{"report_id":"c649bbe5-90b8-4039-a83d-6d77bce46e01","version":6,"status":"done","tags":[],"date":"2026-05-08T04:04:06Z","url":{"schema":"http","addr":"amazon-clone-xi-eight.vercel.app/orders.html","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/orders.html","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"title":"Your Souq is now Amazone!!","dom":{"size":12496,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"cd7490ae6d6335a3572e5aaee69092c2","sha1":"df4811298bd5f85e2c7c229b68a7aac295ea9ad5","sha256":"ac941845c70661fcd9f2c50b87eb017af7c5e98d154b7ce0695b98e90bcd2a4e","sha512":"8dc9b93ead5a92dfcb5f9b4f1c98a7672e42449588fc58ec47e095a121be8d8c204c9cd9a415c7a2f2423a8aa88d1caca1db278d6e371ba338ed47c1b092eaae","ssdeep":"192:+IBf28Qcbi6VtcB/etw1l2zqDLJ5iLKgKCj:+IplbigGBl1FDLJ5iLKgKw","tlshash":"27428b4164f9049706a6c34a7eb52b2f6f92d657d24d2e0036ac1fca9febd46dc0312e","dom_hash":"domhash3a07eafb3e64fea1510199ed112c5aba","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"amazon-clone-xi-eight.vercel.app/orders.html","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-12T04:04:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"amazon-clone-xi-eight.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-01T21:29:43.910151Z","last_seen":"2026-04-13T03:42:25.99891Z","alert_count":39,"request_count":13,"received_data":444980,"sent_data":6366,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"db.onlinewebfonts.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-09-28","domain_rank":91976,"first_seen":"2015-10-20T18:27:41Z","last_seen":"2026-05-03T19:38:01.944315Z","alert_count":0,"request_count":2,"received_data":25140,"sent_data":1049,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/js/orders.js","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1eb0e61a37d517e1770950092b8c627","sha1":"ca11606ef0a0b1239c0863c22a82df8c7393a9f2","sha256":"83a43366e70a8f3083248f09d9ba60eccb560442129acd0c2f20bef982bb2c6a","sha512":"ee7deff4ae7e019358a1778782078230fdcfae2e9998de3f163552181cb406610e59a7cf0168854ba5b5b0805b4166f67dfb7b84911c85778b43a0f6daad40c3","ssdeep":"96:Cl4kv43g89SDEHP9VzeuOiw3i/MUiwDi/H0AfVNZee+W1N0zV8C0y8h4GqJdzbuX:y9vOUUzzJOiw3i/xiwDi/UML1GzV8Dym","tlshash":"dca110a564710571824b86bf2d9f1b7a38b2420b790c911db53c79c53f98e2d93b3e8e","size":5008,"data":"","first_seen":"2026-02-01T21:29:48.806116Z","last_seen":"2026-05-08T04:04:10.34772Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/css/orders.css","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:44.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /css/orders.css HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/orders.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 4213\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"orders.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 08 May 2026 04:03:44 GMT\r\netag: W/\"45291a02bdb8293da1f65b3ae79fcefb\"\r\nlast-modified: Fri, 08 May 2026 02:53:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cgn59-1778213024437-bba06f9914c2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1343,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"45291a02bdb8293da1f65b3ae79fcefb","sha1":"ec6e60d51202bdf7d203fac4dba6135e0644ef9f","sha256":"c6e506f529fce29f4d7fce1c04e5e54c16751e4b832cbb1d09259cc548693f20","sha512":"135d9f5c80386cb6c61284c09cecdb26cd02a610b3d280be7831e63aa37fe88814494e9fa131d13dc3ce2daac8d279055a69ff287fa323699ac7ff3f24851b95","ssdeep":"","tlshash":"3021b3db6ae204057507d4187bf69b96336d090752cdd0f83ee052888f451e3d192bcc","first_seen":"2026-02-01T21:29:48.823615Z","last_seen":"2026-05-08T04:04:10.34142Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/webfonts/fa-solid-900.woff2","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:45.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 354610\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"fa-solid-900.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 08 May 2026 04:03:45 GMT\r\netag: \"d824df7eb2e268626a2dd9a6a741ac4e\"\r\nlast-modified: Mon, 04 May 2026 01:33:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g2n5x-1778213025111-0719e12c6a87\r\ncontent-length: 78268\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":78268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-07-26T08:33:13.924647Z","times_seen":56566,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/img/Amazon-Logo-nav.png","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:44.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /img/Amazon-Logo-nav.png HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/orders.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 354610\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Amazon-Logo-nav.png\"\r\ncontent-type: image/png\r\ndate: Fri, 08 May 2026 04:03:44 GMT\r\netag: \"533a1abf67f0e1309acaf5d19b5d8d14\"\r\nlast-modified: Mon, 04 May 2026 01:33:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::477r9-1778213024436-da678f9f22a1\r\ncontent-length: 178540\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":178540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5000 x 3125, 8-bit/color RGBA, non-interlaced","md5":"533a1abf67f0e1309acaf5d19b5d8d14","sha1":"e0382cb305f521e0ba6c5781588e70525e3ef83d","sha256":"8713f8608e30201f61ba7e8d2a2e1c1573c5c28407df4a3b956f51e3c90223ce","sha512":"a9b03962b36c51b4cf89fff731e9fa37524d4b2b4901384445e2090aacd13e1f2ab0d7c8a0c2030db37522dad42eee98203618f8437669a96fe0822ded134b33","ssdeep":"3072:UYqrNlqWv1tGy0rXauE+LiHkTOj4jqXF6Mx9uE8eX29OWqe:UYqrNlerE+mHNX6Mn7Wp","tlshash":"4f046b94b713cf88eb4e2fbd44b12fd936b10e75d6066ff35728a615884e50cb046ae8","first_seen":"2026-02-01T21:29:48.815768Z","last_seen":"2026-05-08T04:04:10.342939Z","times_seen":7,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/img/Egypt%20Flag%20Photos%20(15).jpg","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:44.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /img/Egypt%20Flag%20Photos%20(15).jpg HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/orders.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 354610\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"Egypt Flag Photos (15).jpg\"\r\ncontent-type: image/jpeg\r\ndate: Fri, 08 May 2026 04:03:44 GMT\r\netag: \"d0c5d746b57e6858e32b589a47b92977\"\r\nlast-modified: Mon, 04 May 2026 01:33:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9zdzl-1778213024437-eaf9001b5493\r\ncontent-length: 13490\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13490,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 650x400, components 3","md5":"d0c5d746b57e6858e32b589a47b92977","sha1":"07e53713fcc78613d2b7f13ae1558221f370da99","sha256":"2ebec2ddab3a9af4bcea672f4af6333b897cfe2c662900f57691d0b77993a8f5","sha512":"cc1866610884649f09e3cad75766ff98cfdee9e1d2e846604b74c113ce852f2aae9c74542a0e4fa1e253ed985dfafbc2b38c893c10cef3e2e793995bc126b075","ssdeep":"192:reCFzC6CuC7bOxRc7NGkdjjmQyZPBOPsY5ZJzrR7QD9k7N4CY1V:y4z1ZW2Rcnb6Bg5HR7QDS7NTYH","tlshash":"9e524a091ed57791e2a62f3e13f8c4ba74df16731299e0ac5bba083a5d9b9700cd2391","first_seen":"2026-02-01T21:29:48.803339Z","last_seen":"2026-05-08T04:04:10.343573Z","times_seen":7,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/css/footer.css","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:44.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /css/footer.css HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/css/navBar.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 354610\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"footer.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 08 May 2026 04:03:44 GMT\r\netag: W/\"8006774cdb1cb60cb1667c7c223dbaba\"\r\nlast-modified: Mon, 04 May 2026 01:33:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wnj2d-1778213024494-087f2a9783b7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1765,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8006774cdb1cb60cb1667c7c223dbaba","sha1":"921f9636b4df8a50f4ee2520af2e404760b792df","sha256":"f726cbf09c3ce312023dfef0cc0fb2d1ba7b263563de4687df82dc00bb44bee0","sha512":"21cdcbd8e01bb93678416adf0988017bed43c1b2177deeb9a81dffd43cdcb0e2807667669948f0aaf096b815c6953047cceb4f73f12bb18a4de5da47542f1bb0","ssdeep":"","tlshash":"1a3160dfa677085679166954bf779386836c9453804dd2b83d8c728c9fce0d0d4a278c","first_seen":"2026-02-01T21:29:48.808778Z","last_seen":"2026-05-08T04:04:10.344096Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"db.onlinewebfonts.com/c/157c6cc36dd65b1b2adc9e7f3329c761?family=Amazon+Ember","fqdn":"db.onlinewebfonts.com","domain":"onlinewebfonts.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:44.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinewebfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 00:06:00 GMT","end":"Sat, 18 Jul 2026 01:03:36 GMT"},"fingerprint":{"sha1":"BF:1F:D7:08:61:D6:29:CE:71:C3:18:26:60:6A:CC:45:11:D2:3B:AF","sha256":"B9:7A:45:A5:5A:45:80:6A:E3:98:CA:AB:2F:8C:74:F8:84:75:F5:2E:1C:3B:D4:83:69:34:80:E1:C3:C6:26:83"}}},"request":{"raw":"GET /c/157c6cc36dd65b1b2adc9e7f3329c761?family=Amazon+Ember HTTP/1.1\r\nHost: db.onlinewebfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 04:03:45 GMT\r\ncontent-type: text/css;charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: public,max-age=86400,must-revalidate\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4zRbBdTEoHJvgxA07wePRKwoespPPChy%2BXSwEpetyZxJ9B6JNweMpaprN5G6P1cQrEzDF0U3DGfVctMKixhVvJ9wT9s4cNs1jxi%2FUDjxhJ8wqYI6EC3h0Dlf3nVceDcFlEGDlFC%2Bx8%3D\"}]}\r\ncf-ray: 9f85938b0d2fb521-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"2e1e21d90172f0a5c071f581d50f2c59","sha1":"187c0ebc7e39318cba85fc91a22752dc7b85e006","sha256":"22180c6206eaa9979151faf6fdfa7a3b9d9314396b7009496c11ef4a6999a25a","sha512":"cde2459f4d4f9bd6440c827fa1c8f15d8d9bf4f634e0af25fe85da783a388dbd314d5781b9fa6cc9bfdd0bc59c5ba6e5bfc9098d4e7889ab31724cc5b943b0f6","ssdeep":"","tlshash":"56216bcd4c415950673408193bb1f95cc9c3013f94a59b82b57dae84bfb1b39a2c2b3e","first_seen":"2026-02-01T21:29:48.810853Z","last_seen":"2026-05-08T04:04:10.344626Z","times_seen":14,"resource_available":false,"data":null}},"time_used":659,"timings":{"blocked":47,"dns":22,"connect":1,"send":0,"wait":565,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/img/cart.png","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:44.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /img/cart.png HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/orders.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 354610\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"cart.png\"\r\ncontent-type: image/png\r\ndate: Fri, 08 May 2026 04:03:44 GMT\r\netag: \"7975ff607a9c1b43ed55eb9f048fe6b5\"\r\nlast-modified: Mon, 04 May 2026 01:33:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kmh95-1778213024437-90af539c7cb1\r\ncontent-length: 5159\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5159,"size_decoded":0,"mime_type":"image/png","magic":"GIF image data, version 89a, 1000 x 860","md5":"7975ff607a9c1b43ed55eb9f048fe6b5","sha1":"d76299b03395e62c2b5f058c12302dd987c08b38","sha256":"093724d3800b3f5c766dd62796657149265ec87cc5d207542ffe5c584ce5ad18","sha512":"1e7149f82339784b847612d681917f6ff41e638ebd5294ffa67ee831f9c4122f5cde8f591307389234b6de06e5fb3a79785cf3a984477e594c69ce3aafeae9b6","ssdeep":"96:H4CwsLlJ/j/s9HAvyqdXVR8OrIrma58g3mMVh+roC7pcA:P7hJ/r2HuRxUKaeDMGN7pcA","tlshash":"24b17d2b49a7bf298ca62d5125cd7958c0d28d378bdde8b15c7bc2244b3eb8607c1635","first_seen":"2026-02-01T21:29:48.817639Z","last_seen":"2026-05-08T04:04:10.345741Z","times_seen":7,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/img/logo.png","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:44.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/orders.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 354610\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Fri, 08 May 2026 04:03:44 GMT\r\netag: \"1a7d775d8d218f2393fd8848a386ef6e\"\r\nlast-modified: Mon, 04 May 2026 01:33:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wnj2d-1778213024437-83895a29ce12\r\ncontent-length: 57491\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":57491,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 373, 8-bit/color RGBA, non-interlaced","md5":"1a7d775d8d218f2393fd8848a386ef6e","sha1":"d59f7520eab6fd2d21447eac02719cd951a7c8a2","sha256":"7085c148bb5a5060616dbaacdb8954af2ebb46d80b8e69ad5aad0766ae0778ad","sha512":"844367f94ee1d21d98813b34d4fae56c564dbf45167c8024f737601180bf7fbbc06eeb3d1c95456dbaaf9e4e69f28f50c82919de5ce3835b91b3744c2aea96b2","ssdeep":"768:UXGiz5t85CkFaLsJxEJ/5E2lr5cvL21ReDlROxzfzgLmIs/vkdA+WS+tWdeFVEW0:UnFCaLsHE9CTqI8rg6SWSneF/2tXZ","tlshash":"c54302d04ff9ee329e657aea498ef46216b0e524b2d05df83359d91ce04cb380e93a45","first_seen":"2023-05-21T12:45:15Z","last_seen":"2026-07-20T03:43:52.099804Z","times_seen":198,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/js/orders.js","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:44.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /js/orders.js HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/orders.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 10497\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"orders.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 08 May 2026 04:03:44 GMT\r\netag: W/\"e1eb0e61a37d517e1770950092b8c627\"\r\nlast-modified: Fri, 08 May 2026 01:08:46 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::g2n5x-1778213024437-2d370d557bb9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5008,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"e1eb0e61a37d517e1770950092b8c627","sha1":"ca11606ef0a0b1239c0863c22a82df8c7393a9f2","sha256":"83a43366e70a8f3083248f09d9ba60eccb560442129acd0c2f20bef982bb2c6a","sha512":"ee7deff4ae7e019358a1778782078230fdcfae2e9998de3f163552181cb406610e59a7cf0168854ba5b5b0805b4166f67dfb7b84911c85778b43a0f6daad40c3","ssdeep":"96:Cl4kv43g89SDEHP9VzeuOiw3i/MUiwDi/H0AfVNZee+W1N0zV8C0y8h4GqJdzbuX:y9vOUUzzJOiw3i/xiwDi/UML1GzV8Dym","tlshash":"dca110a564710571824b86bf2d9f1b7a38b2420b790c911db53c79c53f98e2d93b3e8e","first_seen":"2026-02-01T21:29:48.806116Z","last_seen":"2026-05-08T04:04:10.34772Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/css/all.min.css","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:44.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /css/all.min.css HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/css/navBar.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 354610\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"all.min.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 08 May 2026 04:03:44 GMT\r\netag: W/\"ecd507b3125edc4d2a03aa6ae5d07da9\"\r\nlast-modified: Mon, 04 May 2026 01:33:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kmh95-1778213024494-c3398730895f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":59305,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-07-26T08:31:43.254091Z","times_seen":46696,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/img/egypt.png","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:45.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /img/egypt.png HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/css/footer.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 354610\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"egypt.png\"\r\ncontent-type: image/png\r\ndate: Fri, 08 May 2026 04:03:45 GMT\r\netag: \"b36afd966dedc9178483d1d5becac294\"\r\nlast-modified: Mon, 04 May 2026 01:33:34 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cgn59-1778213025105-4e4eb895ca63\r\ncontent-length: 17022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17022,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"b36afd966dedc9178483d1d5becac294","sha1":"3a3b69dd506e494aa79a3396adcf0f3e34294a0e","sha256":"4eea92e2bffee82159468c93088f0721e92d10c2782a9c204dd9d13df3cd5f07","sha512":"e2fe2aa7823a665489b2dd4c1fa1902893518a9857a24fcddb8d92a0db51b26fdf673666039a227be4b769e48b822d3bd140d4c9358d0cfdf1c678e072c057d4","ssdeep":"384:TZ3QOuKtiuQDp+WQRoPU6TyKWOZuXEfbusDFmHFZC1:1utuOfQP6T4W1fbusDYlG","tlshash":"6572bf86d30012e7e1b65fb3ebd7a6fea1fb57323813008214a9075325166979ee8f64","first_seen":"2025-09-21T15:50:51.82627Z","last_seen":"2026-05-08T04:04:10.35144Z","times_seen":8,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/img/favicon.svg","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:45.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /img/favicon.svg HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/orders.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 354609\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 08 May 2026 04:03:45 GMT\r\netag: W/\"fea38bbfc301234ea766a621e1998e91\"\r\nlast-modified: Mon, 04 May 2026 01:33:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wnj2d-1778213025263-4274b059bf71\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2951,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fea38bbfc301234ea766a621e1998e91","sha1":"8fff4ec727ab9280d2c966528fd1d3b2d17fcbdd","sha256":"1d88dabb83080de94748c767e17b057546eca9cb33a552933cc0d191bc96ec81","sha512":"3abb093644d9371200856d16b57745f7052d3f6e414fc80d70cfacee02e60d91a7705de7cb70125125997ba9d04e4829a0fb6c969a44cfa622b48b0a54de2fcc","ssdeep":"","tlshash":"935124d9f778b238dccd67abe3345845798ab0dc6a624edcc179a2c06642aada414c01","first_seen":"2023-10-15T02:27:57Z","last_seen":"2026-07-06T22:15:35.15272Z","times_seen":64,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/orders.html","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T04:03:44.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /orders.html HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1154456\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"orders.html\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 08 May 2026 04:03:44 GMT\r\netag: W/\"14aca6392f383fabed0691dd7e91016c\"\r\nlast-modified: Fri, 24 Apr 2026 19:22:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cgn59-1778213024277-66a627f3f08d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":12467,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"14aca6392f383fabed0691dd7e91016c","sha1":"34765205d2f991fcb8f80a95433737fa97fe71d3","sha256":"10d798b69944632e2dfa699a03df4041a46b8b0c1ba0f9a7d4ba2757e0a6bd46","sha512":"45d11d66c1ac40432a92edd0c93eed1627d508b33f3bbd14d472bcf6cab1828a0842fe9d7076b0e5db45ece1557c130bc33a7c3156eb4dd69d6556e35b5d8c33","ssdeep":"192:UtBf28Qcbi6GtcS/etw1l2zqDLJ+p6P4KO:UtplbitGSl1FDLJ+p6P4KO","tlshash":"d2428b4164f9049706a5834a7eb52b2f6f92d657c24d2d00366c1fca5fe7e46dc0312e","first_seen":"2026-02-01T21:29:48.801234Z","last_seen":"2026-05-08T04:04:10.352932Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":40,"dns":10,"connect":1,"send":0,"wait":10,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-xi-eight.vercel.app/css/navBar.css","fqdn":"amazon-clone-xi-eight.vercel.app","domain":"amazon-clone-xi-eight.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:44.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /css/navBar.css HTTP/1.1\r\nHost: amazon-clone-xi-eight.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-xi-eight.vercel.app/css/orders.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 354610\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"navBar.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 08 May 2026 04:03:44 GMT\r\netag: W/\"1aff631901d205c4969d3f45306f0d50\"\r\nlast-modified: Mon, 04 May 2026 01:33:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kmh95-1778213024470-59f9ead95c5a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5126,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1aff631901d205c4969d3f45306f0d50","sha1":"b47270b82872cd5c0c1af42f46f47cbeb2543a4f","sha256":"ffa7f67e1b64def8739e03e7730a5a7d23f2f197dd05cb83028141b88299b9e2","sha512":"c8205dad578f253ed97122c2d53e4746b863663b410542908c980918cfc87ad681e977b61f59917adf91426cf88d8b7ed71b175376391a3d3d94276bf8befab1","ssdeep":"96:wvIZ3NoyQ7ZddFVH7Am4X2aFlI411nOKFa9ZxuCDvc1a7vsv591rDN0Dux3h6Z96:wQJNoyQ7ZddFVf4X2aFlLOKF0/c6Ev0i","tlshash":"74b144d696ab0440f522e6943fbd6b87235d8543845fd27c3be1724ccfc9b98626278c","first_seen":"2026-02-01T21:29:48.821268Z","last_seen":"2026-05-08T04:04:10.354221Z","times_seen":7,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-08","alert":"Sinkholed","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-08","alert":"Phishing Block","trigger":"amazon-clone-xi-eight.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"db.onlinewebfonts.com/t/157c6cc36dd65b1b2adc9e7f3329c761.woff","fqdn":"db.onlinewebfonts.com","domain":"onlinewebfonts.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon-clone-xi-eight.vercel.app/orders.html","date":"2026-05-08T04:03:45.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onlinewebfonts.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Apr 2026 00:06:00 GMT","end":"Sat, 18 Jul 2026 01:03:36 GMT"},"fingerprint":{"sha1":"BF:1F:D7:08:61:D6:29:CE:71:C3:18:26:60:6A:CC:45:11:D2:3B:AF","sha256":"B9:7A:45:A5:5A:45:80:6A:E3:98:CA:AB:2F:8C:74:F8:84:75:F5:2E:1C:3B:D4:83:69:34:80:E1:C3:C6:26:83"}}},"request":{"raw":"GET /t/157c6cc36dd65b1b2adc9e7f3329c761.woff HTTP/1.1\r\nHost: db.onlinewebfonts.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amazon-clone-xi-eight.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://db.onlinewebfonts.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 08 May 2026 04:03:45 GMT\r\ncontent-type: application/x-font-woff\r\ncontent-length: 22388\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, must-revalidate\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: X-Requested-With\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccept-ranges: bytes\r\nlast-modified: Fri, 08 May 2026 04:03:45 GMT\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aX4Rri9aupmz%2FDxjYyRm0p5xLhMyg82rlWx89zOytGZwCML7ryp2WlzSgiRV8BTEWjglRFb0lIKSoNSEgUmOaXNpUGw4T9ih9NQi%2FsRhSvGXwt0MQwRWENJ3M4TkkHubVqRtWBGX9Dg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f85938f0d96b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22388,"size_decoded":0,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, TrueType, length 22388, version 1.10","md5":"95538b8eea50a639053a7dfe0add957e","sha1":"b73c340e1395342e16279ad889389a32365f72f7","sha256":"501309c77a7e4f40e1ebab19ede22cbbc8b62d12ce700151349c7b4e9d376c3d","sha512":"8d6b51fa9d6f6d09983b652770998b535c2be76314baed857b8b44352eaea3c22d9da735770a4833e87c185afc94757c319ffd0c8552bde896d18e8b649ad655","ssdeep":"384:ukFbb0X8scQcl5vkT2dF0oC+A2KCsIHgMK69t5egomPyeS2SKBDlKXl3RiK:ZFX0X8scQgvFUcsQKYL7oQS+lKXlhj","tlshash":"07a2d01c8604e9c0ec51aafffb096ad6c0d4f77661c963660d8bd4c99c1711e72adc63","first_seen":"2026-02-01T21:29:48.812965Z","last_seen":"2026-05-08T04:04:10.355493Z","times_seen":12,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":13,"dns":1,"connect":0,"send":0,"wait":791,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}