{"report_id":"d9fb9c83-5017-4c3d-b98d-76a999a25cfc","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-04-10T02:44:21Z","url":{"schema":"https","addr":"netflix-clone-k25l.vercel.app/","fqdn":"netflix-clone-k25l.vercel.app","domain":"netflix-clone-k25l.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"netflix-clone-k25l.vercel.app/","fqdn":"netflix-clone-k25l.vercel.app","domain":"netflix-clone-k25l.vercel.app","tld":"vercel.app"},"title":"Netflix","dom":{"size":7297,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"2fe8d79b12a164d67c2754ea27b43927","sha1":"ecc22200f9f0b34518f16b0b3e814c8caea43165","sha256":"76f7f2fc448343ac4ea54fce923ca09b171b4fdc9fdb9efe6e2629d10c15249a","sha512":"bcc5b4cf98660e47c9fc1b9dd369dd3953ce9a1a5b3f24cf6f2b1c7eb54193e3941568402b350396b75cd3a966783a5e862a6a7c7406aa431f7dbd4c9ae34596","ssdeep":"48:nva7phZHW1MFeoOlDt/e+/EyK/qKdJbt/e+/nKUc9mNSHlXlXlRfxl9iy7:nva1a1IeTlDAXy/KzbAGKN9mNW0y7","tlshash":"b5e1216222f4882e616782c2f771777b2ed6a153d64a1200b4be5ab01fd6c49ec3b4dc","dom_hash":"domhashaef20fee020cf28e30ba6e3b88a71dd8","first_seen":"2026-03-26T12:28:39.458465Z","last_seen":"2026-04-10T02:44:31.399718Z","times_seen":5,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"netflix-clone-k25l.vercel.app/","fqdn":"netflix-clone-k25l.vercel.app","domain":"netflix-clone-k25l.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T02:44:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-10","alert":"Phishing Block","trigger":"netflix-clone-k25l.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":2,"received_data":15195,"sent_data":1100,"comment":"","tags":null,"fingerprints":null},{"fqdn":"netflix-clone-k25l.vercel.app","ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-27T12:45:57.450025Z","last_seen":"2026-03-27T12:45:57.450025Z","alert_count":20,"request_count":5,"received_data":323068,"sent_data":2364,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"occ-0-2849-3646.1.nflxso.net","ip":{"addr":"112.196.177.75","port":443,"asn":45184,"as":"Den Digital Entertainment Pvt. Ltd. AS ISP india","country":"India","country_code":"IN"},"domain_registered":"2016-03-25","domain_rank":0,"first_seen":"2023-11-18T13:19:49Z","last_seen":"2026-04-08T08:36:28.538978Z","alert_count":0,"request_count":1,"received_data":255043,"sent_data":605,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"assets.nflxext.com","ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"domain_registered":"2011-02-11","domain_rank":22756,"first_seen":"2015-07-22T04:02:07Z","last_seen":"2026-04-04T23:42:26.454844Z","alert_count":0,"request_count":4,"received_data":404409,"sent_data":2135,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":2,"received_data":18659,"sent_data":1029,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJnecmNE.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJnecmNE.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://netflix-clone-k25l.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5644\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 10:10:35 GMT\r\nexpires: Mon, 05 Apr 2027 10:10:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 405204\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5644,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5644, version 1.0","md5":"90926c36b712cb131f3f890bbb8c477e","sha1":"854e6f96532537002044042175ea57d6f83bf4e9","sha256":"0b1fcab42c18b69bcfe9ce4799fcbff5af1621c53ffcfdc4723c6f5ec4ee3ffb","sha512":"83807f0c7a832ffcc7093e676b8da21b323e0ca46b407978249565197416429f8208191b50a47a0ee0e0e56fb0a7e52a57aceebe77544580b88c174078446147","ssdeep":"96:fIFfzjZxOWVAeoZKJygG7gQ0ARrvfzR7YHDviqi9CdWRxHTjlt7ndMk+09RiOb:wlLOLZKJzJARrl7Yjvhi9CdoTjR+09L","tlshash":"dcc19e7ff40ea6424e4c3c7afa3fe30fd5c1109f5e3985f12696a9283562195821c2e6","first_seen":"2024-12-05T00:19:49.50341Z","last_seen":"2026-08-16T08:34:12.512016Z","times_seen":27086,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":98,"dns":2,"connect":14,"send":0,"wait":15,"receive":1,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-clone-k25l.vercel.app/images/logo.svg","fqdn":"netflix-clone-k25l.vercel.app","domain":"netflix-clone-k25l.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /images/logo.svg HTTP/1.1\r\nHost: netflix-clone-k25l.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 5662\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 10 Apr 2026 02:43:59 GMT\r\netag: W/\"5355da63cf2c367844cc29a0c1a75152\"\r\nlast-modified: Fri, 10 Apr 2026 01:09:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ctrcd-1775789039054-dba83a4ab41f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2350,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5355da63cf2c367844cc29a0c1a75152","sha1":"a104f9fc74416e9557151b8ae1792cf8679ecd84","sha256":"7005efbff4c8e612f00c2e89a8b0b850ebd178303c3f683c91f8c5409202bafd","sha512":"4751d3c2f45867fd8afa45bfd7f547c8e7899996a19c8e196a780ef73c45c24d70fcd2af6e3d98686cacfba977145acbae3e5058d865dcf6cdf2453c0353db73","ssdeep":"","tlshash":"bb413f95f3bd17d3ad664b8bb6ca0df33a2747b1f8a0524895bc0e68546a4e0853cc63","first_seen":"2023-11-18T14:36:34Z","last_seen":"2026-08-16T03:44:38.292222Z","times_seen":4698,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-10","alert":"Phishing Block","trigger":"netflix-clone-k25l.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"occ-0-2849-3646.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png?r=54d","fqdn":"occ-0-2849-3646.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"112.196.177.75","port":443,"asn":45184,"as":"Den Digital Entertainment Pvt. Ltd. AS ISP india","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Mon, 11 May 2026 20:33:37 GMT"},"fingerprint":{"sha1":"30:AE:4B:82:44:54:03:B7:D9:EC:DE:07:DA:E1:48:93:88:DC:4A:CD","sha256":"F6:7E:6E:7D:96:B9:DD:40:FD:C9:D7:C1:32:52:6B:14:B3:9C:17:F8:BF:1E:DE:F2:60:D5:36:1E:22:D9:10:D2"}}},"request":{"raw":"GET /dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png?r=54d HTTP/1.1\r\nHost: occ-0-2849-3646.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Fri, 10 Apr 2026 02:43:59 GMT\r\nContent-Type: image/png\r\nContent-Length: 254586\r\nConnection: keep-alive\r\nlast-modified: Thu, 07 Aug 2025 09:47:11 GMT\r\netag: \"2995e70023477ef72300f24e45aba1d5\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":254586,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced","md5":"2995e70023477ef72300f24e45aba1d5","sha1":"92c13cd17c41cb9580f59197a3008fd9cca432c7","sha256":"1e5a6122c8e39862aa1c92eae0e83e92458232d930620e9ca0c68e9be425aa67","sha512":"7eba01faa077439a2bc80840579c5654885a99f3878600b5c3e9b59b3f8d269fef9d7ed373a4ef8886ab71d70fe1fb47845192160b3102765f430e5b01877574","ssdeep":"3072:KEPpQE67ZSxps4pKmlRbFCS/u5hWcfIV2Gn1kXNrA+HdnhPkOWlTPZCLh7Ywax6s:5P6t4HRu5hWd3nanHTkpo7Raj","tlshash":"e7442330cf628c5afcdbf513813d638b36b886cc6a97891183a1d76ca9575ccc531a6e","first_seen":"2023-05-18T15:45:41Z","last_seen":"2026-08-15T07:50:48.37995Z","times_seen":9377,"resource_available":false,"data":null}},"time_used":1982,"timings":{"blocked":469,"dns":11,"connect":173,"send":0,"wait":174,"receive":863,"ssl":277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-in-0819.m4v","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sat, 09 May 2026 00:20:06 GMT"},"fingerprint":{"sha1":"5F:C0:F6:EF:00:DB:46:D8:51:14:E0:61:0A:4F:85:D6:B5:89:7F:CC","sha256":"24:F2:9E:E7:5C:AC:1B:32:D1:B2:4E:3E:27:99:92:BC:1F:F3:6E:CA:B2:BD:B2:BF:EF:1D:3E:A6:42:7E:12:B4"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-in-0819.m4v HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: freenginx\r\nDate: Fri, 10 Apr 2026 02:43:59 GMT\r\nContent-Type: video/x-m4v\r\nContent-Length: 267712\r\nConnection: keep-alive\r\nContent-MD5: pYX28yVkH4IOMnLz7ACG7Q==\r\nLast-Modified: Mon, 12 Aug 2019 20:49:12 GMT\r\nCache-Control: max-age=604801\r\nExpires: Fri, 17 Apr 2026 02:44:00 GMT\r\nContent-Range: bytes 0-267711/267712\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":267712,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, Apple iTunes Video (.M4V) Video","md5":"a585f6f325641f820e3272f3ec0086ed","sha1":"faea17ded67d6df03c0bf8d08b2a3dcf1d5b340a","sha256":"b71753769da84bf6bda2349bd9fa2f4a0af54f87923f6b3a20d5836117be68f4","sha512":"f2071d21f0fa2fe4f91ec54609dc88765d2031730818be433a3c4648a362e556de4dc461ce7da537f7b52a5a535244eea4c21ecedcb90dfc0b7e92c56d9b98c2","ssdeep":"6144:6kCH7bTyVslQH+8ngL8999RSWh0mWlNXPsfAn9CwhnnUlx9:vyTgOigoT9Rn0/Pplhnuz","tlshash":"b54412974731a328df59973871aa2e430231c329fd6ae317f9951835b78a72e8f9530c","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-08-15T07:50:48.38203Z","times_seen":11852,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":220,"dns":0,"connect":21,"send":0,"wait":20,"receive":105,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:52 GMT","end":"Mon, 15 Jun 2026 08:38:51 GMT"},"fingerprint":{"sha1":"10:68:A1:B6:6F:BE:E8:57:8D:53:84:02:27:8F:E5:B8:83:ED:F1:68","sha256":"19:3A:7C:96:C1:4A:DD:40:D8:24:D5:6C:D9:2F:3F:74:1E:19:64:E6:F9:D4:88:68:56:D5:DC:1D:17:B6:21:BC"}}},"request":{"raw":"GET /css2?family=Poppins\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 10 Apr 2026 02:43:59 GMT\r\ndate: Fri, 10 Apr 2026 02:43:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12457,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1ccca2b6a9bd398616dd44715940ec7b","sha1":"b0e19c674937c75b555118dadf4b40cf35b8fca0","sha256":"3fe6c5afffcce76a071b2e8cb75f2e2cc00a7bb907429268681c44d7111ae47c","sha512":"74bc109d456e70c16899b7be45af6e68703e1040781df53fd5f24ec525ae816db6a0263c527be36e14dd610bf872eaa5a690ce453a549359e7945117e1d29f34","ssdeep":"384:JkcCkhkx+kRkg1kUqY4nkbk3kk9fw95969W9yN9/qY4T9h9B9q:aCiFyg2UfIUk+H00YNRYj78","tlshash":"89422f91041b5044ab834ce223ce7e35fe0f92507141d1b9bbfd9b6baddbca6526836c","first_seen":"2026-03-26T12:28:39.469307Z","last_seen":"2026-04-10T02:44:31.403652Z","times_seen":5,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":179,"dns":0,"connect":18,"send":0,"wait":34,"receive":0,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:49 GMT","end":"Mon, 15 Jun 2026 08:38:48 GMT"},"fingerprint":{"sha1":"37:8D:19:21:5B:E0:E1:BB:D8:7C:65:74:CB:23:05:60:8D:DA:34:48","sha256":"87:F6:F5:DB:75:39:30:F7:7B:2E:F2:78:F3:AF:75:98:AC:41:5C:58:80:43:5D:A4:53:50:BC:D4:D6:F1:CC:56"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://netflix-clone-k25l.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 02:56:11 GMT\r\nexpires: Fri, 09 Apr 2027 02:56:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 85668\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-16T09:31:07.858286Z","times_seen":392012,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":150,"dns":7,"connect":28,"send":0,"wait":15,"receive":2,"ssl":130},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-clone-k25l.vercel.app/favicon.ico","fqdn":"netflix-clone-k25l.vercel.app","domain":"netflix-clone-k25l.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: netflix-clone-k25l.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 10 Apr 2026 02:43:59 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::pq8qf-1775789039865-6779d7173293\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"4553b55e0adab60dffec34ff5e62f75c","sha1":"8aa3d49f9a90316db488126a675ae3802265a325","sha256":"a4f494da911363e3e315f5c9e1b200889dcd68c46e5de5b6869f4c085eabac1e","sha512":"e4cc785f226ca9d11a1793641816fcf37c43117ca9be5d8ec9972396be8b5fd8f516a9d45f6f2b807d4524a17ad41033bccdd97ed38e34752c49caf5db25e52f","ssdeep":"","tlshash":"09a0110f08a20aaa338002802203023820200023aaa0a22020aa2a00300228fa3080c3","first_seen":"2026-04-10T02:44:31.407226Z","last_seen":"2026-04-10T02:44:31.407226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-10","alert":"Phishing Block","trigger":"netflix-clone-k25l.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-k25l.vercel.app/","fqdn":"netflix-clone-k25l.vercel.app","domain":"netflix-clone-k25l.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T02:43:58.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: netflix-clone-k25l.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 5663\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 10 Apr 2026 02:43:58 GMT\r\netag: W/\"8419859f033b06ffbdb3812ac2e81341\"\r\nlast-modified: Fri, 10 Apr 2026 01:09:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ljjqj-1775789038745-7eb7f5676ee6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":7349,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"8419859f033b06ffbdb3812ac2e81341","sha1":"ce871de07b908cef22f2c65a2f636bcd1c4f8aea","sha256":"64b1f7ddd4c70b8007fd2cdb6f5f068f162da68cea05341e8a1c892ee9db3587","sha512":"e85565acf1a27525f88be4041c2f7bf50cb38e6a14a896f769a8b022eba7794e0bad8cfee8f7c330374e6a560277397fa9726fe90a1ddd1017dea6fed3b9284a","ssdeep":"48:/a7phZHW1MFeoOlDt/eo/EjNK/qKdJbt/eo/eipUN09mNSHlvlvlJfZNliysM:/a1a1IeTlDAtjN/KzbAripH9mNWEysM","tlshash":"a2e10f6222f5882e5263c192f77177372ee6a153d64a1200b4be56701fd6c0de93b8e8","first_seen":"2025-06-18T11:21:42.95918Z","last_seen":"2026-04-10T02:44:31.408401Z","times_seen":10,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":34,"dns":10,"connect":1,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-10","alert":"Phishing Block","trigger":"netflix-clone-k25l.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-k25l.vercel.app/style.css","fqdn":"netflix-clone-k25l.vercel.app","domain":"netflix-clone-k25l.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: netflix-clone-k25l.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 5663\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 10 Apr 2026 02:43:59 GMT\r\netag: W/\"1313014459b332359b7b1ecfc896da23\"\r\nlast-modified: Fri, 10 Apr 2026 01:09:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ljjqj-1775789039044-54f57538e8c0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6258,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"assembler source, ASCII text","md5":"1313014459b332359b7b1ecfc896da23","sha1":"d215f5f4f7dab712303c8e9fcf79b9ab7491870e","sha256":"459e95b3f0fec399d4e78cb31c2fab07de9f9204307c453be093064ff865ef11","sha512":"48f904139ec5b2c780734f63a85b77e1c3ed8b3cdee07f3743e6581aacc19419b1ebbfed7e65d76cbf28c2b26a63c3169ecd79d613721f6d3283c9f69f4bdfcc","ssdeep":"192:0olm0ZKqzLnvSMrZZrc4uWWVgSxMOWHBXsXDxE:1Tnvj+fWOOT","tlshash":"5cd1c08713a31545790ba89c3ffa474562698087950edabc3b8d739c8fca0f5a5a1b8c","first_seen":"2025-06-18T11:21:42.944056Z","last_seen":"2026-04-10T02:44:31.408966Z","times_seen":10,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-10","alert":"Phishing Block","trigger":"netflix-clone-k25l.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Tue, 12 May 2026 00:04:15 GMT"},"fingerprint":{"sha1":"97:FB:64:B4:0F:65:45:00:32:FE:66:9E:7A:9A:16:66:75:4F:C0:CF","sha256":"4D:C7:BF:43:D2:28:25:5C:87:EC:96:21:13:A2:4F:8F:BB:A9:6C:A5:EA:BF:1F:4B:53:B9:13:B3:91:72:5D:E2"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Fri, 10 Apr 2026 02:44:00 GMT\r\nContent-Type: image/png\r\nContent-Length: 11418\r\nConnection: keep-alive\r\nContent-MD5: d5lKZzJ7qVff2IDjOpHwQQ==\r\nLast-Modified: Wed, 14 Nov 2018 18:20:41 GMT\r\nCache-Control: max-age=604801\r\nExpires: Fri, 17 Apr 2026 02:44:01 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit colormap, non-interlaced","md5":"77994a67327ba957dfd880e33a91f041","sha1":"5ba507de8c9bc4a063beecb569e89bcf9e0a901c","sha256":"b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056","sha512":"a6de315aea77f4b862fb43d08bc0664ee1c085bf551760add9d6749bd45515349d6ae416e941bf9b3fc9156aac10a73d80bf4fcc6ff61297f7155f666652ae79","ssdeep":"192:OmrrVi2S1Vk8jYiyXte75R7e8AnFdw8ozUeepPaIYXUPPiHd74HH8rZEyEwz:JrrQ2S0/I777eBk8kULYkcIHuZBEwz","tlshash":"c432b02d2632de066bddf62cb1a785707bf092c0703641e2f5c59092ec67dae121a35b","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-15T07:50:48.374875Z","times_seen":16995,"resource_available":false,"data":null}},"time_used":2172,"timings":{"blocked":1074,"dns":2,"connect":18,"send":0,"wait":18,"receive":1,"ssl":1056},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Thu, 07 May 2026 23:22:45 GMT"},"fingerprint":{"sha1":"18:98:E5:99:BD:61:49:B7:17:A3:47:BD:DD:34:9A:9F:F6:41:8E:CE","sha256":"EA:F4:C4:BB:30:BB:A6:61:81:B8:5D:14:5A:4D:5D:AD:95:2C:9C:B9:D0:B0:D3:D6:F5:DD:6F:9B:A1:10:10:FE"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Fri, 10 Apr 2026 02:43:59 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 49614\r\nConnection: keep-alive\r\nContent-MD5: pIMz1DwZYS7WGYf6Xb/zxQ==\r\nLast-Modified: Wed, 14 Aug 2019 17:59:05 GMT\r\nCache-Control: max-age=604801\r\nExpires: Fri, 17 Apr 2026 02:44:00 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3","md5":"a48333d43c19612ed61987fa5dbff3c5","sha1":"8a8781250b96fee7830eb63ee8dda19e5c871881","sha256":"492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875","sha512":"ff3cc72bdfb03e8d372d84001c80ecde5a8100f8675d4c427c09bbd464be7c5d430d1e10ddfb7e540262ef2b3914c22594bf4306477391dfd9819e4266de9e98","ssdeep":"1536:F5p+9SA6w1sC4S+KJj3nNfeo2JmunFRfVSF:N+9F6qBTJj3wo2JVf6","tlshash":"4323f2dbac60c267d2d35d797deb4d7c7f834a26d95e998e82c80c4c6d7c84aa3480d4","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-15T07:50:48.379071Z","times_seen":16913,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":493,"dns":2,"connect":21,"send":0,"wait":20,"receive":22,"ssl":475},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices-in.m4v","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 06 Apr 2026 00:00:00 GMT","end":"Sat, 09 May 2026 00:20:06 GMT"},"fingerprint":{"sha1":"5F:C0:F6:EF:00:DB:46:D8:51:14:E0:61:0A:4F:85:D6:B5:89:7F:CC","sha256":"24:F2:9E:E7:5C:AC:1B:32:D1:B2:4E:3E:27:99:92:BC:1F:F3:6E:CA:B2:BD:B2:BF:EF:1D:3E:A6:42:7E:12:B4"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices-in.m4v HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: freenginx\r\nDate: Fri, 10 Apr 2026 02:43:59 GMT\r\nContent-Type: video/x-m4v\r\nContent-Length: 74303\r\nConnection: keep-alive\r\nContent-MD5: c+JdHa496slk30MRHATJcw==\r\nLast-Modified: Wed, 23 Jan 2019 00:35:07 GMT\r\nCache-Control: max-age=604801\r\nExpires: Fri, 17 Apr 2026 02:44:00 GMT\r\nContent-Range: bytes 0-74302/74303\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74303,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, Apple iTunes Video (.M4V) Video","md5":"73e25d1dae3deac964df43111c04c973","sha1":"6301d10955803c58b803d04f6e4830f0aee5d01d","sha256":"92259a1c73354bce2540a94397feed47d41bde07f23359decea3187799e5c19d","sha512":"9c610f8bc47b52c855a15cd3f66b05cd3c527db68141bfdeedd50e13f45be7ef7070f479461b5db12b693c424197e91f585a3bd5d5c7f9f9697725182a56cbe5","ssdeep":"1536:nkxpHovDAiPFnFQb+4QZ9AD17YXU8mUzDxUyzmIZk6+YviRj41mMs7:kxZovlFnJ/XbzDSww6Q5d","tlshash":"9b73020af343c43be7b981bd2e86fb1252b7f1613d6a634359c5b834aa035d4fd511a4","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-08-15T07:50:48.361528Z","times_seen":11517,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":345,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Martel+Sans:wght@600\u0026family=Poppins:wght@300;400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:52 GMT","end":"Mon, 15 Jun 2026 08:38:51 GMT"},"fingerprint":{"sha1":"10:68:A1:B6:6F:BE:E8:57:8D:53:84:02:27:8F:E5:B8:83:ED:F1:68","sha256":"19:3A:7C:96:C1:4A:DD:40:D8:24:D5:6C:D9:2F:3F:74:1E:19:64:E6:F9:D4:88:68:56:D5:DC:1D:17:B6:21:BC"}}},"request":{"raw":"GET /css2?family=Martel+Sans:wght@600\u0026family=Poppins:wght@300;400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 10 Apr 2026 02:43:59 GMT\r\ndate: Fri, 10 Apr 2026 02:43:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4830,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f45aa1eea905f9982857ba0232b863c7","sha1":"73ecd2fe339fa75df52856ad6561af1bc0f9b0a9","sha256":"353e7f4a890473a8044ecb744ed19d108386bbfc8b2fffc9fbb7cef3dd707e23","sha512":"c19f16a937e045ff77c1d939353e839b721fbc4fef8658da221aa23c853f30af9c0ac5494528fc261531418831a5fc66d22914ec45b05dc0325e9eccdb2bdd8b","ssdeep":"96:/OxMaRBOxMaRoJc+uNOxMaRppN3O1arO1aTJc+ukO1aaN3OEanOEaCJc+ukOEaup:yRERMPRnhHdPgKQmRzJZ","tlshash":"24a1bed1087bd514ab831cc123ce7e37ee1e9255b810d5756bfd0c88ad9bc294362b6d","first_seen":"2025-09-17T07:17:33.37765Z","last_seen":"2026-08-16T03:44:38.301432Z","times_seen":1030,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":184,"dns":1,"connect":15,"send":0,"wait":111,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-clone-k25l.vercel.app/images/bg.jpg","fqdn":"netflix-clone-k25l.vercel.app","domain":"netflix-clone-k25l.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-k25l.vercel.app/","date":"2026-04-10T02:43:59.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /images/bg.jpg HTTP/1.1\r\nHost: netflix-clone-k25l.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-k25l.vercel.app/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5662\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bg.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Fri, 10 Apr 2026 02:43:59 GMT\r\netag: \"63bd9111f391f2c9ac91f8a665f4e457\"\r\nlast-modified: Fri, 10 Apr 2026 01:09:36 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ctrcd-1775789039426-f55aafc92ee8\r\ncontent-length: 304564\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":304564,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"63bd9111f391f2c9ac91f8a665f4e457","sha1":"fca87387a91f4c7f6b9a312c5d79f72241468779","sha256":"3138bdcf45cb23d9215227baebafab34166f744d86e2688481725c8a3869dac8","sha512":"39c82fc208958bd18b6fa34608ec5b02d8dc3963b66df5af9858d4fb9fedf04ca46087d80f7f232c37217c1a4d826da5d42cd4863cde7355e01cd4d1b4110948","ssdeep":"6144:qEFc1RgZUdL1ciAWFTlccQWciHBfRzc9BzP3liPlHEiZg/jTuwXYB:EqoTuepzc9BbVoEcTh","tlshash":"ef5423825b90da85fda9bffdaf6b57023c0e64c1675eba73484493c11eef4027592901","first_seen":"2023-11-18T14:36:34Z","last_seen":"2026-08-16T03:44:38.285006Z","times_seen":3281,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-10","alert":"Phishing Block","trigger":"netflix-clone-k25l.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"netflix-clone-k25l.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}
