{"report_id":"e59a4765-c10a-4490-be73-363d6e4da522","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-05-09T19:46:10Z","url":{"schema":"https","addr":"netflix-clone-gold-beta.vercel.app/","fqdn":"netflix-clone-gold-beta.vercel.app","domain":"netflix-clone-gold-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"netflix-clone-gold-beta.vercel.app/","fqdn":"netflix-clone-gold-beta.vercel.app","domain":"netflix-clone-gold-beta.vercel.app","tld":"vercel.app"},"title":"Netflix","dom":{"size":12864,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (515)","md5":"e60873f35782b642153d191573cb1e21","sha1":"05ddeb6db6f0a4cdc24e13966dada6f43e4b40a2","sha256":"558715d0876fe07a2189a84655697e72fdac3bc201c7a07284ea86962ca12cbf","sha512":"7fbcdbdfa50722845dcd65f2d761ae49097d0fc2fe1384d0c0f286af4fd7ed62c3858cfec2aa51b9444afa40c9adf8274e8537c4709acdd4b05a9954e62af671","ssdeep":"192:raa1ePOhV9mpoUZ2iv9mzj22lSisLVz4oRxFYiqiTIIr2:ea1uOhioUZ2i1mzjZlrsLVzBrYiqiT4","tlshash":"0c42517916f12066018381913fa56e0ebf96a14bde4f9b44b46c4bd42fd3e86cc972cd","dom_hash":"domhash49813ebaa503a3dc14a3370f231052db","first_seen":"2026-04-08T09:37:55.411231Z","last_seen":"2026-05-09T19:46:13.055847Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"netflix-clone-gold-beta.vercel.app/","fqdn":"netflix-clone-gold-beta.vercel.app","domain":"netflix-clone-gold-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-13T19:46:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"netflix-clone-gold-beta.vercel.app","ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-08T09:37:51.37154Z","last_seen":"2026-04-22T22:05:12.352655Z","alert_count":12,"request_count":3,"received_data":26937,"sent_data":1444,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-03T22:20:33.622142Z","alert_count":0,"request_count":1,"received_data":1913,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn-icons-png.flaticon.com","ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-05-10","domain_rank":239972,"first_seen":"2021-09-02T06:55:19Z","last_seen":"2026-05-07T11:45:54.692709Z","alert_count":0,"request_count":1,"received_data":8972,"sent_data":475,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets.nflxext.com","ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"domain_registered":"2011-02-11","domain_rank":22756,"first_seen":"2015-07-22T04:02:07Z","last_seen":"2026-05-03T13:37:42.314534Z","alert_count":0,"request_count":5,"received_data":676718,"sent_data":2699,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"occ-0-3081-2164.1.nflxso.net","ip":{"addr":"45.57.50.150","port":443,"asn":2906,"as":"AS-SSI","country":"India","country_code":"IN"},"domain_registered":"2016-03-25","domain_rank":0,"first_seen":"2019-02-04T14:42:36Z","last_seen":"2026-04-22T22:05:09.245616Z","alert_count":0,"request_count":1,"received_data":269302,"sent_data":610,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"netflix-clone-gold-beta.vercel.app/","fqdn":"netflix-clone-gold-beta.vercel.app","domain":"netflix-clone-gold-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0035c62b44bdaeaa3bff4dbca241d81a","sha1":"83d431824f30a8017f9038c865d835abb65dda2d","sha256":"36f6547d046aefe4398b2954b57b75f6e89f47a24a78e930ef8b8afb12f2c885","sha512":"4f913f31f475b508f091f99a3951009f46f3c32673be353a49202076c6fbe5ddd19e6c6755f2cc421b0c0598c4e491fbf79b0dafd99d6ebc5921932c9bd90543","ssdeep":"","tlshash":"850124992bad26b4e59ba0240ebf1780707404874908ee4c3c6cd9960f29c9320f9ae5","size":788,"data":"","first_seen":"2023-03-09T14:52:19Z","last_seen":"2026-05-09T19:46:13.082319Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"netflix-clone-gold-beta.vercel.app/style.css","fqdn":"netflix-clone-gold-beta.vercel.app","domain":"netflix-clone-gold-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-clone-gold-beta.vercel.app/","date":"2026-05-09T19:45:47.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: netflix-clone-gold-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-gold-beta.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1089871\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 09 May 2026 19:45:47 GMT\r\netag: W/\"2f6997f262efde70693e81a4b9b20eae\"\r\nlast-modified: Mon, 27 Apr 2026 05:01:15 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::xsfnb-1778355947458-19d899b4af10\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12310,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2f6997f262efde70693e81a4b9b20eae","sha1":"3a5f7c5cf090a5d210515d9b40730012df3ce96b","sha256":"92873671e8f9f282cd80214d1b92749b75e033a0bdc540dcd5d771efd784f793","sha512":"24b91830457c755519ca58cf4172ba2f71d7778d1a92c53af09210005b6dc036d9e178ae87f09d3dd611f31bba2335769a7b1735508eeab7efcacf0b818129d9","ssdeep":"192:YQFJak/cquY0FSA/+jqf7wq73gE2H0P5FoTFcWC4K7lVdoKoCXKcER14F4m44a+V:YpX/+HE2UP5FoTFAl","tlshash":"3c42ee8b598b1045bc43a4781ffa174451aad44bc34bcaaa3ecd7188cfc569599a3fcc","first_seen":"2026-04-08T09:37:55.412655Z","last_seen":"2026-05-09T19:46:13.058468Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Martel+Sans\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-clone-gold-beta.vercel.app/","date":"2026-05-09T19:45:47.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Martel+Sans\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-gold-beta.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 09 May 2026 19:45:47 GMT\r\ndate: Sat, 09 May 2026 19:45:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1227,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8ab89e1f9b8d2f99f9a897eab9645a88","sha1":"e58bc8b2e722b54403a8f7a3ae3df36cba26136f","sha256":"887bed3bb64a34fa214477170c156261e01bb4e5a5b68f75540521eef085a6de","sha512":"77f6452078836e2a88bdb635fdd8b1a0203cc2597feecf864375e20ccb1f43afbbf0392ca61a154a402d6da7bfa189734bcdff8eb545c102a2b4995476cec9c1","ssdeep":"","tlshash":"5d210f92052b9414fb531cc922ce3e21df1e1252a401c6355ffe04c8ec96c694322f5d","first_seen":"2025-09-05T06:32:49.17544Z","last_seen":"2026-08-13T17:48:32.549547Z","times_seen":56,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":76,"dns":1,"connect":8,"send":0,"wait":18,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/512/5977/5977590.png","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"23.36.76.130","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-gold-beta.vercel.app/","date":"2026-05-09T19:45:47.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Mar 2026 08:12:21 GMT","end":"Mon, 22 Jun 2026 08:12:20 GMT"},"fingerprint":{"sha1":"7D:5C:E8:83:7B:4B:E7:2D:D8:5A:4B:01:F0:D9:FB:4B:C8:E1:E4:A0","sha256":"1A:42:BD:FA:DD:C2:87:9C:97:CA:36:F8:07:8E:61:64:6F:C7:DE:57:45:E6:28:14:06:C6:33:9E:C7:89:7C:B3"}}},"request":{"raw":"GET /512/5977/5977590.png HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-gold-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 8418\r\netag: \"df360c06d4e7a3877957f279d43ea576\"\r\nlast-modified: Fri, 31 Oct 2025 11:01:23 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Sat, 09 May 2026 19:45:47 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=16, origin; dur=0, ak_p; desc=\"1778355947501_388254877_693304268_1589_1110_0_17_11\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"df360c06d4e7a3877957f279d43ea576","sha1":"d13c520b4637ed494182efd00aa0375c72c5d0b7","sha256":"3287d79564d24d6e19843eebe9da7c6b4dad8fc3dfcf7edbeda1fd00a8233f60","sha512":"53d74c4eb93a65d5bf3ced0ae215e238459406125ad56825509584f0c977f484dc6e77c69acb6b4642ee078404450ab9487ea1c9295bb45150c1a38a1ad60c60","ssdeep":"192:hMfuFSGndkCqKWB+AKuUnR80ZrX5Pm4OJRmRy:hMfukGnS4WB+d6grX5OF9","tlshash":"ed029e2db613943de22219f32c9b322259f62fff6c478805139f92f4da1af55354889c","first_seen":"2026-04-08T09:37:55.414696Z","last_seen":"2026-05-09T19:46:13.060847Z","times_seen":8,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":62,"dns":32,"connect":1,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-gold-beta.vercel.app/","date":"2026-05-09T19:45:47.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 May 2026 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:51:47 GMT"},"fingerprint":{"sha1":"86:51:11:69:4C:AE:0F:69:B5:3E:C3:22:7B:6C:B3:F9:09:2F:7A:52","sha256":"BD:F5:D1:16:EC:4C:06:B5:B7:8A:B0:B6:FF:F0:84:37:E9:B7:55:5F:9A:54:37:31:7C:C2:12:52:04:E1:3C:B4"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-gold-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Sat, 09 May 2026 19:45:47 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 49614\r\nConnection: keep-alive\r\nContent-MD5: pIMz1DwZYS7WGYf6Xb/zxQ==\r\nLast-Modified: Wed, 14 Aug 2019 17:59:05 GMT\r\nCache-Control: max-age=604801\r\nExpires: Sat, 16 May 2026 19:45:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3","md5":"a48333d43c19612ed61987fa5dbff3c5","sha1":"8a8781250b96fee7830eb63ee8dda19e5c871881","sha256":"492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875","sha512":"ff3cc72bdfb03e8d372d84001c80ecde5a8100f8675d4c427c09bbd464be7c5d430d1e10ddfb7e540262ef2b3914c22594bf4306477391dfd9819e4266de9e98","ssdeep":"1536:F5p+9SA6w1sC4S+KJj3nNfeo2JmunFRfVSF:N+9F6qBTJj3wo2JVf6","tlshash":"4323f2dbac60c267d2d35d797deb4d7c7f834a26d95e998e82c80c4c6d7c84aa3480d4","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-15T07:50:48.379071Z","times_seen":16913,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":152,"dns":1,"connect":21,"send":0,"wait":21,"receive":25,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/download-icon.gif","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-gold-beta.vercel.app/","date":"2026-05-09T19:45:47.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 06 May 2026 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:03:10 GMT"},"fingerprint":{"sha1":"63:03:81:9A:1F:30:89:CB:85:62:B6:4D:20:B4:3F:07:5E:2A:E6:EF","sha256":"97:EF:8E:C7:A7:DB:1C:B5:81:79:D2:A5:42:1A:68:CE:EB:BC:1C:E0:34:52:E0:82:6F:86:7A:B8:F7:26:65:0B"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/download-icon.gif HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-gold-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Sat, 09 May 2026 19:45:47 GMT\r\nContent-Type: image/gif\r\nContent-Length: 22171\r\nConnection: keep-alive\r\nContent-MD5: 3Ty3jbeMPgoTybd+4Z3u5g==\r\nLast-Modified: Mon, 12 Nov 2018 22:40:57 GMT\r\nCache-Control: max-age=604801\r\nExpires: Sat, 16 May 2026 19:45:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22171,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 100 x 100","md5":"dd3cb78db78c3e0a13c9b77ee19deee6","sha1":"9de1915d6543939218ff991b39ee5f9a11aad6f5","sha256":"4f99e4c2ed1c2b7de72f47102c64d601567f8efaad5944a08c86786cad4050e6","sha512":"e0f3e98794b9a45d11ecad95e5df5151f0af32be08c6c366e1e36bf9cfb9b33fcfb74edc7cb46e2c9c70f01777c7a4e1654f4085b599e8990afa4d6961f26b64","ssdeep":"384:PDE51qDMZ1Gi9rsmRUCAc/xxaH3jaMV4bJeRt7eY/0RfvezcNi588+v0qt8/ojGw:PwzjXAeUtV4EluXFskHr3KwdmE3","tlshash":"9ba27c6f9404c831b69255f0f4bbee96390b507977a66c6c5c2da0a43ba52cc3cd738e","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-13T23:15:32.502248Z","times_seen":4826,"resource_available":false,"data":null}},"time_used":626,"timings":{"blocked":361,"dns":7,"connect":25,"send":0,"wait":25,"receive":27,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-in-0819.m4v","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://netflix-clone-gold-beta.vercel.app/","date":"2026-05-09T19:45:47.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Apr 2026 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:41:12 GMT"},"fingerprint":{"sha1":"04:5C:91:5E:7B:CF:B1:E7:1E:69:60:8C:5F:C0:05:19:D5:DE:58:19","sha256":"9C:8B:2E:85:D2:C7:6B:03:BC:DB:72:B5:18:F4:FC:EB:6A:CE:CA:79:65:0D:E2:AB:53:74:07:7D:E7:59:1A:22"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-in-0819.m4v HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-gold-beta.vercel.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: freenginx\r\nDate: Sat, 09 May 2026 19:45:47 GMT\r\nContent-Type: video/x-m4v\r\nContent-Length: 267712\r\nConnection: keep-alive\r\nContent-MD5: pYX28yVkH4IOMnLz7ACG7Q==\r\nLast-Modified: Mon, 12 Aug 2019 20:49:12 GMT\r\nCache-Control: max-age=604801\r\nExpires: Sat, 16 May 2026 19:45:48 GMT\r\nContent-Range: bytes 0-267711/267712\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":267712,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, Apple iTunes Video (.M4V) Video","md5":"a585f6f325641f820e3272f3ec0086ed","sha1":"faea17ded67d6df03c0bf8d08b2a3dcf1d5b340a","sha256":"b71753769da84bf6bda2349bd9fa2f4a0af54f87923f6b3a20d5836117be68f4","sha512":"f2071d21f0fa2fe4f91ec54609dc88765d2031730818be433a3c4648a362e556de4dc461ce7da537f7b52a5a535244eea4c21ecedcb90dfc0b7e92c56d9b98c2","ssdeep":"6144:6kCH7bTyVslQH+8ngL8999RSWh0mWlNXPsfAn9CwhnnUlx9:vyTgOigoT9Rn0/Pplhnuz","tlshash":"b54412974731a328df59973871aa2e430231c329fd6ae317f9951835b78a72e8f9530c","first_seen":"2023-04-05T17:57:45Z","last_seen":"2026-08-15T07:50:48.38203Z","times_seen":11852,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":23,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/vlv3/1ef84595-1fdb-4404-adac-15215ceeb3ae/7645af9d-2679-4f54-b57d-3a6b5c670e14/IN-en-20220711-popsignuptwoweeks-perspective_alpha_website_large.jpg","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-gold-beta.vercel.app/","date":"2026-05-09T19:45:47.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 01 May 2026 00:00:00 GMT","end":"Mon, 01 Jun 2026 23:51:47 GMT"},"fingerprint":{"sha1":"86:51:11:69:4C:AE:0F:69:B5:3E:C3:22:7B:6C:B3:F9:09:2F:7A:52","sha256":"BD:F5:D1:16:EC:4C:06:B5:B7:8A:B0:B6:FF:F0:84:37:E9:B7:55:5F:9A:54:37:31:7C:C2:12:52:04:E1:3C:B4"}}},"request":{"raw":"GET /ffe/siteui/vlv3/1ef84595-1fdb-4404-adac-15215ceeb3ae/7645af9d-2679-4f54-b57d-3a6b5c670e14/IN-en-20220711-popsignuptwoweeks-perspective_alpha_website_large.jpg HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-gold-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Sat, 09 May 2026 19:45:47 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 315055\r\nConnection: keep-alive\r\nContent-MD5: 1LDO+IvFbc+EXGVYaHwU5Q==\r\nLast-Modified: Wed, 13 Jul 2022 12:58:20 GMT\r\nCache-Control: max-age=604801\r\nExpires: Sat, 16 May 2026 19:45:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":315055,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"d4b0cef88bc56dcf845c6558687c14e5","sha1":"aebc5451de7dcc781f28a7c874994fa9eb5be87b","sha256":"258ed96ef50c5d2ce00e87bc52e414f1265bf4ddee8b42cbc314c9785d66ab5d","sha512":"3fced985e873f740fcfdd6b3443ee4c537a7cee9bdb6a176a87a4644ccd682edce2ffaecbed3b16c95c3235e8b965f2ea1f47cba22c52d939aa8cfeaa89257a9","ssdeep":"6144:qEkcrlRsYqiz+a4MjM60j0HPRMwRWkH8feJ4T70bAjAgSFZ:nRsYqizeMjJ9oy8Q4sbiAj","tlshash":"8c6423cb4c9a1e86d39d54e051aee345c08e8b76cadfedbe9870787855397a80381f34","first_seen":"2023-05-21T03:21:22Z","last_seen":"2026-07-23T14:35:41.9074Z","times_seen":34,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":27,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-clone-gold-beta.vercel.app/favicon.ico","fqdn":"netflix-clone-gold-beta.vercel.app","domain":"netflix-clone-gold-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-gold-beta.vercel.app/","date":"2026-05-09T19:45:48.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: netflix-clone-gold-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-gold-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Sat, 09 May 2026 19:45:48 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::msr9p-1778355948009-7a07b0490a5b\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"54924344beed9ec288a6c3a1d579819b","sha1":"539cb41fcce574e264452112f83d25461d42865a","sha256":"494489dcdfdcdfc39843f0e5fa8ac1f069264258aac8a85476116a05f92a7c68","sha512":"ef2b16f2a53d63ed210f210e6b06c45fc2c299f119b6bf344b6bfa12bc6e8ad60cb7d6cbc1f574578e1a8bec8362a030a4cb92e0df0397f6663e84435e83f60d","ssdeep":"","tlshash":"79a0120d2685084c338014302002077c502082366e60e21115fda91021114ce9300089","first_seen":"2026-05-09T19:46:13.065588Z","last_seen":"2026-05-09T19:46:13.065588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-clone-gold-beta.vercel.app/","fqdn":"netflix-clone-gold-beta.vercel.app","domain":"netflix-clone-gold-beta.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-09T19:45:47.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 02:04:43 GMT","end":"Mon, 27 Jul 2026 02:04:42 GMT"},"fingerprint":{"sha1":"26:33:D5:7C:A2:5E:E5:03:8C:D8:EA:45:43:9F:3B:5B:E3:1E:B6:A2","sha256":"F8:32:DF:B2:65:37:61:E8:B0:00:1D:BA:F8:4E:AB:20:66:7C:9B:FB:05:20:70:05:47:D3:B3:BF:54:81:43:AA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: netflix-clone-gold-beta.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1292269\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 09 May 2026 19:45:47 GMT\r\netag: W/\"29d5a81ab1af16309f1aa0c33536bc40\"\r\nlast-modified: Fri, 24 Apr 2026 20:47:57 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::2nzq9-1778355947292-bf871df34fc3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13135,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (515)","md5":"29d5a81ab1af16309f1aa0c33536bc40","sha1":"7b331704047fe1765794c414dea406cb1a185c61","sha256":"85a744de6a19550f1ea16e1e195ce657efc6a7183b760f9ea304671c339aaff5","sha512":"69c0dcbd40084b4d76d79cb1551fb86426a738b0e2476014a2a5229b731db1be1aadf53245924ca6b13a8b4f43c82f353193c6db660690801673844234466859","ssdeep":"384:+jX1DOhioUZ2i1mzjZlrsLVElHrYiqiTY:+jl60DIjfSElHhTTY","tlshash":"3a42523a56f11166028380913fa52e0ebe96a14bde4f9b48b4ac47d51fd3e86cc972cd","first_seen":"2026-04-08T09:37:55.420073Z","last_seen":"2026-05-09T19:46:13.066893Z","times_seen":6,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":46,"dns":21,"connect":1,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-09","alert":"Sinkholed","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-09","alert":"Phishing Block","trigger":"netflix-clone-gold-beta.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-gold-beta.vercel.app/","date":"2026-05-09T19:45:47.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 03 May 2026 00:00:00 GMT","end":"Sun, 07 Jun 2026 00:15:12 GMT"},"fingerprint":{"sha1":"CF:2A:6E:FD:3A:CC:36:EA:B0:0E:88:AA:29:E3:9E:E9:4D:E9:E1:FC","sha256":"3E:B9:2A:6F:E8:C4:4A:DB:82:32:6A:18:15:1B:31:36:5E:AD:AB:CD:9B:05:34:40:4D:03:A8:71:7D:2A:2A:19"}}},"request":{"raw":"GET /ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-gold-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Sat, 09 May 2026 19:45:47 GMT\r\nContent-Type: image/png\r\nContent-Length: 20506\r\nConnection: keep-alive\r\nContent-MD5: WH4EDyAll5IJSQHKlzlmng==\r\nLast-Modified: Wed, 14 Nov 2018 18:48:14 GMT\r\nCache-Control: max-age=604801\r\nExpires: Sat, 16 May 2026 19:45:48 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 210, 8-bit colormap, non-interlaced","md5":"587e040f20259792094901ca9739669e","sha1":"d48b9de536ecd248ab1d923bf837c6958a9e0cec","sha256":"e1fa26cc34fda574edc01d09e374d6f10735a3fa621bdde87c104ee15453d4b6","sha512":"5e6b251454cae8e34b4dd8875ef9e1f0630295f671ba46ea8f5723d8ba29948a7efabd3074f09df6b5340e4b51c7a91f601c0b1b1b38ce460821e25e964e92c2","ssdeep":"384:4FdLgjnSkU4g5tOEkRzi8QrHAqjfhDMzBvkl3e+v+EnCectZXhN37PO:4FNyg6EkBi8Q0sfh8BvkI+vBnCeYTDO","tlshash":"b892e170cc151d0eefb8d0ad6060c878a539c1d48a59e0caefeb87ca17b55685f9c5f8","first_seen":"2023-04-30T21:53:20Z","last_seen":"2026-08-13T23:15:32.491644Z","times_seen":5681,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":149,"dns":1,"connect":27,"send":0,"wait":25,"receive":27,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"occ-0-3081-2164.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABYjXrxZKtrzxQRVQNn2aIByoomnlbXmJ-uBy7du8a5Si3xqIsgerTlwJZG1vMpqer2kvcILy0UJQnjfRUQ5cEr7gQlYqXfxUg7bz.png?r=420","fqdn":"occ-0-3081-2164.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"45.57.50.150","port":443,"asn":2906,"as":"AS-SSI","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-clone-gold-beta.vercel.app/","date":"2026-05-09T19:45:47.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 05 May 2026 00:00:00 GMT","end":"Tue, 09 Jun 2026 19:05:25 GMT"},"fingerprint":{"sha1":"CD:A6:F3:7C:23:BA:6D:3B:B6:2A:53:FB:91:03:7F:F3:92:8A:86:1D","sha256":"A4:CD:6A:BB:68:7E:A1:BC:51:F6:BD:1D:5A:A6:1E:AE:EE:74:74:DB:EE:12:C5:03:7D:2C:7C:98:93:54:9F:76"}}},"request":{"raw":"GET /dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABYjXrxZKtrzxQRVQNn2aIByoomnlbXmJ-uBy7du8a5Si3xqIsgerTlwJZG1vMpqer2kvcILy0UJQnjfRUQ5cEr7gQlYqXfxUg7bz.png?r=420 HTTP/1.1\r\nHost: occ-0-3081-2164.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-clone-gold-beta.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Sat, 09 May 2026 19:45:49 GMT\r\nContent-Type: image/png\r\nContent-Length: 268845\r\nConnection: keep-alive\r\nlast-modified: Mon, 11 Aug 2025 21:04:59 GMT\r\netag: \"d2cb38e3d5bb9c1428e058ff99328ae7\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":268845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced","md5":"d2cb38e3d5bb9c1428e058ff99328ae7","sha1":"8f3b6fb7d20de6d06288c7af0fef5ceb7bd00720","sha256":"6b0ed1e5929282bbcc0a27f1405bad6f3606b81ff133614feed11dc5d588ffd4","sha512":"7fdb5815ae6f8c5ae7a576be37b943bb6afe0667719181f6f687aafad7d5e87b5af7e31e8c86ecd1d36b3a5cb7f45d1b63ff012b8f04823d517778503c3aff25","ssdeep":"6144:5P6qwmXExkeT+bqwGPXDWYsUMGia0sjVyyW+SDiJZamjqy5:l6qwJxH6bqwsCU+wVyyrPvaMz5","tlshash":"c74422c6494eec7d2604be891324d8cbadf623e65cca0215bf48c300cd97d9b9646bde","first_seen":"2023-05-01T09:37:39Z","last_seen":"2026-07-30T16:18:10.587007Z","times_seen":1193,"resource_available":false,"data":null}},"time_used":5179,"timings":{"blocked":1396,"dns":22,"connect":398,"send":0,"wait":802,"receive":1588,"ssl":969},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}