:oVctd7n3FwS5jQVZCR/Q","tlshash":"21253399d8aa3534e45696320905ecf1f8d4a63f5e3c1a320bf14fe95cc85e266f4b2c","first_seen":"2026-02-16T03:25:38.125175Z","last_seen":"2026-05-09T04:02:42.074388Z","times_seen":8,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box2.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box2.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box2.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"e53454aae8d97a90100b9666f800dde2\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l8dl5-1778299330647-33aa6acdb317\r\ncontent-length: 265470\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":265470,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 379 x 304, 8-bit/color RGB, non-interlaced","md5":"e53454aae8d97a90100b9666f800dde2","sha1":"f79c8503627eb2474f51ea6d55652e4fafd88a63","sha256":"2aa4958d081ae983f5fdd9d87bc9889e74cf19c0313c7351142f1c92a69fe85b","sha512":"398662549a863fac8a07974f41305f5cdbcb2e87072caf7e61eeacf1a470cb32ac9264607b7c5329e0240f229712889e930172167818996ad961e6f61aed07e0","ssdeep":"6144:Vj/J7j7Zob09ru5LqTsdXhHKe/CDpdI+JxpWyr4gRkFX:h/J7vWIg5LqTcF/6pdtJxphrvRkX","tlshash":"0844231e17a1e1b35af7fdc25e6447b08186fa91c418e07bbc6f99f9251bd85ce81302","first_seen":"2025-10-29T01:13:52.975174Z","last_seen":"2026-05-09T04:02:42.075002Z","times_seen":9,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box5(2).png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box5(2).png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238983\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box5(2).png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"c8ac25e793526785ffc91d6660cfe7a3\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dsr2h-1778299330652-db355c2f9e8e\r\ncontent-length: 17775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 61 x 145, 8-bit/color RGB, non-interlaced","md5":"c8ac25e793526785ffc91d6660cfe7a3","sha1":"fc6ff813906946368763b59975a70704b4003292","sha256":"2e2df6c127c6e1a020b7f6f59645b7697bc71ce64bc657d64505c5bf4e732815","sha512":"8af4561e3797eb84c63c1ac544cd8175e1cbfcc2bae961f22591d01007ce9d310990055402f7ac3487f03d7c635bf1422bd6d2e2427d55b9aa1f5b0c7ca2fc27","ssdeep":"384:qPdv7jmm46Nv5JOlupCpNm7X+UNWv3CEdfwKeCIRI4l/UbMqP+h/GEK30:q1v7yl6B5FU7UI3C+Y9TW40PIer0","tlshash":"3c82d0ae472183d01c380ad4d973262a62b9b17f7e32375649a2f11f0c9f852e4f6793","first_seen":"2026-02-16T03:25:38.127554Z","last_seen":"2026-05-09T04:02:42.075535Z","times_seen":8,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box6(1).png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box6(1).png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238983\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box6(1).png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"2bff1fd700397f763416f6c332c3f00e\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rpwt4-1778299330656-28f4482fe889\r\ncontent-length: 40755\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 116, 8-bit/color RGB, non-interlaced","md5":"2bff1fd700397f763416f6c332c3f00e","sha1":"0d0c44a5c0844008cb1d1f5d91659fa85deb3174","sha256":"380760a1bffba668f97dff5f6b77735edfde59c660629c52901d2075f4d588a5","sha512":"a19c07a1fdf960e9ac660da35fb78736788b3a5c690650b6d39c7ef79c05dc4a7908a78dac56a65de44912a601b4dca1a5ff7145eb6e3a58c64e541de538427b","ssdeep":"768:4ioOoHxxIXrNuQt4yUYut2TZ1X+OJZGX2RiQ0VMwTwV/tkBM7u5Qie2HQfzOEYQ:roHxxI7HPJuS1X+JjQ0Y+M7ji3ySEYQ","tlshash":"4703e1c1e396f63d56e1bf6715a88e59e4c844ac820610d203c6af7f9fc316f669143e","first_seen":"2026-02-16T03:25:38.143459Z","last_seen":"2026-05-09T04:02:42.076959Z","times_seen":8,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/boxes2.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /boxes2.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238983\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boxes2.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"fd6ac28b65310d26e9d33682a75a7324\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dsr2h-1778299330678-eff2cd8e2888\r\ncontent-length: 80174\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"fd6ac28b65310d26e9d33682a75a7324","sha1":"5967c99ed8e5d2b8994af544d783c16fc049d8a5","sha256":"127a294c7ee47c73eca9f0aa1744e65a0a0c886db54d94c3dccf8857ade75c28","sha512":"e2f5a1e53aeadf5fdf41b59220af97825a39eba62d2e95b7f4a7646a75fcdbf0afb9707c6f8f2a56ce0d235c747a2c967bf002a912c0a531ea3ae0263a5a7a2a","ssdeep":"1536:0+LIHJgzdHKFSCm/tv52Yc9AzFCH7NZ+MVD4LZcJwCqyhZI:1L8JgpHAS3tv5m9AzwH7XVk6C","tlshash":"fb73120945015c6bdadaf4f4096b3e664a8b37691c66387dee906903c0261d2fef3d16","first_seen":"2026-02-16T03:25:38.11937Z","last_seen":"2026-05-09T04:02:42.077832Z","times_seen":8,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box5(1).png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box5(1).png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238983\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box5(1).png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"6a391ec5789a6b024b391a4a98ccb4be\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jvhfl-1778299330652-b9d8aa2721f5\r\ncontent-length: 16581\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16581,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 145, 8-bit/color RGB, non-interlaced","md5":"6a391ec5789a6b024b391a4a98ccb4be","sha1":"3e04ceb936d27f3e76d251ce54ad6b59b0367281","sha256":"841e2eec4f8af463a7eb0e841f2a95170c9063bc64a65955397b0580a7511ab1","sha512":"3a2577e3cd0f08695d86f8f821eccf7438afc62b96b43cb9056a99a4813d4d4a1c0fa3717a8d9f9e7ac3047194e3ca120aba2f885409e9257ba1c40f4bcd15f3","ssdeep":"384:BIt05A1sdH8UD4+w7hy7KZSk0lhyrHdMJZKnb:BIudcs4h7hKKok0zCHdMinb","tlshash":"1c72e1c3d6aa19377d0b376c154d50c9d786b60a81bd577261393a270eb1e8cd00727f","first_seen":"2026-02-16T03:25:38.131577Z","last_seen":"2026-05-09T04:02:42.078977Z","times_seen":8,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box6(4).png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box6(4).png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box6(4).png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"3ba7ad22aa50be89498000d86126902c\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2qfc7-1778299330663-227302752711\r\ncontent-length: 57812\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 116, 8-bit/color RGB, non-interlaced","md5":"3ba7ad22aa50be89498000d86126902c","sha1":"b682c047dff0d3425e2305228e1524f763863c33","sha256":"7d4b4d6ed0b293924c7da41fa7c9f0a36bc4c8e7e0e6da236c5a96ed16eb259c","sha512":"ce21cba92fa730731d7d63a956beb9446c766a440c6810c55f3468924dbeb8e8a14c46c80c0c9d286332604a77b6b7a84b87abb933bddb6f367dcf84b6eb28a3","ssdeep":"1536:jb20GabqMd/9fw1fHZcoMbyqMsycnAI7giqyaaDo+:jbNJbq8ZwXcoMbssyoXgxybN","tlshash":"9d43f1ca657a352547bf4d13b89649920cdf2250efde62d2b303a197e57e333e120786","first_seen":"2026-02-16T03:25:38.118193Z","last_seen":"2026-05-09T04:02:42.079623Z","times_seen":8,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/boxes4.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /boxes4.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238983\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boxes4.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"5026b1b187587fadf33a35a4a63b552d\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l8dl5-1778299330751-7583cb7ecf0a\r\ncontent-length: 112356\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112356,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"5026b1b187587fadf33a35a4a63b552d","sha1":"b87b29ddc8f3afcae3112fe2e6e2af0fb0893df8","sha256":"0fc74ce3ec3736f02e813ce64e5dcfd3686140130ee5aa7f658ee7a4ea3311b8","sha512":"73e65e67500e232ed5149c5f687d8506bf5cf4afd9477cd323721666444c2869bf543f724d538fd4d6c45b54feadaf626b61925f8b4ba8e96ce93bf953aeafb4","ssdeep":"1536:MoBeYN2xtMOayVmjo7Dqw+NMSClc95OkLi7QurDoEvXAqggHsfvRNcP6FcMASF+:Mc3eMXjo9SClcTO/7RVsgHcRyStHQ","tlshash":"feb312209393175a44531ffd2dcdcab99b920328da4cf1547534f6862e90d2e9d2eacf","first_seen":"2026-02-16T03:25:38.135389Z","last_seen":"2026-05-09T04:02:42.080535Z","times_seen":8,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":61,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/style.css","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: W/\"408ac69c8f37891fb2142d433f040b22\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rpwt4-1778299330535-56195429d480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5522,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"408ac69c8f37891fb2142d433f040b22","sha1":"4d541f8cbf24b24da4818592c158a25968b65c70","sha256":"58a853754e34023f3492592b7602a0e950d966910574094f4fe7b11847132f20","sha512":"8c0021dead1fc128859d61184f32b3ce28422d74933f7f53ea970b76611ffcf84b330b518e76ec6741fa2cac211342a2276f7e7c9a382648939a05d49f0d019f","ssdeep":"96:48lO17WfoWE4IeFkpCTjlkRnge3luSAm+FpK38lD3B6Wxyh/LwzWYd+nR:48lOwQn4Ie+CTZkldlRYbK38lD3cmyNd","tlshash":"5db1ded7477329063d1698046f6a6b42626de007894fd36d3fea728ccfc91e6b5a234c","first_seen":"2026-02-16T03:25:38.121657Z","last_seen":"2026-05-09T04:02:42.081163Z","times_seen":8,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box1.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box1.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box1.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"a63b1655149e3f639e00fbc94c1b04a0\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::vkvbj-1778299330647-e87a4779964c\r\ncontent-length: 166031\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":166031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 379 x 304, 8-bit/color RGB, non-interlaced","md5":"a63b1655149e3f639e00fbc94c1b04a0","sha1":"9a2fc93d649598bed31e25f9c16f27f5db9fbb2f","sha256":"afb27301ec82f485d03ed3027bd75c924908a454cf7931b3b9f1d1591d253fa7","sha512":"aaef63ced36247d42f7bec8660c342447e5c7e57c50f0a2c892fa659ee81ff2d7dcf3eaf3820baae36e03ba91574eba19fc7def1dc5d32ed54b66b67648d44ed","ssdeep":"3072:KucTisbTmXtoGS5r0XmlWF7vTaZdvKwXWnNOnmjozdCTVVgXObQIU/3Ad4wEr:KucTiDoGo09F77a7KLOmjozd6VVgXKQp","tlshash":"d2f31201ff96cf8da2069c61248d84f82ad93f16c3f75aaf6a9d6841b51f8ac7704b44","first_seen":"2026-02-16T03:25:38.126405Z","last_seen":"2026-05-09T04:02:42.082293Z","times_seen":8,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box3.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box3.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238983\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box3.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"50c1c76f4d0502fb0f411a18c2133cd9\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2blv7-1778299330653-1a45f5ef7905\r\ncontent-length: 286287\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":286287,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 379 x 304, 8-bit/color RGB, non-interlaced","md5":"50c1c76f4d0502fb0f411a18c2133cd9","sha1":"f85572aa4bd10f9c14a882606ab3ca4980b2cefe","sha256":"78e2978119707ef00df0d809bd2312e0e1b198e9691fcf272aeb933c8e627665","sha512":"64a24e502a2831451a5763f523de73b71cc7e644aee4bae2014398fec30df72cae804b1b95259cc8fb7d839358ea4002c333677a3cdae2112e9b5483a2e32386","ssdeep":"6144:Aazqv5pENYMd2UWmaXGFXPO8eYhpoqaGK09VyR+XDzv5nM3j84aC/:AGqvDOYFUBa2XmHqjryReDT56j8a/","tlshash":"6254238660e63a77fcda47e4de3ca4683f8d103b6456052862ff7eb6472479409903fa","first_seen":"2025-10-29T01:13:52.96699Z","last_seen":"2026-05-09T04:02:42.083254Z","times_seen":9,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box4.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box4.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box4.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"99735cb9a6bc6a5f8e781ebb48de459d\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zt8lx-1778299330651-75c205ea2c57\r\ncontent-length: 321764\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":321764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 379 x 304, 8-bit/color RGB, non-interlaced","md5":"99735cb9a6bc6a5f8e781ebb48de459d","sha1":"06c76cbf43333cd39bca0095aff3c544626da2c4","sha256":"9cb91d23e4ac6a9aac371dca581597c1b79502fb2ae38f9bb059d0c737b4dd4c","sha512":"66c20617f012384faebb592101dc2def5acc0b6a44fdeec988b00610e21bbc58f0e2f38689d825b307830160674240c6bbf42cebade36c93e84be4fc19e856e9","ssdeep":"6144:jqd2VqxJzxNBrRAjiqX1YxFAVrF69CWBi7nINJ6GKsBEc6kGjle7RX:jPqbfBrsYagCWLvoslTSleN","tlshash":"dd6423bd7fa6128bc0666fbe6af195dee5653c7462d06fa08640c1f0581b180b1bb0db","first_seen":"2026-02-16T03:25:38.136372Z","last_seen":"2026-05-09T04:02:42.083803Z","times_seen":8,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box5(3).png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box5(3).png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box5(3).png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"4a9bcb6cb2712c69b0ed4d424a3d9ff9\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2lcnn-1778299330653-54cbb31d2a39\r\ncontent-length: 18860\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 59 x 145, 8-bit/color RGB, non-interlaced","md5":"4a9bcb6cb2712c69b0ed4d424a3d9ff9","sha1":"c98f004069c14c202997e87fab709f2ef5f916d1","sha256":"eef5395e85bf6db2e8d1ff100ae6223bd658ee942a657e414fc31cc1e09006bd","sha512":"bdf9d93ba26b74954a6ef8fb454f334577059ef822eb16501fe10111a6990cc1624568a1e89125f2f0acf676a3d2e1243583909bc92a4b1d4cae99f036b2a985","ssdeep":"384:8RiCEpQwvPE3MgiRmsY0BK4qjA3uNZSBn4quR8/S2SnouZQnC9M:uuvPE32qAU499k8/S2SoxniM","tlshash":"0282e109c35ffd9719bb883491d4437cc5a326dacb03bd53985194c4a8df608dba634c","first_seen":"2026-02-16T03:25:38.137252Z","last_seen":"2026-05-09T04:02:42.084331Z","times_seen":8,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box5(4).png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box5(4).png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box5(4).png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"f23fd4e736afbac9fa74242293edd294\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l8dl5-1778299330654-e7c91a524609\r\ncontent-length: 20490\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":20490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 145, 8-bit/color RGB, non-interlaced","md5":"f23fd4e736afbac9fa74242293edd294","sha1":"6f21a0adb4fca64bb03925302c884951a777beec","sha256":"9ce86b4fa81d47f38c15d4b6f28f3571dc01d0c286a6f4debd557c80cfb3d44d","sha512":"f0f62d35360e723d35955d7423a3bb1efac9b2245886d42bbde20221299653339ad0a7d1c59e8903d23094f353750b61dd7bfea10adda798820fe755eeeb4a4f","ssdeep":"384:obY9bM/4oL4rn2UxQk5SCsGYO0xH4DpAcI+iZOEHcdioCOSmVuAet0ms:obuo4oM2UKk8CCSDmdIX35et0ms","tlshash":"3492c0ce2624f7ef5e1e958b1a17aaa4cdc40873b3249fcd51a1e9308fc647a419789c","first_seen":"2026-02-16T03:25:38.138133Z","last_seen":"2026-05-09T04:02:42.085536Z","times_seen":8,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box6(3).png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box6(3).png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238983\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box6(3).png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"7b6e1c16758755bc9ce4c12edac99ca7\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l8dl5-1778299330663-2094f31005c1\r\ncontent-length: 60868\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 116, 8-bit/color RGB, non-interlaced","md5":"7b6e1c16758755bc9ce4c12edac99ca7","sha1":"66d56fa11f565621fec6dfccd21a1807073966c1","sha256":"a91367c538bb2dbda477c05b64bb7caa25f70288c068106d7a2935353c80a5b0","sha512":"8c3720636c311b5b3343959a83b4b73f0dc1ed37f0084eecff9d75f2fc12fea9c731bb622e582f5b0cb18bc26da76ee0e09eb4a3df70a3452f73e1c1ffbda8f3","ssdeep":"1536:jEhyq3y131prJIboS2YOQY0nwAAQg/7sd:jEBy13ib2YFwn/7o","tlshash":"2a5302426f4fe6e1e0f1f7a451aa0204227749c1aa17887dff75ad234fa75c8960ce1b","first_seen":"2026-02-16T03:25:38.1298Z","last_seen":"2026-05-09T04:02:42.0866Z","times_seen":8,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/boxes1.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /boxes1.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boxes1.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"0fb1b2992e657a78c5c364c7166ac4e9\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l8dl5-1778299330678-c975dcdf6038\r\ncontent-length: 100063\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100063,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGB, non-interlaced","md5":"0fb1b2992e657a78c5c364c7166ac4e9","sha1":"c6d42cc07f5b546c186a30adbdc35480d2a3b2bd","sha256":"4b7a885fcd0cceebe7bdb80331b632316c6ad052a059320353778c2990dfc187","sha512":"93afc5abb6d676a9a90d914a383bf5371b68c2106cac859b82ba63049c4692daaff1014242c7cf71ed8d1b402549822434777e2221f96dd575acc33440fb56d3","ssdeep":"1536:V9ZiQh61hyhEYjgon2cf97HtQJ0qnXFVonh0+zycp0JeQcSLiThHucVuoLJ:jZiF1hySQmq7NQXVKBy7W7uA","tlshash":"2aa30293965ea68efc7f23691f37438545cb42cfc53259ad05a28cc1126c1deb08ddae","first_seen":"2026-02-16T03:25:38.133603Z","last_seen":"2026-05-09T04:02:42.087089Z","times_seen":8,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/logo.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /logo.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"d901b631c3da71eb9ef16d3d57e6778a\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rpwt4-1778299330631-d353c909e39d\r\ncontent-length: 607880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":607880,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 8-bit/color RGB, non-interlaced","md5":"d901b631c3da71eb9ef16d3d57e6778a","sha1":"8136d3b94d8b896680ee1cbc8205771b4e6c2662","sha256":"e2ee4a114069cd7e93cb1b672e7812dc607271698d2383ae4a425e2b6616f321","sha512":"8b997d946fda1566ef5afd66f6953d0d3069285913b333875db20a75de17ed1a47d96ca6c1f7ee689a0f9d796e70d8370ae7370dc62381f1a6975bb3df4b0f2e","ssdeep":"12288:xChgSjew0KLyZzkJgydmeFW5LD3KLYbb2fkgDhYxQetQjBP:whjH07ZIHFeIYbysNQeQj9","tlshash":"d6d4d063c3a1087bb829126130864643406a2dbb713ceea064d7399f67bbff83d74e55","first_seen":"2026-02-16T03:25:38.123957Z","last_seen":"2026-05-09T04:02:42.08798Z","times_seen":8,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box6(2).png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box6(2).png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238983\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box6(2).png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"8f935023de5b4543dd3f146740164b1c\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dsr2h-1778299330663-54f1d937e1c8\r\ncontent-length: 36664\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 186 x 116, 8-bit/color RGB, non-interlaced","md5":"8f935023de5b4543dd3f146740164b1c","sha1":"3bd737207f18b044c328658f68d8fe5276723ac8","sha256":"ba71286b116a46eda43f1c9538ff2c9173168e290e64486585c0a311125658c0","sha512":"fc28d824cf14f80224f6674f2ddb8cb4745f201ec8d680c6551cea573d8d24de3ab70b5d1ca23a9a19ee6f4e3034e347a95b608d4737ff8ca1b29f90512c50bf","ssdeep":"768:y2tBi7C79zvHquWr/4sLjqY+mzX3NNWunm9Q28StEkOHd:y2zFKhrgsLjbjNjU8SqkO9","tlshash":"aef2f25b1e2e17bfbaec6b546260538a107068714dbe07993b42b5042b5dbeefc0c778","first_seen":"2026-02-16T03:25:38.12872Z","last_seen":"2026-05-09T04:02:42.08874Z","times_seen":8,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/box7.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box7.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238983\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box7.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"3b7c1e2f7d6acc84257669386a96890b\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f9dql-1778299330664-5e7a23215188\r\ncontent-length: 309775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":309775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 379 x 304, 8-bit/color RGB, non-interlaced","md5":"3b7c1e2f7d6acc84257669386a96890b","sha1":"7e2ff1a64fc955f90902026fc5005246b56deac9","sha256":"d3c3011926caa0f269eec0bd2cdbde48a13b14b13027b99a7efde02d728b6a99","sha512":"60c7f1d09a91cde629138a542766cff79b2cf3761341dcd52ac39f30656700632acc6fb39de3366e3c1dfc07494798e734ba14d5e42c81ed91118f9a83aaf84c","ssdeep":"6144:jzVOW4gmJkhYb+s3UyvKfWVxPbu6kmYdgvZBRYLWZN0:jzHjm++rUyvFVxPbendgvqiM","tlshash":"8764236ef270da722212e499ae9041c4c47971bf83bb5618777ba1d334ae40f2f11b97","first_seen":"2026-02-16T03:25:38.132687Z","last_seen":"2026-05-09T04:02:42.089413Z","times_seen":8,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/boxes3.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /boxes3.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boxes3.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"54c88303c46bfc0f735d8b9f1c369be2\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l8dl5-1778299330679-6432b7716a56\r\ncontent-length: 75583\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":75583,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 219 x 200, 8-bit/color RGB, non-interlaced","md5":"54c88303c46bfc0f735d8b9f1c369be2","sha1":"050f80447fe06a2633dbfa5465841b77d0669f2c","sha256":"0ed2ace3c4f6128488b5a1e9dcbf311723511e38240fdab80ce27758a89185bc","sha512":"9c2596c389743f29a8c21bca16c266bb7ca4db09ba22d96ed8b581ba3818725b046b7c2fac36ba1dd382f532ad9c97f9ce011f0f4995ad91f3aed1e0994c996a","ssdeep":"1536:iRx2ffhYF0m+upuk3kuKRAvGU0EkSNUs2/6MDVHSdelJ6gSPSax+lxqMJvIq:i/cpAxpukUVBU0EkiUl/6UyclvOSaIxN","tlshash":"3f7302ddddb3053ded7e0fd516cfa240fbba8a859c110820bd19998d743a8d8aa23207","first_seen":"2026-02-16T03:25:38.120535Z","last_seen":"2026-05-09T04:02:42.089968Z","times_seen":8,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/boxes5.png","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /boxes5.png HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1238982\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boxes5.png\"\r\ncontent-type: image/png\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: \"ba72dd3e4ebb00213f050cc8aadd1b61\"\r\nlast-modified: Fri, 24 Apr 2026 19:52:27 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l8dl5-1778299330753-6e91022c4b38\r\ncontent-length: 102725\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 231 x 200, 8-bit/color RGB, non-interlaced","md5":"ba72dd3e4ebb00213f050cc8aadd1b61","sha1":"dcc08f1c117ba11d806a58bd9052b64a80039265","sha256":"37d4a07a7b020bce6c1900f7e2c4d9ff43c387d4fa84d1375da1d4e680e4eb42","sha512":"af6564e2720f8066478af1ba5213a24bc7f98a7375101087a24a21b5ef4380a22e85cd33f6d99a001f44a5c7a691798838c7cff59643517822880f70797dab89","ssdeep":"1536:77k9iwJm97HFHziMUOi+RMP3s0xOSLYDimh/j5YgJfZv47hH4VjhGjJLP/dF0pnI:7okrWMs3sgLYFR5Zv4eSjZdFcWPbD","tlshash":"b5a31269a4ab2fa7645faa05a794364d336634ee53b624c1e410eed31d6fb410c0ef8c","first_seen":"2026-02-16T03:25:38.134519Z","last_seen":"2026-05-09T04:02:42.090517Z","times_seen":8,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":63,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amazon-clone-ivory-beta.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156400\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"660cc074-262f0\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 181035\r\nexpires: Thu, 29 Apr 2027 04:02:10 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlltuiODbZl3JcazKxvAoIMkcvGAFdx76S2hD4iJsWUzRzl4FPdrGvTsJPN61ymw%2FDuzKKW3RC3v6WWQwnLTcRWxCk2NmREKiyojAuUGro45ltQiEFtM1qbMoZRlgUNMlZPcAp31\"}]}\r\ncf-ray: 9f8dcea1289756bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156400,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280","md5":"1ec0ba058c021acf7feaa18081445d63","sha1":"73e7eabf7a8ae9be149a85d196c9f3f26622925b","sha256":"ae17c16afbea216707b2203ea1cf9bdb45b9bfe47d0f4ae3258ddbc6294dd02f","sha512":"16a1b8a067ad4a33dcf4483c8370ca42e32f1385e3c4e717f8d0ce9995ca1f8397b15a63c0cee044c4b0fca96c4b648c850f483eeb1188a20f8b6cbf11d2b208","ssdeep":"3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3","tlshash":"b6e3139a9a1f63d89c3cd982f61ef3fb715aadab1f521220193149f9d04f0af5035a4c","first_seen":"2024-04-05T18:44:58Z","last_seen":"2026-07-24T02:47:00.773676Z","times_seen":13509,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":19,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-09T04:02:10.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1242171\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\netag: W/\"3ec063ff265c77998ef7bd7adb81b356\"\r\nlast-modified: Fri, 24 Apr 2026 18:59:18 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rpwt4-1778299330278-f1efb2603c90\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8441,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"3ec063ff265c77998ef7bd7adb81b356","sha1":"9b7311177681da6f40c7dfaead298fbc2d11de52","sha256":"fc67b0e62c36614c987d835153715c5ec958ba6fa56dc6bd57e04c06531f1b4e","sha512":"09dc13a7df0c16b8f827a4accbf7c7fa427bbb67cc380c2495e51d79fe00b8143aad3b89da18d9bf2b02b41d282e766aee16a948f613dfb39d4e670f76d933b1","ssdeep":"96:yi0MBmJeHNED65l9TtRkXspHRwkkvPBJhvDaL9mYYd5Q3WhmPVDMhysn/47Pk8lS:y5etf5wY+mPVDMhN4LrFKT","tlshash":"5702413064c1783701b3c286aa319b5efda5425bdb4aaa2536fd27e39ff3e01d823155","first_seen":"2026-02-16T03:25:38.139692Z","last_seen":"2026-05-09T04:02:42.092156Z","times_seen":8,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":38,"dns":8,"connect":1,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amazon-clone-ivory-beta.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18938\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"660cc074-49fa\"\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 265040\r\nexpires: Thu, 29 Apr 2027 04:02:10 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nv0VyYWnghubwMowt17YDmruy1epzxdoJ%2FfSCftOEZzXR5L7pBe6%2FtFalITgDvI%2BkaIzXMDrp%2BVXABF54VkP2ZZt2Yy7BAzCE%2F4T%2BWpMLYSjrm8qfkXw13y1nPR9UknZdgQ%2F6dAX\"}]}\r\ncf-ray: 9f8dce9ff83056bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103009,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52282)","md5":"c325be79a5ecca85d68eb9e5b65a547a","sha1":"f2a96686228994a46961657df4c9405afec8e9c2","sha256":"5ceaaba22d75b58e04150311f596306562a3e595e27ed4b1dfa451b82dda9e50","sha512":"4a71f958af9b67180f1ece38b96217f8b2c9009f7fd8f90f299e508808fa4daf3ac3e7ec6f64e47267d1c955f7a419cc15c57ba103c9925f507af4825abdd6e8","ssdeep":"1536:t1MCMPMCMjMCM4MCMwMCM3sVM3709gbQZMfjSFOlyPG9dXgRM0J:W709gUGGFwyPG9dwRM0J","tlshash":"16a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-04-05T18:44:57Z","last_seen":"2026-07-24T04:32:06.771998Z","times_seen":12210,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":23,"dns":1,"connect":1,"send":0,"wait":7,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-ivory-beta.vercel.app/favicon.ico","fqdn":"amazon-clone-ivory-beta.vercel.app","domain":"amazon-clone-ivory-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-ivory-beta.vercel.app/","date":"2026-05-09T04:02:10.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amazon-clone-ivory-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-ivory-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 09 May 2026 04:02:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::rpwt4-1778299330609-0231ba7e9a4c\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"7b83005025211865aa956e982f7e7d6e","sha1":"3c4673616461dc0edb9c1bf87d6eab606faf4739","sha256":"5ad286b11610c52b1efdeeae429f0ca765db83e9cf3ccc89c41f58b96ed50362","sha512":"c07bf7003b32b1b4abe48fd24697b1218a754cb6f5463706e24102db70bcb6a0344de3a7f039b77ac1cd2711a8a7818820ede44ce8886244d422b4d1f058078c","ssdeep":"","tlshash":"c8a0121f0cc04948338a0810a2860339405449117a95d9000089531021041cd6340088","first_seen":"2026-05-09T04:02:42.093168Z","last_seen":"2026-05-09T04:02:42.093168Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"amazon-clone-ivory-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}}]}