{"report_id":"cebf3957-0bfb-4b27-98e3-2652c7d48684","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-04-01T00:19:22Z","url":{"schema":"http","addr":"stitchestrust.com","fqdn":"stitchestrust.com","domain":"stitchestrust.com","tld":"com"},"ip":{"addr":"195.35.62.127","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"stitchestrust.com/","fqdn":"stitchestrust.com","domain":"stitchestrust.com","tld":"com"},"title":"Netflix","dom":{"size":5791,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"5f5e3c8ee4f55d7d33a48669ad400487","sha1":"d102898c04fdbf7476d2b3022a8d13d025aa71a4","sha256":"c274691f84263c34dc08b17d160a0a542db497adfb8ec746b0022a2d97df67a8","sha512":"c653ddf54bad6d839cc7fa13b82d31ed44ad65f625e8896cbb5d312e42eeaf3dd2d6e768f73ebd94a164f21277faaabf286de4b460b65c36e017e02daaa7d274","ssdeep":"96:nqx/J/Jl+VurVmMX+67hGrN57uKdYyb7nqJhFCmvivs4LnYXbLXdtPm7qM:qxB/JEVurVmMX+67hGrN57uKdYyb7nqK","tlshash":"79c1c72332a914126943e1b83ee5e70539268243c7068d7978ec15a4cfceed28ab77dc","dom_hash":"domhash2bdb911a9d63119d3ede004d49614477","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"stitchestrust.com","fqdn":"stitchestrust.com","domain":"stitchestrust.com","tld":"com"},"ip":{"addr":"195.35.62.127","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-06T00:19:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"stitchestrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-01","alert":"Phishing Block","trigger":"stitchestrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"stitchestrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"stitchestrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"stitchestrust.com","ip":{"addr":"195.35.62.127","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":1,"received_data":6532,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-03-30T10:22:31.156336Z","alert_count":0,"request_count":1,"received_data":2456,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.netflix.com","ip":{"addr":"54.237.226.164","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1997-11-11","domain_rank":1462,"first_seen":"2012-05-21T02:28:01Z","last_seen":"2026-03-28T21:38:53.005536Z","alert_count":0,"request_count":1,"received_data":18816,"sent_data":438,"comment":"","tags":null,"fingerprints":[{"name":"Zipkin","description":"","website":"https://zipkin.io/","common_platform_enumeration":"","icon":"Zipkin.png","categories":["Analytics"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"stitchestrust.com/","fqdn":"stitchestrust.com","domain":"stitchestrust.com","tld":"com"},"ip":{"addr":"195.35.62.127","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"214abdcde28c2028418e35fb63455f06","sha1":"5079cf8d33e24be01c073a8fc051eb683c8e8eb3","sha256":"bbab0db55500f7c7191630c777880498054f2b5fa53415653a6487e38b532f07","sha512":"4482f1e7465de8e7b7a01ac0aec32c980048ae2355778207f67fe98bfd00c47615046b1d9ff6abd9da14bce4517163c914076a520fb17d57e3388f35fd9ea75e","ssdeep":"","tlshash":"282100bf7b6705b00ecb76ea93eaa344613655870e018c067cbc2a65cfa1f4070727e4","size":1204,"data":"","first_seen":"2026-04-01T00:19:26.835876Z","last_seen":"2026-04-01T04:57:25.124321Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"stitchestrust.com/","fqdn":"stitchestrust.com","domain":"stitchestrust.com","tld":"com"},"ip":{"addr":"195.35.62.127","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-01T00:19:01.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"stitchestrust.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 30 Mar 2026 20:19:13 GMT","end":"Sun, 28 Jun 2026 20:19:12 GMT"},"fingerprint":{"sha1":"41:B7:68:31:B3:33:EB:C1:D6:9C:B9:65:10:C5:41:B0:58:2E:A5:CC","sha256":"15:30:87:AC:93:A1:5C:E6:8F:93:0D:F6:F4:E9:23:1C:93:11:27:8B:2F:1B:02:43:4F:41:A1:7B:42:2D:6F:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: stitchestrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.3.30\r\nset-cookie: PHPSESSID=v23hdn4qahu41sk4l3cu4u8ulj; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2487\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 01 Apr 2026 00:19:01 GMT\r\nserver: LiteSpeed\r\nplatform: hostinger\r\npanel: hpanel\r\nretry-after: 60\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:8.3.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":5847,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"63d3efd9643f64498d564767028f9b66","sha1":"5a926810b59a0ca93eb94d27331ae079817bb01a","sha256":"9993f130c2df2b4bb6def78581b5651d590de2629758e97eb901607592d3bf12","sha512":"d6d2bdbe3fda7c0df064876aa5077e196444fe01eb1af6966723c1aeee97ac530fda76fccd154935dc09ac5aff3c4a41cafc14acffacdbdedbd070b61ee2c47a","ssdeep":"96:l/JNLd067hR7LigclWZE/z//mP+8XV1m0q6:lBZd067hR7LigclME/7mP+8XVBl","tlshash":"72c1a723324518166973e378bea2e749fa268253c702493538ec2257cffee914577bd8","first_seen":"2026-04-01T00:19:26.821939Z","last_seen":"2026-04-01T04:57:25.122Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1365,"timings":{"blocked":553,"dns":35,"connect":253,"send":0,"wait":258,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"stitchestrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-01","alert":"Phishing Block","trigger":"stitchestrust.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"stitchestrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-01","alert":"Sinkholed","trigger":"stitchestrust.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/0/08/Netflix_2015_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stitchestrust.com/","date":"2026-04-01T00:19:02.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 06:44:51 GMT","end":"Wed, 13 May 2026 06:44:50 GMT"},"fingerprint":{"sha1":"88:E4:43:3F:CC:87:1D:73:6E:F1:49:80:44:76:A9:8C:17:D8:DC:40","sha256":"59:E3:D6:A8:2D:49:87:A7:F3:1E:35:0E:3A:0F:77:A1:0B:7D:32:09:4C:1F:9F:2D:5D:0F:42:89:16:CB:BF:08"}}},"request":{"raw":"GET /wikipedia/commons/0/08/Netflix_2015_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stitchestrust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 31 Mar 2026 09:20:07 GMT\r\nserver: ATS/9.2.11\r\netag: W/6dbba458959d4ce1edd2f5b3ab3ae13b\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 3ezp8jl2fgt1vd8mxyse4qtyn1i218e\r\nlast-modified: Wed, 06 Feb 2019 12:31:58 GMT\r\ncontent-encoding: gzip\r\nage: 53935\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/992\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=JBX_HYXw-ikpRrd77FBNggM1AAAAAFvdn2cnXkJUwHp1XgS4_6STiLM2rXi3Cayk;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 01 Apr 2027 00:00:00 GMT\r\ncontent-length: 623\r\nx-request-id: 4a2b64c0-6f9c-4e07-95c0-842d6c85611a\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6dbba458959d4ce1edd2f5b3ab3ae13b","sha1":"1d3f5d21a4252e6bee31360b15a6e3659edd58be","sha256":"0c12d5374247e16fced565a207d010bf39f1eb55ee0394581ced67b2e6fa7b92","sha512":"bef959fa88528d655e1b46599329c814d51332c9d748a59df831f9497f87f0748e2e220c91cb67afd858a637701a0700feb0322def31a159b1ada1520cd3fc28","ssdeep":"","tlshash":"d32186d8bf74c6e1dc59111ffa2170e4a81e9c1d462b117cd92ccf8814c6b1063619bc","first_seen":"2023-05-07T21:33:00Z","last_seen":"2026-06-13T17:49:33.591186Z","times_seen":1327,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":100,"dns":56,"connect":17,"send":0,"wait":18,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.netflix.com/favicon.ico","fqdn":"www.netflix.com","domain":"netflix.com","tld":"com"},"ip":{"addr":"54.237.226.164","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://stitchestrust.com/","date":"2026-04-01T00:19:02.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.netflix.com","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 18 Feb 2026 00:00:00 GMT","end":"Thu, 18 Feb 2027 21:41:48 GMT"},"fingerprint":{"sha1":"8E:9F:BD:27:94:84:99:FC:4E:5A:D1:D2:2F:A9:CD:18:5C:EA:F3:92","sha256":"A5:F1:68:2E:76:B7:F0:50:EE:CA:63:9A:DD:23:A4:09:F1:FE:D3:4E:0B:8A:07:9A:A0:D9:DC:D5:6E:B6:E0:F7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.netflix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://stitchestrust.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: envoy\r\nx-frame-options: DENY\r\ncontent-security-policy-report-only: default-src https: wss: 'unsafe-inline' 'unsafe-eval'; font-src https: data: ; img-src  https: data: blob: ; media-src https: blob: ; worker-src https: blob: ; report-uri https://www.netflix.com/log/www/csp/1;\r\ncontent-type: image/x-icon\r\ndate: Wed, 01 Apr 2026 00:19:02 GMT\r\nx-envoy-upstream-service-time: 1\r\nx-b3-traceid: 69cc6476f890c6d0cbbfb2bd44fb1d48\r\nx-request-id: 5a04d325-252e-449c-af0d-53b839bbf499\r\nx-envoy-decorator-operation: lo_svc\r\nvia: 2 i-0f0165723f4a9d20b (us-east-1)\r\nx-xss-protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-originating-url: http://www.netflix.com/favicon.ico\r\nset-cookie: nfvdid=BQFmAAEBEBQ2Uk9OacL_1PzJbS8OGIhAq8y6Ipc6nD72pCzLaopF0tS6WDvTtrbWtd0kMwrIsWZB0N5tg79GRe8cAc51lZTyQWmGOHQUSFRcZcKFo0k26w%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000\nSecureNetflixId=v%3D3%26mac%3DAQEAEQABABRYEzuLbKrWegoJ5uxtTuRpmsCHYHDmAGE.%26dt%3D1775002742723; Domain=.netflix.com; Expires=Thu, 1 Apr 2027 00:19:02 GMT; Path=/; HttpOnly; Secure; SameSite=Strict\nNetflixId=v%3D3%26ct%3DBgjHlOvcAxLAATcCmMZh3q1Lsabn3aMnTCTlMjr27mqqfu9xoMLQqnUnFW4ETEbeLXHFx1opBj4ycKIa_EMchSxqxZCevV9Noyu5SqQfdYAecnQGe7HrJ60QBu-KV4VTjC_wHVUoq923gD9UL8fJ7-Z3ZmQrouS0TxBqBduhmERfPU2NKtp8aI5ltf9TpvqLKRuua10N3O2riYYhb4g01ZbGJU_VUY_zmd90BNL3SaGZB_JPhEkdEQT1Fxc7p7oHMUUEujgaeM59nRgGIg4KDMskhm_gGcYKfK6yVQ..; Domain=.netflix.com; Expires=Thu, 1 Apr 2027 00:19:02 GMT; Path=/; HttpOnly; Secure; SameSite=Lax\r\nx-netflix-cookieandmsl.profileguid.match: NA\r\nx-netflix-headerandcookie.profileguid.match: NA\r\nx-netflix-headerandmsl.profileguid.match: NA\r\nx-netflix.nfstatus: 1_1\r\nx-netflix.proxy.execution-time: 12\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Zipkin","description":"","website":"https://zipkin.io/","common_platform_enumeration":"","icon":"Zipkin.png","categories":["Analytics"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"41b45fdce09bd6acd07c7a8949da675e","sha1":"931e18dfc6e7d950dc2f2bbdfe31e1ea720acf7c","sha256":"abe8012eb65c0dc0ac3e87dcc1e60e1908ebd8f12b7c47a5df1856f7a7bb1edd","sha512":"a650426e681161f3673d5e56c1f6c45d609715f07e85b3a3b2c610d293fbcb04a882ac9f92e65977a7145ef45035d08870de3ab6ba331daa2ee2fb4b1ce83296","ssdeep":"48:vXswapDVp0m3T5xuzqnM6ly9mq2FtFe4iMFJ+fPHyc2/4:vcwkDVpr5YGiAVJHiyJ+Sc2/4","tlshash":"f372c8af60d3dd8dfe516ebad125cc38123c38e0edfc956bb0c14e2a0a1294266d39d0","first_seen":"2023-05-01T03:11:06Z","last_seen":"2026-06-13T17:35:36.719078Z","times_seen":6430,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":66,"connect":95,"send":0,"wait":188,"receive":0,"ssl":241},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}