{"report_id":"dfb3eab6-5294-4727-a7bf-0ceda38e7220","version":6,"status":"done","tags":["netflix","phishing"],"date":"2025-10-17T17:17:14Z","url":{"schema":"http","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/auth","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/auth","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"title":"first-clone-cpg29gww5-gianruta28.vercel.app/auth"},"submit":{"url":{"schema":"http","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/auth","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.195","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-21T17:17:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-05-23T10:44:25.877899Z","last_seen":"2025-10-14T00:18:07.929877Z","alert_count":86,"request_count":16,"received_data":712376,"sent_data":8196,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"739ca4ff1562e6418fe90a93135d9ddb","sha1":"1dee7b0d39f7aae0c381831390daa0cea3bcef8b","sha256":"6aad604817dd874413449cce9af0b4ddd8ab618984a35d970a1899db987dc9f2","sha512":"4833078975c6304f2111637a233ca835386a894d3b3b4246b8006879dce060ab8769f4d04f4e7822f036d2fb8bec21c5ae85f64cec3d6423062a08e013476dbc","ssdeep":"","tlshash":"752168c4237074add9c52c3850b2266616b8145f34e6c594b77f04c8de61bd45868c6f","size":1264,"data":"","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-07-30T08:02:43.593648Z","times_seen":622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/1f-6g-pB7YCgwVDifwP0t/_ssgManifest.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-18T05:23:52.695734Z","times_seen":253845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/1f-6g-pB7YCgwVDifwP0t/_buildManifest.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ac782bf2424a6e4457ada3eed88f3d1","sha1":"8c70f94707a72a6864b2c2dee2778c09b0aa6330","sha256":"9998bc4db427b6a1e5026bb57d3791a6d0fd42c0cb17b401e9b9b888774ef3bd","sha512":"1a3eca79e7aea21a64d2ff8cf0f17122864303d1fa8dd83f3110a64f5b87263dcd2d63e6baa90340655481d9caa475aee697e10049e2e23928abb8f885a9ebc8","ssdeep":"","tlshash":"f01155a3421af80a9ee0ec85391f0362afd1e936513405e6c2ec2e6885805779f8e826","size":959,"data":"","first_seen":"2025-05-23T10:44:28.260809Z","last_seen":"2025-12-13T18:20:34.264008Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/pages/auth-2be4466de3592814.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"15bd4db77240cf0228a5d2eac6771507","sha1":"78f086d29fcad305bec914e48f3ca4eea7eb66e7","sha256":"2147e4deaf246ddba5a64fc35766a4e0bcbeb1694e1a99df7e1cc15f0c44e6cd","sha512":"bc4cd0c5d12a6ff4798a7dbc2b64c3c41fe77bc9fed0d53cf1414c7a7a4f5ad0f8f111c801a52566f59a06d5d0c854660aabafda371c99e3df9a820bd59730f6","ssdeep":"","tlshash":"63717448b0533ece967344a4685fc00cb16ea798cd1e8c95f2f868263dc6894bbc5bdd","size":3512,"data":"","first_seen":"2025-05-23T10:44:28.261693Z","last_seen":"2026-06-03T17:19:26.448145Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/1bfc9850-ee9594b91b258940.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb280bb31d1e28fb1e5fb92fce3c12d","sha1":"0ef31da0f9338254aea18e92ede13163f1b8d5d9","sha256":"244a22ecbbb0ff2de9eccfdcce177db6aa05bcab1aa1cd2ea628baf6516ff600","sha512":"9753286eae8e93f7e860de3dfdc7f61d079ebab19628ce5f6599162d3021623b402ccb3a7658db162e15ae50660d333d50247015f1005dbefce4a41b54d4f721","ssdeep":"","tlshash":"0f31dd7d9294d7eccdb62ded8a3b50b9548f992d20d19b068b60c6b0b5b00c8816eccf","size":1561,"data":"","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-07-30T08:02:43.617218Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/main-f11614d8aa7ee555.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"56a5f470e0955e3aecca7767cb564e68","sha1":"23e6d9d03a7a8158768547829c17aa4fdbfc55a0","sha256":"3a9e408537cef70103a72f7351fdc23d2d7c7069fbd887ab20e092023cd563e2","sha512":"6a5ed7ed9b6a9bc9bae03afefa5978c65500b50446eed27fa835820e6825dbffe57bf4d07bccf12a7d360395c00d776390e6c6326e06e9b44c90ccf49fd721fc","ssdeep":"768:2D8dNt7SgSYA5IE9whcBhfHdnBDjhEZ1gfveiVzPVToKt0OcEng3i6JUKT82Let3:2odNtoYbmbnBfhEZ1xwGKtE2g3pgr88","tlshash":"249309b572d1f4a207db41a5843b0202f3661d3e641fa855f3ebdcd675a0d8ea0a2f36","size":89393,"data":"","first_seen":"2023-03-14T04:06:51Z","last_seen":"2026-07-28T13:34:25.065275Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/154-993c5223280744f2.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"50df78bedeb5d116115b767be537fbdd","sha1":"83d31e7d5e7d4bdb2852be81341f3743e468188f","sha256":"d96207131add239f35ebe55db146d6089eda8018fd69e243de036008b8ce4aea","sha512":"270c8e9d2e4195d8a6bb95e1d13ac9ee7bc9b4a938c1fb3a254d23c3668dd87117c5e3e1d48424fac88ed5ef897d1a8c2e1d0fb00e6f2dee317756cf37b1dded","ssdeep":"768:XSMNxhfOEfEA4CFdiDDFU+vkh4wYbsDdZB0mbr50zk6AuM1ej/ONqq:iMnhfFTBXiHWHhR0iWzuWGNt","tlshash":"b933eac5f6a1b03603a621e0405f440af279ea3d644d48e8f251e8e738f959a95fff78","size":51309,"data":"","first_seen":"2025-05-23T10:44:28.256635Z","last_seen":"2026-06-03T17:19:26.456825Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/framework-2c79e2a64abdb08b.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fc4bed6b4319c62343f0bf5db91a5bb","sha1":"6e283c4ea2b12da64476af280236a8c5d85dbbbc","sha256":"f2ae26ff518d9519afd2a3dc277d84e098458e6b6b85fa9548cda2bed24435e7","sha512":"e2e0072386f2f35690899509229136406c27c2b95e3e8cc810aeb6630d7f13bd0872e0f6e650b4fddce2567680e7c42eea49c62bd2653006f5151d9ba0430cd7","ssdeep":"1536:2YjvmNg6kMudjY+o3F36qmk1S/qcnde//ZQg:Dj7UN6qT1S5cXmg","tlshash":"a3d309e83995f6526ab311a700af2803733d2a1b280c4960e615fd9e75b841fb17bfdd","size":141052,"data":"","first_seen":"2023-03-13T20:58:32Z","last_seen":"2026-08-17T15:43:44.233684Z","times_seen":2326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/98-8b2f0839d50afc93.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"df90f7cbf5e9cc60db01198efa69598e","sha1":"da148d4264b7d145201c9d6a366ff0ddcf54fed7","sha256":"3680838c070c51c69ef0704e34dafa55825e62c417c850b811354df5b463953f","sha512":"605387bdbd5c8d3b93fe7c7bd6e594e43d4cd6e009b4a3a4eb31f19a78a303a3e8b3c0448e90c08b2ec864d8e26d897a744b8424747d63e7c97d90cf053a205d","ssdeep":"768:P1Z0oCMOMzMtM0MzMEMIMXMhv8uXxbNcnmtRCwLTMLi5VxBi:f0GzAyRAB9chv8Uxdtqira","tlshash":"72f2a5cab1d2f4a203d39561403f6106f22a1d69640df4d0e365dee2e97895ea133fba","size":37040,"data":"","first_seen":"2025-02-22T10:00:42.826471Z","last_seen":"2026-06-03T17:19:26.457757Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/webpack-38cee4c0e358b1a3.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26a485e9fb19732af7bc08f2ebf0154d","sha1":"3af402b5971c083af89dc1fdd17320e98eb01d99","sha256":"c1e92a1c5827b02b976fdd931b13ee9f09d45d31db0edbaadf03ca82b96e9a5a","sha512":"5e632a912e250b250f921d654b51bfbfaa7ee3a37999cdd7ec0abcf729b5dddf019ebac0eec1772da71c9631ad5411b5e0d0eccbf5e1056296afa8c9b35481f7","ssdeep":"","tlshash":"b13145c932e2f8d81717ad65482f809bb03a9973146dd5f2eb11c1b57c351584237f7a","size":1700,"data":"","first_seen":"2023-03-14T04:03:47Z","last_seen":"2026-07-30T08:02:43.601572Z","times_seen":761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/pages/_app-3893aca8cac41098.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a77c60ef9aa10796efafe105d7f00a91","sha1":"610f3202c4b02eddcd0e4e011fc5ae57f957667c","sha256":"988393a31192046eea0e9206843cea484423b6c1f2d16571c5b0ca210484f39e","sha512":"7dc5433db20192c94ee6278eb07aa5de437351ae22f533c40d573f96c22f93298b8ced0c722fec14358398b5f83e4d3a47f1a1317f1ed46e7337f5aa00a17ecb","ssdeep":"","tlshash":"6cf027983cc2b8241697a2b801bf246e72bf2d5924eda9505ba2d0d97e7125c9122f8c","size":470,"data":"","first_seen":"2024-08-20T15:02:50.119262Z","last_seen":"2026-06-03T17:19:26.445406Z","times_seen":39,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/css/b75208a8c4dde2a0.css","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/css/b75208a8c4dde2a0.css HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"b75208a8c4dde2a0.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"af7c6d7f16ab4dcc3a2fad076788f057\"\r\nlast-modified: Fri, 17 Oct 2025 17:16:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/b75208a8c4dde2a0.css\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rs9xz-1760721407772-2db023c8ff1d\r\ncontent-length: 4252\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17545,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17481)","md5":"af7c6d7f16ab4dcc3a2fad076788f057","sha1":"97d9def9bcd1190f7d129ddee2ad2efdbe2dd831","sha256":"ef045371f5627a7d9c88744ea4b7abc9e9ab300ff825af14bb46c0f9a845a5ad","sha512":"940d747de3a42b4724f2f8639be95517a7364712bff53f21bb7bff91557df45e205289af1f47fcb9c3687362250621032a923265709054572f265b5d5f3f93b7","ssdeep":"192:n6wns7JyYY7JyYsqsfNsf7sfqFsfj+L+YGdOmaS8xgn/AZeZNtTtRsfYsfJXsf8s:6wawmYGdOmOMYZeZNthzl","tlshash":"b372651d6f65003f2c6680f6db94fa9c710a70c1de3b5ab6ba931101afd13f60de5618","first_seen":"2025-04-03T17:33:49.593744Z","last_seen":"2026-06-03T17:19:26.452716Z","times_seen":53,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/framework-2c79e2a64abdb08b.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2129175\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"framework-2c79e2a64abdb08b.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"7fc4bed6b4319c62343f0bf5db91a5bb\"\r\nlast-modified: Tue, 23 Sep 2025 01:50:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/framework-2c79e2a64abdb08b.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rs9xz-1760721407774-868c800b2de1\r\ncontent-length: 46631\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":141052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"7fc4bed6b4319c62343f0bf5db91a5bb","sha1":"6e283c4ea2b12da64476af280236a8c5d85dbbbc","sha256":"f2ae26ff518d9519afd2a3dc277d84e098458e6b6b85fa9548cda2bed24435e7","sha512":"e2e0072386f2f35690899509229136406c27c2b95e3e8cc810aeb6630d7f13bd0872e0f6e650b4fddce2567680e7c42eea49c62bd2653006f5151d9ba0430cd7","ssdeep":"1536:2YjvmNg6kMudjY+o3F36qmk1S/qcnde//ZQg:Dj7UN6qT1S5cXmg","tlshash":"a3d309e83995f6526ab311a700af2803733d2a1b280c4960e615fd9e75b841fb17bfdd","first_seen":"2023-03-13T20:58:32Z","last_seen":"2026-08-17T15:43:44.233684Z","times_seen":2326,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/1f-6g-pB7YCgwVDifwP0t/_ssgManifest.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/1f-6g-pB7YCgwVDifwP0t/_ssgManifest.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2129175\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_ssgManifest.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"b6652df95db52feb4daf4eca35380933\"\r\nlast-modified: Tue, 23 Sep 2025 01:50:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/1f-6g-pB7YCgwVDifwP0t/_ssgManifest.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c874t-1760721407796-093e04d8b05f\r\ncontent-length: 77\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-18T05:23:52.695734Z","times_seen":253845,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/img/logo.png","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"9f92a087bbfb01ddb0a85ed962650039\"\r\nlast-modified: Fri, 17 Oct 2025 17:16:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /img/logo.png\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rs9xz-1760721407797-427b8fe4fac9\r\ncontent-length: 18043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":18043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 346, 8-bit/color RGBA, non-interlaced","md5":"9f92a087bbfb01ddb0a85ed962650039","sha1":"da354e20a5d0d9d88a222e2c841f025a970dfba4","sha256":"52edac7b27bc236a816dce4f818204b5eef293f036914fd12fec2bc476126a85","sha512":"000ae8a7969d863e52f3894b9e62e92152db3a7d4b863ff1b1dac87b5be52882656c97be6b96651e87ec4347eb7fb30e19baafae9343d297ec618b0801b301c3","ssdeep":"384:SQfXXODBNLlIr6SpbT3fhU29IeXQN39i59drWj2+6Hjn:NonLlI2eHueXQN3Qndre2L7","tlshash":"8682af89dcdb84dafc188034d6ef8f517b62dc8f5160172683e8c9b71d07abca4ad590","first_seen":"2023-05-06T08:35:42Z","last_seen":"2026-07-30T08:02:43.595583Z","times_seen":752,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/favicon.ico","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.954Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 43293\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Fri, 17 Oct 2025 05:15:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /favicon.ico\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4txv2-1760721407958-9ce948be34ae\r\ncontent-length: 9308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-18T05:29:38.786851Z","times_seen":40635,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/auth","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-17T17:16:47.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /auth HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /auth\r\nx-powered-by: Next.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::rxxck-1760721407271-41a26df8abc1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":6273,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3429), with CRLF line terminators","md5":"982990c6fa092994c5161903bca7b356","sha1":"45bef8f694a81a537eeb98714e0bec2447702305","sha256":"2bd0ed9141e90f78670eb66e73afab04ec58030260bc633d5615e9c63e095137","sha512":"03647527211b8718f641d419b93c3d03a84bfa995f99146a84d191be8393731d5196886a19babb52cb556cfdaef230960b736cce1869d8fdf7e50b9edce6bd24","ssdeep":"96:dDFynq7hpUnzBTNVHOykgRAbm1qb1my8g73WntzuId6h1emnw:Z8nq7hmNVH2mAbmAbz8kSRxd61tw","tlshash":"15d1c8695d22c6dec8574ceca671b37ea08ec22ec4b38448e7dc826c1bd1dc58e5cc89","first_seen":"2025-05-24T04:24:39.551006Z","last_seen":"2025-12-13T18:20:34.261569Z","times_seen":18,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":35,"dns":8,"connect":1,"send":0,"wait":11,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/webpack-38cee4c0e358b1a3.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/webpack-38cee4c0e358b1a3.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-38cee4c0e358b1a3.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"26a485e9fb19732af7bc08f2ebf0154d\"\r\nlast-modified: Fri, 17 Oct 2025 17:16:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-38cee4c0e358b1a3.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c874t-1760721407773-cfd2a60635fb\r\ncontent-length: 886\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1700,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1700), with no line terminators","md5":"26a485e9fb19732af7bc08f2ebf0154d","sha1":"3af402b5971c083af89dc1fdd17320e98eb01d99","sha256":"c1e92a1c5827b02b976fdd931b13ee9f09d45d31db0edbaadf03ca82b96e9a5a","sha512":"5e632a912e250b250f921d654b51bfbfaa7ee3a37999cdd7ec0abcf729b5dddf019ebac0eec1772da71c9631ad5411b5e0d0eccbf5e1056296afa8c9b35481f7","ssdeep":"","tlshash":"b13145c932e2f8d81717ad65482f809bb03a9973146dd5f2eb11c1b57c351584237f7a","first_seen":"2023-03-14T04:03:47Z","last_seen":"2026-07-30T08:02:43.601572Z","times_seen":761,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1208550\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"b98bc7c3-3b2716b59bdfc294.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"739ca4ff1562e6418fe90a93135d9ddb\"\r\nlast-modified: Fri, 03 Oct 2025 17:34:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bct5x-1760721407779-c6d323cfe2e4\r\ncontent-length: 653\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1264), with no line terminators","md5":"739ca4ff1562e6418fe90a93135d9ddb","sha1":"1dee7b0d39f7aae0c381831390daa0cea3bcef8b","sha256":"6aad604817dd874413449cce9af0b4ddd8ab618984a35d970a1899db987dc9f2","sha512":"4833078975c6304f2111637a233ca835386a894d3b3b4246b8006879dce060ab8769f4d04f4e7822f036d2fb8bec21c5ae85f64cec3d6423062a08e013476dbc","ssdeep":"","tlshash":"752168c4237074add9c52c3850b2266616b8145f34e6c594b77f04c8de61bd45868c6f","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-07-30T08:02:43.593648Z","times_seen":622,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/154-993c5223280744f2.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/154-993c5223280744f2.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"154-993c5223280744f2.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"50df78bedeb5d116115b767be537fbdd\"\r\nlast-modified: Fri, 17 Oct 2025 17:16:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/154-993c5223280744f2.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c874t-1760721407781-bdd38921b9ab\r\ncontent-length: 18772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":51309,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49713)","md5":"50df78bedeb5d116115b767be537fbdd","sha1":"83d31e7d5e7d4bdb2852be81341f3743e468188f","sha256":"d96207131add239f35ebe55db146d6089eda8018fd69e243de036008b8ce4aea","sha512":"270c8e9d2e4195d8a6bb95e1d13ac9ee7bc9b4a938c1fb3a254d23c3668dd87117c5e3e1d48424fac88ed5ef897d1a8c2e1d0fb00e6f2dee317756cf37b1dded","ssdeep":"768:XSMNxhfOEfEA4CFdiDDFU+vkh4wYbsDdZB0mbr50zk6AuM1ej/ONqq:iMnhfFTBXiHWHhR0iWzuWGNt","tlshash":"b933eac5f6a1b03603a621e0405f440af279ea3d644d48e8f251e8e738f959a95fff78","first_seen":"2025-05-23T10:44:28.256635Z","last_seen":"2026-06-03T17:19:26.456825Z","times_seen":37,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/98-8b2f0839d50afc93.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/98-8b2f0839d50afc93.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1208550\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"98-8b2f0839d50afc93.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"df90f7cbf5e9cc60db01198efa69598e\"\r\nlast-modified: Fri, 03 Oct 2025 17:34:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/98-8b2f0839d50afc93.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c874t-1760721407787-1303be7348e4\r\ncontent-length: 11135\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37040,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37040), with no line terminators","md5":"df90f7cbf5e9cc60db01198efa69598e","sha1":"da148d4264b7d145201c9d6a366ff0ddcf54fed7","sha256":"3680838c070c51c69ef0704e34dafa55825e62c417c850b811354df5b463953f","sha512":"605387bdbd5c8d3b93fe7c7bd6e594e43d4cd6e009b4a3a4eb31f19a78a303a3e8b3c0448e90c08b2ec864d8e26d897a744b8424747d63e7c97d90cf053a205d","ssdeep":"768:P1Z0oCMOMzMtM0MzMEMIMXMhv8uXxbNcnmtRCwLTMLi5VxBi:f0GzAyRAB9chv8Uxdtqira","tlshash":"72f2a5cab1d2f4a203d39561403f6106f22a1d69640df4d0e365dee2e97895ea133fba","first_seen":"2025-02-22T10:00:42.826471Z","last_seen":"2026-06-03T17:19:26.457757Z","times_seen":48,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/pages/auth-2be4466de3592814.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/pages/auth-2be4466de3592814.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"auth-2be4466de3592814.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"15bd4db77240cf0228a5d2eac6771507\"\r\nlast-modified: Fri, 17 Oct 2025 17:16:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/pages/auth-2be4466de3592814.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bct5x-1760721407789-d92ab99434d8\r\ncontent-length: 1467\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3512,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3512), with no line terminators","md5":"15bd4db77240cf0228a5d2eac6771507","sha1":"78f086d29fcad305bec914e48f3ca4eea7eb66e7","sha256":"2147e4deaf246ddba5a64fc35766a4e0bcbeb1694e1a99df7e1cc15f0c44e6cd","sha512":"bc4cd0c5d12a6ff4798a7dbc2b64c3c41fe77bc9fed0d53cf1414c7a7a4f5ad0f8f111c801a52566f59a06d5d0c854660aabafda371c99e3df9a820bd59730f6","ssdeep":"","tlshash":"63717448b0533ece967344a4685fc00cb16ea798cd1e8c95f2f868263dc6894bbc5bdd","first_seen":"2025-05-23T10:44:28.261693Z","last_seen":"2026-06-03T17:19:26.448145Z","times_seen":37,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/main-f11614d8aa7ee555.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/main-f11614d8aa7ee555.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1077824\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-f11614d8aa7ee555.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"56a5f470e0955e3aecca7767cb564e68\"\r\nlast-modified: Sun, 05 Oct 2025 05:53:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-f11614d8aa7ee555.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gqh98-1760721407775-130c7027a63a\r\ncontent-length: 27942\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":89393,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"56a5f470e0955e3aecca7767cb564e68","sha1":"23e6d9d03a7a8158768547829c17aa4fdbfc55a0","sha256":"3a9e408537cef70103a72f7351fdc23d2d7c7069fbd887ab20e092023cd563e2","sha512":"6a5ed7ed9b6a9bc9bae03afefa5978c65500b50446eed27fa835820e6825dbffe57bf4d07bccf12a7d360395c00d776390e6c6326e06e9b44c90ccf49fd721fc","ssdeep":"768:2D8dNt7SgSYA5IE9whcBhfHdnBDjhEZ1gfveiVzPVToKt0OcEng3i6JUKT82Let3:2odNtoYbmbnBfhEZ1xwGKtE2g3pgr88","tlshash":"249309b572d1f4a207db41a5843b0202f3661d3e641fa855f3ebdcd675a0d8ea0a2f36","first_seen":"2023-03-14T04:06:51Z","last_seen":"2026-07-28T13:34:25.065275Z","times_seen":129,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/pages/_app-3893aca8cac41098.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-3893aca8cac41098.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1208550\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_app-3893aca8cac41098.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"a77c60ef9aa10796efafe105d7f00a91\"\r\nlast-modified: Fri, 03 Oct 2025 17:34:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/pages/_app-3893aca8cac41098.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::rs9xz-1760721407776-e442f80a30a8\r\ncontent-length: 470\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (470), with no line terminators","md5":"a77c60ef9aa10796efafe105d7f00a91","sha1":"610f3202c4b02eddcd0e4e011fc5ae57f957667c","sha256":"988393a31192046eea0e9206843cea484423b6c1f2d16571c5b0ca210484f39e","sha512":"7dc5433db20192c94ee6278eb07aa5de437351ae22f533c40d573f96c22f93298b8ced0c722fec14358398b5f83e4d3a47f1a1317f1ed46e7337f5aa00a17ecb","ssdeep":"","tlshash":"6cf027983cc2b8241697a2b801bf246e72bf2d5924eda9505ba2d0d97e7125c9122f8c","first_seen":"2024-08-20T15:02:50.119262Z","last_seen":"2026-06-03T17:19:26.445406Z","times_seen":39,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/1f-6g-pB7YCgwVDifwP0t/_buildManifest.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/1f-6g-pB7YCgwVDifwP0t/_buildManifest.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_buildManifest.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"8ac782bf2424a6e4457ada3eed88f3d1\"\r\nlast-modified: Fri, 17 Oct 2025 17:16:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/1f-6g-pB7YCgwVDifwP0t/_buildManifest.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bct5x-1760721407795-c70fa26fe7e0\r\ncontent-length: 959\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":959,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (959), with no line terminators","md5":"8ac782bf2424a6e4457ada3eed88f3d1","sha1":"8c70f94707a72a6864b2c2dee2778c09b0aa6330","sha256":"9998bc4db427b6a1e5026bb57d3791a6d0fd42c0cb17b401e9b9b888774ef3bd","sha512":"1a3eca79e7aea21a64d2ff8cf0f17122864303d1fa8dd83f3110a64f5b87263dcd2d63e6baa90340655481d9caa475aee697e10049e2e23928abb8f885a9ebc8","ssdeep":"","tlshash":"f01155a3421af80a9ee0ec85391f0362afd1e936513405e6c2ec2e6885805779f8e826","first_seen":"2025-05-23T10:44:28.260809Z","last_seen":"2025-12-13T18:20:34.264008Z","times_seen":19,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/chunks/1bfc9850-ee9594b91b258940.js","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/1bfc9850-ee9594b91b258940.js HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2129175\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1bfc9850-ee9594b91b258940.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"ceb280bb31d1e28fb1e5fb92fce3c12d\"\r\nlast-modified: Tue, 23 Sep 2025 01:50:32 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/1bfc9850-ee9594b91b258940.js\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gqh98-1760721407780-8d5d18a8bb01\r\ncontent-length: 821\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1561,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1561), with no line terminators","md5":"ceb280bb31d1e28fb1e5fb92fce3c12d","sha1":"0ef31da0f9338254aea18e92ede13163f1b8d5d9","sha256":"244a22ecbbb0ff2de9eccfdcce177db6aa05bcab1aa1cd2ea628baf6516ff600","sha512":"9753286eae8e93f7e860de3dfdc7f61d079ebab19628ce5f6599162d3021623b402ccb3a7658db162e15ae50660d333d50247015f1005dbefce4a41b54d4f721","ssdeep":"","tlshash":"0f31dd7d9294d7eccdb62ded8a3b50b9548f992d20d19b068b60c6b0b5b00c8816eccf","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-07-30T08:02:43.617218Z","times_seen":547,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"first-clone-cpg29gww5-gianruta28.vercel.app/img/hero.jpg","fqdn":"first-clone-cpg29gww5-gianruta28.vercel.app","domain":"first-clone-cpg29gww5-gianruta28.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://first-clone-cpg29gww5-gianruta28.vercel.app/auth","date":"2025-10-17T17:16:47.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /img/hero.jpg HTTP/1.1\r\nHost: first-clone-cpg29gww5-gianruta28.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://first-clone-cpg29gww5-gianruta28.vercel.app/_next/static/css/b75208a8c4dde2a0.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 19\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hero.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Fri, 17 Oct 2025 17:16:47 GMT\r\netag: \"a737c03b02520f8f95eebaccd0a67cf9\"\r\nlast-modified: Fri, 17 Oct 2025 17:16:28 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /img/hero.jpg\r\nx-robots-tag: noindex\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::mnb9b-1760721407876-42ff6a5e6e1c\r\ncontent-length: 305755\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305755,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"a737c03b02520f8f95eebaccd0a67cf9","sha1":"338fda630759a03dc136a3aaa3ff3134cb6391c8","sha256":"7218b6041ee8b2d63be9bb7aab4322cab1f92bc795586693bffea561b4df9047","sha512":"11d56297c94a94249fa4e53f6ea00b836d103f3683a5f3a828edcaa3ca0cc90a43639e9d441a52eb40ae81bb79229a9910ab6ceefffd8f14cbf48ce9d4973a08","ssdeep":"6144:qEyQZGPMVDNPA3nXDnfr6c9FyqPSe/jCnwj1NkCl693RTLsN1Bja:rnZPA3nXDfrFvyetdjnY9RTo4","tlshash":"4b5423728d532cc634ecdf982454eec8b46bfde694c7246e015dc854392d068daee71a","first_seen":"2023-05-06T08:35:42Z","last_seen":"2026-08-11T08:02:36.742485Z","times_seen":677,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-17","alert":"Phishing Block","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-17","alert":"Sinkholed","trigger":"first-clone-cpg29gww5-gianruta28.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}