{"report_id":"c380adc3-0889-4dda-8183-250b83703db3","version":6,"status":"done","tags":["netflix","phishing"],"date":"2025-09-23T11:52:54Z","url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"title":"Netflix India - Clone"},"submit":{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T11:52:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":5,"received_data":177415,"sent_data":2849,"comment":"","tags":null,"fingerprints":null},{"fqdn":"netflix-clone-nu-tan-99.vercel.app","ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-09-06T09:38:07.49796Z","last_seen":"2025-09-23T05:14:29.499247Z","alert_count":90,"request_count":18,"received_data":1244284,"sent_data":8882,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":1,"received_data":17441,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://netflix-clone-nu-tan-99.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 14:38:02 GMT\r\nexpires: Sat, 19 Sep 2026 14:38:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:20 GMT\r\ncontent-type: font/woff2\r\nage: 335666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26428, version 1.0","md5":"0f1d3218bace7a3a84c05b5d8a6f71ad","sha1":"977905ba4432d4e0c24e0da3f72aceb9c0525987","sha256":"884933fb5789b478d2da68a4cb0bd5cc138d995f1fea9a957ba29cb3c00f1bf7","sha512":"0a6d79809ce57e15b722a807ac8586a9a52bb4db3abfc8dbb40be7dfd55ad4195df917042425f8af97cc0c2fe09379799298bba84a1ffad36a4e45e2dea58dc8","ssdeep":"768:j7jEMtcubweLke66yjm5QxI2aSCuH8cEow0U0gME:gMtcawhe6HaSCZcvFU02","tlshash":"ccc2f1588e6abba67f92f0211479a595f0e3b8400750f5e4e1e02dee44ca663fab4454","first_seen":"2025-01-09T17:22:38.875446Z","last_seen":"2026-08-18T11:00:07.028141Z","times_seen":25718,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":121,"dns":2,"connect":20,"send":0,"wait":44,"receive":6,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/css/normalize.css","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /css/normalize.css HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7889\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"normalize.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"db1ee1ecf28eb31fd00bdde5db5dd243\"\r\nlast-modified: Tue, 23 Sep 2025 09:40:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xxg2z-1758628348231-d7281c66dc57\r\ncontent-length: 1884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6814,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"db1ee1ecf28eb31fd00bdde5db5dd243","sha1":"c1de81ffdc5b995b5b7e514bf8f5922c480029f6","sha256":"d592f1c585062f14b5c94145f916377badda3351026d67a5c96f95f8a6885472","sha512":"f4f957862bb19e8e596b71d45df7f13505d6679dd7bcf1b3be27ac61793f0fd009f0da619fd15b1b8887d9cbd9942fee4a7995cb5f8158ecfe14ce4bb41e256e","ssdeep":"96:FI1E/n8GaNjysFjmxc43RtkzoS5HllfSqyBG2ZxenqfmH+fotyT0LJ:F//n88c4htkzoWTS9BByqfA+fo8TIJ","tlshash":"64e1a0192fe02ae351614c7c365f26c5f305422ba2a86c9978e613b88f45b79d6b83cd","first_seen":"2023-04-07T08:34:41Z","last_seen":"2026-08-16T06:40:42.768692Z","times_seen":343,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/hero-background.jpg","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/hero-background.jpg HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7889\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hero-background.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"3c4635a4daa08776be9c606cfc6e746d\"\r\nlast-modified: Tue, 23 Sep 2025 09:40:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5b9gd-1758628348232-8545b272bc4e\r\ncontent-length: 321022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":321022,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"3c4635a4daa08776be9c606cfc6e746d","sha1":"7f211d9f444d6441b34b2fa62d0dc22462b66b87","sha256":"cc6f6846650a8b57275655f9f9611f894f52410166ae337ae055eb6fdf3532e1","sha512":"90680fe719bd1630e92cae8d3d80c59a6e7089538f194390d03167a37958b52eb65e2826d931647d53da9ee47959ec8ac71febb4af2dd525319dbc852ec544f5","ssdeep":"6144:qESbyh03ec6e2XjmpNZZvrVTzys9rm52PvC2P4dLdXrfb6B+eAhI96nexy:qb33TLwj2RvrVTzBI0vV2pDbu+1GHxy","tlshash":"066422e4f2f10764f2bc3119b15ae3dd7939741b18810d32c12894be770aad2a6bbd67","first_seen":"2024-01-25T14:53:15Z","last_seen":"2026-03-03T20:35:41.897594Z","times_seen":22,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/Translation.svg","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/Translation.svg HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7889\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Translation.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"afb3f259ace40ce723528e2197c717cb\"\r\nlast-modified: Tue, 23 Sep 2025 09:40:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::p6ksg-1758628348237-686075a8babe\r\ncontent-length: 1140\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2292,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"afb3f259ace40ce723528e2197c717cb","sha1":"1249921abdf63f53c15f1971300da2697597fa0a","sha256":"d53c6443d20446bec281186d39856a28b17f7285ff99d67f149fa12d1fe3ebe1","sha512":"54d74013197c779e3ea0d5c04480c56e49029cb1ad01731b10fddbdcef842c0b24fa70df63ae4d5c685614173eaf9b34a41933f89e7f690bf929e8356747b725","ssdeep":"","tlshash":"ed417306f2528cdaf32c86202cf56a17a31e3493c1840c54ba8d58a6df406d2736abeb","first_seen":"2025-05-16T13:40:09.305668Z","last_seen":"2025-09-23T11:52:56.835456Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/boxshot.png","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/boxshot.png HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 39004\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"boxshot.png\"\r\ncontent-type: image/png\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"587e040f20259792094901ca9739669e\"\r\nlast-modified: Tue, 23 Sep 2025 01:02:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::95rqt-1758628348241-f86e744ab398\r\ncontent-length: 20506\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 210, 8-bit colormap, non-interlaced","md5":"587e040f20259792094901ca9739669e","sha1":"d48b9de536ecd248ab1d923bf837c6958a9e0cec","sha256":"e1fa26cc34fda574edc01d09e374d6f10735a3fa621bdde87c104ee15453d4b6","sha512":"5e6b251454cae8e34b4dd8875ef9e1f0630295f671ba46ea8f5723d8ba29948a7efabd3074f09df6b5340e4b51c7a91f601c0b1b1b38ce460821e25e964e92c2","ssdeep":"384:4FdLgjnSkU4g5tOEkRzi8QrHAqjfhDMzBvkl3e+v+EnCectZXhN37PO:4FNyg6EkBi8Q0sfh8BvkI+vBnCeYTDO","tlshash":"b892e170cc151d0eefb8d0ad6060c878a539c1d48a59e0caefeb87ca17b55685f9c5f8","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-18T13:21:44.749312Z","times_seen":5683,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/device-pile-in.png","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/device-pile-in.png HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7889\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"device-pile-in.png\"\r\ncontent-type: image/png\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"186a706493dd515e30f8ad682d068578\"\r\nlast-modified: Tue, 23 Sep 2025 09:40:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5dlx7-1758628348242-a2886a7fcb28\r\ncontent-length: 151687\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":151687,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced","md5":"186a706493dd515e30f8ad682d068578","sha1":"2d09cad7878e23f97cbac2784a58056c61e80f0d","sha256":"4a3bfdf68de04166878c6bfa4c5b0f57a100cad45ab80939433e8f7aeef4b7a4","sha512":"58a42545466cd303f7555a48975fe4b9ec06fd3bcb90619518df97b7d310cf284f68605650b71983213beb4ac2362d387d82d40987484a297fba9f041f8a5d6b","ssdeep":"3072:0FqkZ1XMvfRSLzMyYu0DaZTq8cD5lsozQjiUBvEKOH0JO:oXyRSLiu9ZTq8cl58jdvE/H0k","tlshash":"53e31329424f5b4976b1408cc1f87634cd256eaf9c6b8c1b41f6bee53b8ed852353193","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-18T13:21:44.744881Z","times_seen":8622,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-23T11:52:27.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 9949\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"8e443cf41963b959d6644e690d7c6883\"\r\nlast-modified: Tue, 23 Sep 2025 09:06:38 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9hkc8-1758628348049-4e25644c7816\r\ncontent-length: 3513\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14686,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8e443cf41963b959d6644e690d7c6883","sha1":"dd5576f2aeb16b281393f38aa0fd67e557e5f089","sha256":"02bddf92db0b78980a9b279165d3da9369db161c0dea9cd7b243e4e527bcbc6c","sha512":"f3a3cb913dc77a583e2a9015fdc4b04ecc48dcaf36b21cdfb823d4ae0010641cd8dba40ee71b2fbd6b246e4fdd8a3e3f94ed54971fa5cf1e82f8e886e01192a2","ssdeep":"192:zYH1ZNl+Kj49mL9rgsjoxG4XESUTmtFvdT1E7M:zYH1ZNlFJJBdZTmtF1uM","tlshash":"75620e3624f42067028380923fb26f2bbfd7d617c60a566076be0a9d6fd2d43cd57299","first_seen":"2025-09-06T06:08:26.451715Z","last_seen":"2025-09-23T11:52:56.839565Z","times_seen":5,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":49,"dns":22,"connect":1,"send":0,"wait":10,"receive":12,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/children-photo.png","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/children-photo.png HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7889\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"children-photo.png\"\r\ncontent-type: image/png\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"2995e70023477ef72300f24e45aba1d5\"\r\nlast-modified: Tue, 23 Sep 2025 09:40:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xxg2z-1758628348245-07c8159820ab\r\ncontent-length: 254586\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced","md5":"2995e70023477ef72300f24e45aba1d5","sha1":"92c13cd17c41cb9580f59197a3008fd9cca432c7","sha256":"1e5a6122c8e39862aa1c92eae0e83e92458232d930620e9ca0c68e9be425aa67","sha512":"7eba01faa077439a2bc80840579c5654885a99f3878600b5c3e9b59b3f8d269fef9d7ed373a4ef8886ab71d70fe1fb47845192160b3102765f430e5b01877574","ssdeep":"3072:KEPpQE67ZSxps4pKmlRbFCS/u5hWcfIV2Gn1kXNrA+HdnhPkOWlTPZCLh7Ywax6s:5P6t4HRu5hWd3nanHTkpo7Raj","tlshash":"e7442330cf628c5afcdbf513813d638b36b886cc6a97891183a1d76ca9575ccc531a6e","first_seen":"2023-05-18T15:45:41Z","last_seen":"2026-08-17T08:23:57.880432Z","times_seen":9378,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/right-arrow.svg","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/right-arrow.svg HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1936256\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"right-arrow.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"d8130762c156f53130492ecb07440c8c\"\r\nlast-modified: Mon, 01 Sep 2025 02:01:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::tljkc-1758628348586-711a1a56bf84\r\ncontent-length: 631\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":631,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d8130762c156f53130492ecb07440c8c","sha1":"8b8f3eb217e5bb8d738e9f4f46549da66e91fb27","sha256":"8acb762e00dfe52b7d1fdf5832ec2096669b2df5f107650899365e857162616a","sha512":"22ba7ed4b2e7be05cdb87c56a084a793117c90f5bc67793b522b09002d0dcdaee73381ef2e799ede016e5b1e671e08880fc4059fd1f7c7aad7462cbfed299ca3","ssdeep":"","tlshash":"09f0789c4048886dc68d06829bedf8c8033df2af97dd28a6998875621e04f9788ba14d","first_seen":"2025-05-16T13:40:09.29447Z","last_seen":"2025-09-23T11:52:56.841709Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://netflix-clone-nu-tan-99.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 14:38:02 GMT\r\nexpires: Sat, 19 Sep 2026 14:38:02 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:20 GMT\r\ncontent-type: font/woff2\r\nage: 335666\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26428,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26428, version 1.0","md5":"0f1d3218bace7a3a84c05b5d8a6f71ad","sha1":"977905ba4432d4e0c24e0da3f72aceb9c0525987","sha256":"884933fb5789b478d2da68a4cb0bd5cc138d995f1fea9a957ba29cb3c00f1bf7","sha512":"0a6d79809ce57e15b722a807ac8586a9a52bb4db3abfc8dbb40be7dfd55ad4195df917042425f8af97cc0c2fe09379799298bba84a1ffad36a4e45e2dea58dc8","ssdeep":"768:j7jEMtcubweLke66yjm5QxI2aSCuH8cEow0U0gME:gMtcawhe6HaSCZcvFU02","tlshash":"ccc2f1588e6abba67f92f0211479a595f0e3b8400750f5e4e1e02dee44ca663fab4454","first_seen":"2025-01-09T17:22:38.875446Z","last_seen":"2026-08-18T11:00:07.028141Z","times_seen":25718,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":135,"dns":1,"connect":21,"send":0,"wait":25,"receive":5,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 23 Sep 2025 11:52:28 GMT\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"227c49935c94e2db746d5483119e3eda","sha1":"8698bd6466a7746aefaa8a78ae05feeb2e3db075","sha256":"f30a2f101b045d24748cdbb5e2082e3216ae8ecfcc2f091af638786d3eced120","sha512":"4a7f23e91bff114b72ba6fce5028fbe508f1bc345dd766a3d248746f017c7234a4dadafa6bac9398b2a755205b7539688081b92137bc13dd9384b1049a6a8468","ssdeep":"384:8wfMw1wWw6wyhw/qY4XwNwtwiwfDwOwdwBwyaw/qY4QwGwmw4wfdwkwDw3wyQw/P:8JKBLfhQE8YtCR6UfaQ7zfTYHw+fQQVl","tlshash":"c872eca1041740009b839ce223cebf35fe5f92117141d0b9abfd9b6badcbc66526936d","first_seen":"2025-09-09T02:34:37.720999Z","last_seen":"2025-11-18T23:04:34.411089Z","times_seen":2605,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":135,"dns":1,"connect":14,"send":0,"wait":34,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/video-devices-in.m4v","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/video-devices-in.m4v HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7889\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"video-devices-in.m4v\"\r\ncontent-range: bytes 0-74302/74303\r\ncontent-type: video/x-m4v\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"73e25d1dae3deac964df43111c04c973\"\r\nlast-modified: Tue, 23 Sep 2025 09:40:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d7vfw-1758628348324-8bc33f7fa594\r\ncontent-length: 74303\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":74303,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, Apple iTunes Video (.M4V) Video","md5":"73e25d1dae3deac964df43111c04c973","sha1":"6301d10955803c58b803d04f6e4830f0aee5d01d","sha256":"92259a1c73354bce2540a94397feed47d41bde07f23359decea3187799e5c19d","sha512":"9c610f8bc47b52c855a15cd3f66b05cd3c527db68141bfdeedd50e13f45be7ef7070f479461b5db12b693c424197e91f585a3bd5d5c7f9f9697725182a56cbe5","ssdeep":"1536:nkxpHovDAiPFnFQb+4QZ9AD17YXU8mUzDxUyzmIZk6+YviRj41mMs7:kxZovlFnJ/XbzDSww6Q5d","tlshash":"9b73020af343c43be7b981bd2e86fb1252b7f1613d6a634359c5b834aa035d4fd511a4","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-08-18T13:21:44.740038Z","times_seen":11518,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/download-icon.gif","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/download-icon.gif HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 23905\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"download-icon.gif\"\r\ncontent-type: image/gif\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"dd3cb78db78c3e0a13c9b77ee19deee6\"\r\nlast-modified: Tue, 23 Sep 2025 05:14:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::jnfs5-1758628348242-cc3a217480ce\r\ncontent-length: 22171\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":22171,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"dd3cb78db78c3e0a13c9b77ee19deee6","sha1":"9de1915d6543939218ff991b39ee5f9a11aad6f5","sha256":"4f99e4c2ed1c2b7de72f47102c64d601567f8efaad5944a08c86786cad4050e6","sha512":"e0f3e98794b9a45d11ecad95e5df5151f0af32be08c6c366e1e36bf9cfb9b33fcfb74edc7cb46e2c9c70f01777c7a4e1654f4085b599e8990afa4d6961f26b64","ssdeep":"384:PDE51qDMZ1Gi9rsmRUCAc/xxaH3jaMV4bJeRt7eY/0RfvezcNi588+v0qt8/ojGw:PwzjXAeUtV4EluXFskHr3KwdmE3","tlshash":"9ba27c6f9404c831b69255f0f4bbee96390b507977a66c6c5c2da0a43ba52cc3cd738e","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-18T13:21:44.741929Z","times_seen":4828,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/video-tv.m4v","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/video-tv.m4v HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1936257\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"video-tv.m4v\"\r\ncontent-range: bytes 0-267711/267712\r\ncontent-type: video/x-m4v\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"a585f6f325641f820e3272f3ec0086ed\"\r\nlast-modified: Mon, 01 Sep 2025 02:01:31 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xxg2z-1758628348324-1526103f8066\r\ncontent-length: 267712\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":267712,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, Apple iTunes Video (.M4V) Video","md5":"a585f6f325641f820e3272f3ec0086ed","sha1":"faea17ded67d6df03c0bf8d08b2a3dcf1d5b340a","sha256":"b71753769da84bf6bda2349bd9fa2f4a0af54f87923f6b3a20d5836117be68f4","sha512":"f2071d21f0fa2fe4f91ec54609dc88765d2031730818be433a3c4648a362e556de4dc461ce7da537f7b52a5a535244eea4c21ecedcb90dfc0b7e92c56d9b98c2","ssdeep":"6144:6kCH7bTyVslQH+8ngL8999RSWh0mWlNXPsfAn9CwhnnUlx9:vyTgOigoT9Rn0/Pplhnuz","tlshash":"b54412974731a328df59973871aa2e430231c329fd6ae317f9951835b78a72e8f9530c","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-08-18T13:21:44.756527Z","times_seen":11853,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/favicon.ico","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/favicon.ico HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7886\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"58f54d9ea15176671802bebeee4da4cb\"\r\nlast-modified: Tue, 23 Sep 2025 09:41:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9hkc8-1758628348461-24252697801e\r\ncontent-length: 1810\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":9854,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel","md5":"58f54d9ea15176671802bebeee4da4cb","sha1":"4ba1cb97814772435962f3ac25af0def81851735","sha256":"9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3","sha512":"32e6c1ac6220b03bafb9215e4db4cf91352573c34a82accc893b4c7d4d3194d495e241c2f814372930a988688492926fe1d9a5576d2e46378c9f6d1e927c71db","ssdeep":"48:5uZhmwr2VEbaA+8H3J7HZqH0S/DHDHp8HfH5gAaqHwMqHBVqH/6BqHAtvqHAAcqK:shm0AN6YHEOFtwVPmyqPmorAtAco","tlshash":"8a12a02710c35d6cfe016eb8d297ec3a517d40ddeefe82e79a81bd390612146a5cb8e4","first_seen":"2023-09-08T13:51:14Z","last_seen":"2026-08-16T19:46:44.222138Z","times_seen":2186,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/css/style.css","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7889\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"503808fa35772909dcebf3b885e4bee9\"\r\nlast-modified: Tue, 23 Sep 2025 09:40:58 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmhft-1758628348231-5717d28f859f\r\ncontent-length: 3895\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18421,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"503808fa35772909dcebf3b885e4bee9","sha1":"d1048473f248e0b5082b5db1adbf2e8051fcf1d5","sha256":"15f21002fadfbc40d85f117715c19b20ca95c68bc3c44a78b1371c1ea6dac7dc","sha512":"470f00659eebd322b278e47c9f5107c70f3e2496b19cb63e0f1384f1b14d4ceaf0ad4c5f4f6c1385f66d89382052e4e96b35cb1be59f46a3e502048efcb4c224","ssdeep":"192:SfmSFGu3cRosD4GhimRsr8WSiMfgZGBzDuCvKpK9ak6t0Y4ho02wLGkohg+1yDyq:N7kdbGbyAdHGno","tlshash":"bd8211191de321446c47d078a3be278ac25d9843ce5bd4987fcf66849fc91a1e1abfc8","first_seen":"2025-05-16T13:40:09.303487Z","last_seen":"2025-09-23T11:52:56.847323Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/NetflixLogo.png","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/NetflixLogo.png HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 39004\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"NetflixLogo.png\"\r\ncontent-type: image/png\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"8917405db12b76449304385f5c95ddc7\"\r\nlast-modified: Tue, 23 Sep 2025 01:02:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::v7t59-1758628348235-64a20c97ed09\r\ncontent-length: 7272\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 423 x 120, 8-bit/color RGBA, non-interlaced","md5":"8917405db12b76449304385f5c95ddc7","sha1":"14f0b3f9ff8d36b01f08219892936e332c5d4cae","sha256":"5fec6667ad64754948da4a99e22964908bf05f7d2bfb472b035251970a47dd4e","sha512":"fd7be776b281e8362f6339c78e750aa2695bbd5c58fe6f3f0420ac3c17147eaf0446914ddc3ba4958459aaf3e8a08f0742e6f9916ddaedbaad9838ef4f0009e1","ssdeep":"192:ESyD4Dph2Cs0+r03VacdoCXl5XZdhBnEWmCwDF:Dw4NhvsJ0aAoSl5bET5h","tlshash":"11e1affb9f1c98bf8305f054ed2b28064a1750f92b883152af1b66a659137ac7e92180","first_seen":"2025-05-16T13:40:09.291686Z","last_seen":"2025-09-23T11:52:56.848408Z","times_seen":7,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/down-arrow.svg","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/down-arrow.svg HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 39004\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"down-arrow.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"07ce3301f6fa10379b4d1d387af89f0f\"\r\nlast-modified: Tue, 23 Sep 2025 01:02:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmhft-1758628348236-5e86279ed2bf\r\ncontent-length: 420\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07ce3301f6fa10379b4d1d387af89f0f","sha1":"1ef021d202f1cf5204dafb90a6b99d42793b520b","sha256":"d893f69e7c33d73a60f6011e3a9fc2240face8d64cf944713dea3c59afc6b73b","sha512":"54f2ecad2e9c2ed7641b5a4910d686ee04c68221036957f3a6f4e6c9d1520b7bffd6d2c5f1faba7ea0b86410b6e7a4eec3e1755722ef225002ab879955e56de0","ssdeep":"","tlshash":"32e0abbb938415300b4983717e1ef87c782ea0cda8d8414ca003913130a06aa20f89d8","first_seen":"2025-05-16T13:40:09.292842Z","last_seen":"2025-09-23T11:52:56.849267Z","times_seen":7,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/tv.png","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/tv.png HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 39004\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tv.png\"\r\ncontent-type: image/png\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"77994a67327ba957dfd880e33a91f041\"\r\nlast-modified: Tue, 23 Sep 2025 01:02:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nsplm-1758628348239-6d27c7c52bd9\r\ncontent-length: 11418\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit colormap, non-interlaced","md5":"77994a67327ba957dfd880e33a91f041","sha1":"5ba507de8c9bc4a063beecb569e89bcf9e0a901c","sha256":"b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056","sha512":"a6de315aea77f4b862fb43d08bc0664ee1c085bf551760add9d6749bd45515349d6ae416e941bf9b3fc9156aac10a73d80bf4fcc6ff61297f7155f666652ae79","ssdeep":"192:OmrrVi2S1Vk8jYiyXte75R7e8AnFdw8ozUeepPaIYXUPPiHd74HH8rZEyEwz:JrrQ2S0/I777eBk8kULYkcIHuZBEwz","tlshash":"c432b02d2632de066bddf62cb1a785707bf092c0703641e2f5c59092ec67dae121a35b","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-18T13:21:44.754901Z","times_seen":16997,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/stranger-things.jpg","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/stranger-things.jpg HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 39004\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"stranger-things.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"a48333d43c19612ed61987fa5dbff3c5\"\r\nlast-modified: Tue, 23 Sep 2025 01:02:23 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hmhft-1758628348240-c46658505aae\r\ncontent-length: 49614\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":49614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3","md5":"a48333d43c19612ed61987fa5dbff3c5","sha1":"8a8781250b96fee7830eb63ee8dda19e5c871881","sha256":"492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875","sha512":"ff3cc72bdfb03e8d372d84001c80ecde5a8100f8675d4c427c09bbd464be7c5d430d1e10ddfb7e540262ef2b3914c22594bf4306477391dfd9819e4266de9e98","ssdeep":"1536:F5p+9SA6w1sC4S+KJj3nNfeo2JmunFRfVSF:N+9F6qBTJj3wo2JVf6","tlshash":"4323f2dbac60c267d2d35d797deb4d7c7f834a26d95e998e82c80c4c6d7c84aa3480d4","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-18T13:21:44.755714Z","times_seen":16915,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-nu-tan-99.vercel.app/assets/plus.svg","fqdn":"netflix-clone-nu-tan-99.vercel.app","domain":"netflix-clone-nu-tan-99.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /assets/plus.svg HTTP/1.1\r\nHost: netflix-clone-nu-tan-99.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-nu-tan-99.vercel.app/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7888\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"plus.svg\"\r\ncontent-type: image/svg+xml\r\ndate: Tue, 23 Sep 2025 11:52:28 GMT\r\netag: \"88e520418f343840203b8a71a2d51349\"\r\nlast-modified: Tue, 23 Sep 2025 09:41:00 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xxg2z-1758628348587-2117df5362da\r\ncontent-length: 796\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":796,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"88e520418f343840203b8a71a2d51349","sha1":"24de248434ea9c90b7e3d4e787fed27c82a8cfb7","sha256":"9c493ba8cd1c5dca700a4decde2f5720a1ef33b1fc2e5d5e922cd4e82742d7a2","sha512":"01844fbe097e5ade12b94e2260a35d622d6ad778d7117449cfb66ab858e1f6942f2a74d7c222be9ed6bb32e6cb920a6c5b861b71e486d69ea0d49edc524a9ce7","ssdeep":"","tlshash":"490185885da71438c6e852840b38f3dc4b3df60ea3ea3927659c7a8c0e08c1b296d306","first_seen":"2025-05-16T13:40:09.300918Z","last_seen":"2025-09-23T11:52:56.851981Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-09-23","alert":"Phishing Block","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-23","alert":"Sinkholed","trigger":"netflix-clone-nu-tan-99.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://netflix-clone-nu-tan-99.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 13:04:57 GMT\r\nexpires: Sat, 19 Sep 2026 13:04:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 341251\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-18T19:37:17.801071Z","times_seen":968973,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":124,"dns":0,"connect":20,"send":0,"wait":21,"receive":26,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://netflix-clone-nu-tan-99.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 13:04:57 GMT\r\nexpires: Sat, 19 Sep 2026 13:04:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 341251\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-18T19:37:17.801071Z","times_seen":968973,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":129,"dns":3,"connect":7,"send":0,"wait":21,"receive":14,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://netflix-clone-nu-tan-99.vercel.app/","date":"2025-09-23T11:52:28.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/roboto/v49/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://netflix-clone-nu-tan-99.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 13:04:57 GMT\r\nexpires: Sat, 19 Sep 2026 13:04:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 08 Sep 2025 18:08:05 GMT\r\ncontent-type: font/woff2\r\nage: 341251\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-18T19:37:17.801071Z","times_seen":968973,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":123,"dns":1,"connect":23,"send":0,"wait":35,"receive":10,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}