{"report_id":"d660bdc3-0412-43e4-ab72-99ca3256140e","version":0,"status":"done","tags":["amazon","phishing"],"date":"2026-06-07T09:20:55Z","url":{"schema":"http","addr":"amazon-clone-virid-two-23.vercel.app/","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"title":"Amazon","dom":{"size":7238,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"2448ecff4b9542fd2d0f575ab53b55f2","sha1":"6bb9cda7ea4f687c663525dcfb371c5e363f1f7e","sha256":"f04d6a6c9cd184279f80a40eea3d8bc69e6dcd5920e2be2d22124064cba225b1","sha512":"4dd43cb61332cd9fa513f76b299516fbbe9ed9ac7bcf9b12e9cc0cdf8ee25e0aa773b84990fb377ff3332ed4ef5738065b0f1227e9fdb093717b1648bf54ed8f","ssdeep":"96:nRD0JJwP1DD0wUv/eI6ZYBU+L2jnjpLqq0mqECgWBM5K3:RcJwVTUr/gNmPbBgy6K3","tlshash":"e4e1467164f2243301dbe1816a39a76b7ed4da17ea4b6211b3fc13d49fd3c86e9a3418","dom_hash":"domhash75af108b2ffb93a5c7cc65298f607e87","first_seen":"2026-03-02T20:02:51.795858Z","last_seen":"2026-06-07T09:20:57.023946Z","times_seen":8,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"amazon-clone-virid-two-23.vercel.app/","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-12T09:20:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-05-31T22:37:14.287473Z","alert_count":0,"request_count":2,"received_data":234007,"sent_data":1144,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"amazon-clone-virid-two-23.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-03-02T20:02:20.530987Z","last_seen":"2026-06-07T01:51:18.656792Z","alert_count":52,"request_count":13,"received_data":359192,"sent_data":7107,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/box5_image.jpg","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.414Z","timestamp":1780824033414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box5_image.jpg HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 723420\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box5_image.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\netag: \"739f23f6eb5c2a63e2f1944de74445a4\"\r\nlast-modified: Sat, 30 May 2026 00:23:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q9zkl-1780824033478-5a9216656af7\r\ncontent-length: 32009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":32009,"size_decoded":32555,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (42680), with no line terminators","md5":"adbc15d455e9935df281720cf50361d2","sha1":"6efb05a5e3a850e74f4c97051158a5cd9d1f19de","sha256":"f4f7dcdafd3bfcbfe96947c724422db2651a3c58dc3590d50a518825e0b82c24","sha512":"641b4baf519944698584b5fd3465e1a8d98fb1b9b873e45d76924baf626a9548a4fb3a7bfb89c75ab0576c0f19a502aeb06f981280edb1fa6089f08848203159","ssdeep":"768:jTmGa+RzO/2bNXUl4UnmPi/CeHggpb+NcP2il3ASWKPluXTJrV8v6qGneHXX4qra:jSGaaxUl4UOaC2FWeB9BPlujhV8Ane4V","tlshash":"6713cf21f17f8e4201851aba182126d5347266f3a2fcc0fd1a3677ebf9dbc97d448601","first_seen":"2026-06-07T09:20:57.02513Z","last_seen":"2026-06-07T14:37:38.366327Z","times_seen":5,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-07T09:20:27.996Z","timestamp":1780824027996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1161570\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 07 Jun 2026 09:20:32 GMT\r\netag: W/\"a583461dc3eadbe22e6d49ff476e762a\"\r\nlast-modified: Sun, 24 May 2026 22:41:02 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2vdmn-1780824032481-0b8d124b3fa7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7421,"size_decoded":2245,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8024), with no line terminators","md5":"41881216e64ffddcc7b4f6b055664788","sha1":"828d97a2ac18eedfec5d0d0aa49d694a466aaa93","sha256":"f45dd2d3fb63e7c18c0bc9d0a93f42b57539617e090f68fcd761a8b1ea5a6512","sha512":"7877f290aa525977aa6e0d4cdc212d4eb4a94c121cc9b802a0932787ede2293fb83dc51dd9ab8540800b68db21e5f6c8f1060c0b61633327398c19770127f1e2","ssdeep":"96:d4cJgl/6D/hjMU5T0tWQzQR9WsZ8/1Xffqg0Mq8ck/gDJvd0bKr:dHgFk2UmWZvy1XfylRrqgFVSKr","tlshash":"72f1263a74ac74734297caa926395b3bbd05b524de7a4a8573bce3c6e7c2c40dd63810","first_seen":"2026-06-07T09:20:57.02813Z","last_seen":"2026-06-07T09:20:57.02813Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4501,"timings":{"blocked":-1,"dns":4043,"connect":40,"send":0,"wait":71,"receive":0,"ssl":347},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/hero_image.jpg","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.406Z","timestamp":1780824033406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /hero_image.jpg HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 723420\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hero_image.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\netag: \"29467d4f3bf6a7d96f02cf4c32ce80ac\"\r\nlast-modified: Sat, 30 May 2026 00:23:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4tlnl-1780824033478-237d5ce19ac6\r\ncontent-length: 68711\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":68711,"size_decoded":69257,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bb26864543cddbd6b6126101936a5612","sha1":"ece42143adc97f3ba6d5f49dd63d7f17516d538a","sha256":"c2a74e5c3729c1f735ace3b929589622339029ff3a66418d6668323a37c7c0fa","sha512":"98644379dfcf357473bcb892c71f55298b389f6ba2ce889b09cba5835295719bed1830d8f52c3a77e9a50e7a79ef2f00c4156f76ffe182eac0d10a74cdd0da44","ssdeep":"1536:zbJuYqtpeCI2wuTKUZfZbc6ssMBkklq+CvXj0dWmkDHyCeKU7b7fptXML5z4ZuZ:nJuDVhBxZhbc62zlq+mXjYWmsHyuM7jA","tlshash":"1093f1f212a2bec85e56bdd041093e54ac75e8bb904ce86af6c8299349fdd1ccd91ca4","first_seen":"2026-06-07T09:20:57.029639Z","last_seen":"2026-06-07T14:02:00.70966Z","times_seen":3,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/box1_image.jpg","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.408Z","timestamp":1780824033408,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box1_image.jpg HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 723420\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box1_image.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\netag: \"e35985f99b9a371c34a546d51d3e6e97\"\r\nlast-modified: Sat, 30 May 2026 00:23:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76nt2-1780824033478-1e4ce474813e\r\ncontent-length: 10576\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10576,"size_decoded":11122,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (14104), with no line terminators","md5":"482edd0104d5115a483bf481ffb0a804","sha1":"4c5ae44e91e8bc411a6109df4f53b562a751634c","sha256":"2905007a8b64d471e4bf08074276d126c2a995403fb65fd700f94b9f9672675d","sha512":"8f0fe74a1f8a82fad6b958d91b26a62bc15904d544df0bca10ccecd733e335117b5163bf02ec07e9a120a5cace5056ccc4cc0271441269f1041a74d469c72ce9","ssdeep":"192:lJXTxUeHOh1ZZ5uBnWoNZLCWp8L68sUljCUMTtWW7IGCCYU2/KqeQYBtwC5w:lnU4Y/kWUhCoGlJCXTtYCYlCqeQGv5w","tlshash":"0c52af331b62a1670f1091b3de0e971a6feb7c8385fd69b46d8d841302c6b53e5ee098","first_seen":"2026-06-07T09:20:57.031334Z","last_seen":"2026-06-07T14:37:38.364889Z","times_seen":5,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/box4_image.jpg","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.413Z","timestamp":1780824033413,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box4_image.jpg HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 723420\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box4_image.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\netag: \"d164fe77224ca4a86c5aca1095de7ea9\"\r\nlast-modified: Sat, 30 May 2026 00:23:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::82kb5-1780824033478-edb1928bccae\r\ncontent-length: 11258\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11258,"size_decoded":11804,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (15012), with no line terminators","md5":"88aa7a9a7b7d05360986afafa84bd89e","sha1":"fdccdb399d07069baa1e5360eb467deaef5d8439","sha256":"a2599aa1a8737e0eba23d11ce08ea977fd9c440fa8331dd5c4efe8fd9ff50d63","sha512":"927cc5d64c6aa947f254b03b56511e4bc84213c24a5d6073890f59eb439d06fb07bff2bd6d74945b7c0b39f08cef7ca6fea7d4f68e702cdff20b122c3879d2f0","ssdeep":"384:vkxHSouCuFzAdPQZtSd3Ckp6j9EQsc0RhOhSywd:v6youCIJWppp6zsZPOsp","tlshash":"e662af36d040bf7f9b313b928a0236625c5c16fb486f8dd04785b3b960f89492a9e59d","first_seen":"2026-06-07T09:20:57.032712Z","last_seen":"2026-06-07T14:37:38.36952Z","times_seen":5,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.423Z","timestamp":1780824033423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://amazon-clone-virid-two-23.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.2/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Mon, 16 Dec 2024 22:44:28 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 140172\r\nexpires: Sun, 07 Jun 2026 13:20:33 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGHw7VIneJqj3LzajLG5loTzUeLZ0i4u4elBy5UtesGQSY1lU1T5qN8aC4OMjuGjrodpxl27bjVnD56m1CA4WNa5qZe8WWayI4PvqP5MKTu%2B4ELS%2B%2BUhgYYVBP8HJyuq%2BAQC9ytd\"}]}\r\ncf-ray: a07e94e17e7fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158220,"size_decoded":159162,"mime_type":"application/octet-stream; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ed2f6471b2e07b873d712b4dc35b5360","sha1":"16e3bbd92aa8724916660fd8a83f69bf9f0c912f","sha256":"f12c8eeaa624bf3e2e14dc79a483d7922b10e8380da12d141120f7fa50a75f63","sha512":"7ed4d45940266ba25c3c02e25bc7a93e7a48e2a8d8587a823937620545c0d3e7ec77f70d4194c971b21d8f31a3dc75deedd044919fad9172ecbc6f217440206e","ssdeep":"6144:rwNxGJdXHEcvN4Bm+3v6uLpQeRfDtkIyN:kH5kjqSuLpQeRZkIG","tlshash":"89241232cc410638376c4328e2178eac08a76eb2db3fba4ba1d9514f6747986ff59175","first_seen":"2026-05-25T18:53:33.397377Z","last_seen":"2026-06-07T19:17:44.009585Z","times_seen":76,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":35,"send":0,"wait":77,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/box7_image.jpg","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.417Z","timestamp":1780824033417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box7_image.jpg HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 723420\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box7_image.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\netag: \"30e03f5543e0c9151fef571d6849dea3\"\r\nlast-modified: Sat, 30 May 2026 00:23:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qd872-1780824033478-136d656cd3e3\r\ncontent-length: 40552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":40552,"size_decoded":41098,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (54072), with no line terminators","md5":"5f44ed3b26f08e65cda24380797a2aff","sha1":"4deae9a30351822d2d0d0a9d24d4713ea3182832","sha256":"e423e75ef96d573d6bd179255f3bfe4a1491cdd7b570f81e48b40fa80a5a5859","sha512":"25ecf2930d8296318191b5e49c9acf952acb1dfbd7bbd43763df7278c4cf92be60bdc263f7511d2e76eceef570a915e3b9df739c8dd959fd10d7b72ac1aa37bb","ssdeep":"1536:M7Z6y4+Mv6vqngRylZAti78iZJUgTpCFJZto/eo3NLI6Gt:M7Z6wMvYeAtktJlbr3gt","tlshash":"343302f0db6c99b8decb9078d5037b8a4d832c96c6934d595a4d889ef9d3b502f0306e","first_seen":"2026-06-07T09:20:57.034643Z","last_seen":"2026-06-07T14:37:38.37034Z","times_seen":4,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/box8_image.jpg","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.418Z","timestamp":1780824033418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box8_image.jpg HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 793989\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box8_image.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\netag: \"f535d9bb8ceed1b4de49df0c349387c2\"\r\nlast-modified: Fri, 29 May 2026 04:47:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mvj29-1780824033478-aedad892cf09\r\ncontent-length: 22752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22752,"size_decoded":23298,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (30336), with no line terminators","md5":"493faf2fb82b0ad7c4200c3f8c52f64e","sha1":"202db5ade3aedaaccbe746b9078ee90c77057c66","sha256":"0f8dc448441795c80a668aff04c9762ee58a89fbee7f1dd096c0960d5ee7dcfa","sha512":"45e0ee0dd1875ed936b6215c012f32da869e6ed0b890f1027446aa64c75d3480c3bdc7bd9108a5c9e2c8ba3178891cd0c8d85a88a0f987087d7d2392e15940dc","ssdeep":"768:+6tjMbZyvS89VtvmoZ0yQ1S+GiuKFTHqG+flDg8X:+QXvvVhmGL9VK9H7+flDge","tlshash":"ebd2e0b70c9be065411d8cde120daf79cea49edf9aa5cf8094db0b0990db306dd408ea","first_seen":"2026-06-07T09:20:57.035925Z","last_seen":"2026-06-07T14:37:38.363018Z","times_seen":5,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/favicon.ico","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.117Z","timestamp":1780824033117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::2vdmn-1780824033147-ace4ea521c5f\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":432,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4567e18979ad74144ee246ea4734eda2","sha1":"ecee5523ae8fb55839689c175e20d3eece99003c","sha256":"8e0d34bd28ac64a4db6307064d7bb0748d67464d1ccfed1657f9811dc81a5760","sha512":"0ac30a6e2c757c16fff0c6365996f4a8cbe2678b70a9b0bad82b4e48df9bf7c3631c81f094a3cf437015b50b28f2433aec8ce7cae8901df807a4e55594487887","ssdeep":"","tlshash":"23a0124f0444099c63c01062528c153cc10049929e93d11031df9340103894acb00c40","first_seen":"2026-06-07T09:20:57.037151Z","last_seen":"2026-06-07T09:20:57.037151Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/amazon_logo.png","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.403Z","timestamp":1780824033403,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /amazon_logo.png HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 723420\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"amazon_logo.png\"\r\ncontent-type: image/png\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\netag: \"1b81758b8d98f363ae1dbf228ca4dbc9\"\r\nlast-modified: Sat, 30 May 2026 00:23:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::76nt2-1780824033430-51bc94580c4a\r\ncontent-length: 85040\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85040,"size_decoded":85586,"mime_type":"image/png","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"66877e9b1337bc231b82d79d40a8064f","sha1":"c05caca5a477fe335a5281e419252decf134d902","sha256":"a8a25bf9c6b008d4e2d91999a9329a6b99bb56301b832ca3cd80aaa3164ce42e","sha512":"4cae2555b110b4487b352f5a2733950dcdd3b49bc81cc358fb6c86953febee901fc735765f4158171e465bb2c63a010c78491a41ff64f7dd7163eb06c318669b","ssdeep":"3072:Dq1BwoNU8RKPNTz5BZ73jJjPDlUzpGigVhlU0ViT1jK:DroNgTXZNlULgeoiTNK","tlshash":"40b3e0bb88cd3c8e9f070c54465925002dae3e539825c9ef7dc1165676af8c8e9cd8be","first_seen":"2026-06-07T09:20:57.038446Z","last_seen":"2026-06-07T14:37:38.361456Z","times_seen":5,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/box3_image.jpg","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.411Z","timestamp":1780824033411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box3_image.jpg HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 723420\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box3_image.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\netag: \"ff02d68c0a2abf606eb605ad14f259b4\"\r\nlast-modified: Sat, 30 May 2026 00:23:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::24l76-1780824033478-1e81a7c3156e\r\ncontent-length: 9217\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9217,"size_decoded":9762,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (12292), with no line terminators","md5":"786b7d98757b87d763d2570d89cc084a","sha1":"9ebbd1ee670e1119dad4de753b4bff1e5d6c18ef","sha256":"e5ae1b132554141017beee0628b070dfe98276e8bcd093ac71ddf164c8da0201","sha512":"950f2d050ac3a75386516173dabc84bb6af009c08e21d0a55d16ce2ed518d4bf3463b09b329c2fccd2733b55cf1005515346b4e1199ad44997a330ef9883070d","ssdeep":"192:mnhkKm60MuaXDQAegABhKXR9+AElHpigMaAyPndZyEjmJI8CUsIWYemIlhKJp0Sn:0RX0MuaXDQAz+hiWTinuPdEEjCsGBRR","tlshash":"2942c0f0cf394ac7de13e901f407e99b4c74c8b7c16efcb5a42560b3e407a268825458","first_seen":"2026-06-07T09:20:57.039694Z","last_seen":"2026-06-07T14:37:38.368722Z","times_seen":5,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/box6_image.jpg","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.416Z","timestamp":1780824033416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box6_image.jpg HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 793989\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box6_image.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\netag: \"8580484850d0b5c54e03bbf66c1b5060\"\r\nlast-modified: Fri, 29 May 2026 04:47:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cw7zd-1780824033478-79e6856955ec\r\ncontent-length: 35229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":35229,"size_decoded":35775,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (46972), with no line terminators","md5":"ec9b71352474406c40af6e4fec40fc50","sha1":"2b428a992a4ce254dbd9615063e93771f52b2c6d","sha256":"7f0309fbede4b518efaa84d17efaeac6cb42444ccc3e58db60384de6916b1d3c","sha512":"b1f609999de6be325a2826eaeae8e7e3263b756081722cd6888bf78784a15d542b99c1d4e16a4e4a2b0cf92727721e6d0c82beea1c867b3dd9ca7ca240ea5964","ssdeep":"768:0qkD35Q6LHXJeckPBe/L2ruqD1B5RsrnMA1sFVRz66I7Y5QG0tExOhdY:vCScgB0L2ii1XRInMiKVxI7SugObY","tlshash":"992301ffd9b8f729d957400e8071c7300fabd5a32a15144e6548a1a7a7f4e227b8b0db","first_seen":"2026-06-07T09:20:57.04123Z","last_seen":"2026-06-07T14:37:38.367174Z","times_seen":5,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.7.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:32.959Z","timestamp":1780824032959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 03:46:57 GMT","end":"Mon, 10 Aug 2026 04:46:42 GMT"},"fingerprint":{"sha1":"95:12:1E:0A:F6:69:8B:FC:A0:08:DA:67:1A:A4:D1:9D:87:F5:E9:07","sha256":"F3:4A:39:63:C7:6A:CE:66:1A:B4:62:2C:E9:92:82:9A:81:78:1B:CC:3F:D5:2D:0A:6D:D6:89:D9:F6:66:7B:BC"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.7.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://amazon-clone-virid-two-23.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\nlast-modified: Mon, 16 Dec 2024 22:44:28 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\ncf-cache-status: HIT\r\nage: 373051\r\nexpires: Fri, 28 May 2027 09:20:33 GMT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhTrBtqJ%2Fl%2BeCeFi3wzVZbcr5LZagLPEr7PjVcR6wg%2BbDukaYIc8YJXegSK8SfCZMAbIHqZpSszKOGb7q59%2BpJVzTnMpxlNq3R2DdiR8ez0HpKxrL0XIkGKW2WaurezR3%2B5%2BIoun\"}]}\r\ncf-ray: a07e94dfddf20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73890,"size_decoded":19138,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (49899)","md5":"7441465cab20b640d4156626d19cc63e","sha1":"8230c4590eee915e9b587a08f6e593fb77fffeb2","sha256":"74005d7c17d4a02f2f25404ec0655d9bc2fdaa53166874c87d7b7eec69d9088a","sha512":"12fbfce0caf892a54644d4a02062ff17f6880ea41bef1436bdcadd230c5f8d38521fc09247b3c111a902af9d4293ec3efd4eacc14d889b5bd55f449593d00186","ssdeep":"1536:/bM1MvMaMfMRQZm0grfT/QypZhzZHpcjA691m:SlgrLXzZJ2191m","tlshash":"14730f12ad84019bb4568d7f3895bf34a6f2eb28aad14495e4344d847ef28fd314fb32","first_seen":"2024-12-23T14:25:51.255422Z","last_seen":"2026-08-14T13:09:08.379006Z","times_seen":31478,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":124,"connect":47,"send":0,"wait":91,"receive":-1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/style.css","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:32.961Z","timestamp":1780824032961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 793988\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 07 Jun 2026 09:20:32 GMT\r\netag: \"f96619b64eaf1f0d4af3414d756f3f77\"\r\nlast-modified: Fri, 29 May 2026 04:47:24 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4tlnl-1780824032980-435088e92af1\r\ncontent-length: 1152\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4218,"size_decoded":1727,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4680), with no line terminators","md5":"b3394b840fe0304efe9be0fdadcafd71","sha1":"7fcaf62eb3ab86cbda37f34c54b367938bc6f848","sha256":"3e14d0bddd8f8845408b0f0390165792793a5db6cac997c7cdabec1f58656d97","sha512":"6fdb095be260c87a308dcdf03c7501624453e677494ad946792419d70022445f2ce19b63c962d2841a3f100cb7644952befeaa6faf92832dbb4a6f0cc5e60336","ssdeep":"96:J6Xt/8E3dJDVpH7tTPGF71jK1NMOA11mC2kJMn:0d/8od/pbtTOF71iNMOe1CT","tlshash":"f9a19d1c8e063276bd52947c2cb75a421269f44b8502cb7d3fd67184d7db0e16ca2ba9","first_seen":"2026-06-07T09:20:57.043234Z","last_seen":"2026-06-07T09:20:57.043234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"amazon-clone-virid-two-23.vercel.app/box2_image.jpg","fqdn":"amazon-clone-virid-two-23.vercel.app","domain":"amazon-clone-virid-two-23.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amazon-clone-virid-two-23.vercel.app/","date":"2026-06-07T09:20:33.409Z","timestamp":1780824033409,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /box2_image.jpg HTTP/1.1\r\nHost: amazon-clone-virid-two-23.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://amazon-clone-virid-two-23.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 723420\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"box2_image.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Sun, 07 Jun 2026 09:20:33 GMT\r\netag: \"1933456391a4a87aa87841e6eabf0ec8\"\r\nlast-modified: Sat, 30 May 2026 00:23:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lkvs8-1780824033478-6c3748f42aca\r\ncontent-length: 25230\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25230,"size_decoded":25776,"mime_type":"image/jpeg","magic":"ASCII text, with very long lines (33640), with no line terminators","md5":"44892895ac8bccd6693e5cadd890009c","sha1":"4cd596354a37fc3da0e04df57f0b5c1506e18004","sha256":"599dfbe0cddc6cde6a0b6731039b59b6a3e07177c6ad3f436890a62858a27fd6","sha512":"1a9bec936e8ff9deab6abd8d23edf5108caacdddc9d870b276d9f28256ac2a7d767bcc74f4d8efd1079d8175aab9b899e951b5ab4d9b4a959d4e6910b6d0d01c","ssdeep":"768:ngCg5DtGmmHmgCwbSaj7+hO9qbDlUXeBO8GZHT5EemsFDwjACsOp0Sx29xzNqbh:ngHp3ym2SaXOR2KGT6EcjAomTMbh","tlshash":"9ae2e00f9dd1d0f9df37541e8f2b8c720aae6473e248a478c748142239d5a4ade1db39","first_seen":"2026-06-07T09:20:57.044577Z","last_seen":"2026-06-07T14:37:38.362249Z","times_seen":5,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-07","alert":"Phishing Block","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-07","alert":"Sinkholed","trigger":"amazon-clone-virid-two-23.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Amazon","verdict":"phishing","severity":"medium","comment":"Resource associated with Amazon phishing","tags":["amazon","phishing"],"meta":null}]}}]}