{"report_id":"e6263027-22d8-40b9-bd8e-1caac8a649ea","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-04-05T00:15:25Z","url":{"schema":"http","addr":"ntflx-reabonnieren.com/net/update.php","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"104.21.74.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/update.php","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"title":"Netflix","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ntflx-reabonnieren.com/net/update.php","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"104.21.74.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-10T00:15:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"ntflx-reabonnieren.com","ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-03","domain_rank":0,"first_seen":"2026-04-05T00:15:26.10641Z","last_seen":"2026-04-05T00:15:26.10641Z","alert_count":84,"request_count":14,"received_data":754373,"sent_data":7260,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/update.php","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"584fb338eeaea9a10f9351546c681e3d","sha1":"4776a62851396a029cebb1de2340b31653b5515f","sha256":"435a0ae992d55ea7433d558a52ef19bcb4ad58cd907f27f87dddd639bb1738e6","sha512":"b68df9e6c5d76a3b4938a1205f345860b84f4796cd551c9b301b3f276dba5242f8611fa5b1f47a55020f293ebfc8fc4a84cf0f1b75490c8280715c68ee7bd7a6","ssdeep":"96:Ngwyw/bjWlEQWvivvVIWHL30KnSi8YZ47V5uEW:Ngwb//WlEvivvVI4V2YZ47V5uEW","tlshash":"32a1ea48bee310a66e2731bc4bff4106a1b99863500cc9067c0cb6845fd1ea566b4ffe","size":4641,"data":"","first_seen":"2026-04-05T00:15:29.091611Z","last_seen":"2026-04-05T09:37:59.165379Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/js/modernizr.min.js","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67da488f35981b7c865123f7e97ed1e7","sha1":"29fc5c3bdcd93481c8c5debb335d074f1c4441be","sha256":"538803abb3e2032179657ded87f8d93b9d37b2481e50a6acde6a2951303bbe57","sha512":"3ef2de3837af678ce113e3ab65c14677dc3dd3db1704adfc645bb8f55be3bcba574d5be6f61f8f96418576fa05f23e06768bf4e3bdc21283a78ff7ea90c3a84f","ssdeep":"384:1EPDCHW519TpJGd+xesmAnx6KQoZRY5y60Hh1pfFIbvVrpezokUQMI1OhIS:1iDtjebAgKr25y60HLotrpezSQH1M3","tlshash":"c6921bcd725271099397607a61bf420ff13a98a9a8184854e059c8fcbe74dec027bf6e","size":20116,"data":"","first_seen":"2023-03-07T12:22:53Z","last_seen":"2026-04-07T23:51:31.256603Z","times_seen":216,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/css/none2.css","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:03.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/css/none2.css HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/update.php\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:03 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 16 Nov 2020 06:42:38 GMT\r\netag: \"28bf6-5b433af201380-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 24852\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VsI2LWXW9YPTZL2Csm7wC54xlbBLDm%2Fo5%2BWOIq3oJzqv7YzIaDWkPokEsw8CHucfmuG%2FtQmZC60KJlhlLMtNEs5uov4WShSWWuBnpFGpvNGFZ%2FzNqs%2BhQFwTrlGEFSvRazBponWFFtjM\"}]}\r\ncf-ray: 9e745b2bcac05690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":166902,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (375), with CRLF line terminators","md5":"547107fe336e4bb0e9a6419bfcd53db4","sha1":"6b96c54edc6c105a808e2655b9eb2118ebfa35e9","sha256":"72b3228cb98385052ac5e8e287ad5e563cd7e4f7943bfc23090dc9c4776e72dd","sha512":"1a2bf9330f95b265a6e30d96aa43bf9cffadfcec7500380949397f501e3229a5766819bce2115a4f316bcb1720e10d013b17b83bfbf4547205aea6b522f1f9e1","ssdeep":"3072:fWpJ3gyXv0P0wWR3jD0F1MnhXsKtrazK1Ch:y0P01azK1Y","tlshash":"16f3f170ae07300fb307aaa9b3f06b565f199172ae0789bef492781d93c45b815b17cd","first_seen":"2023-04-05T07:45:07Z","last_seen":"2026-04-09T11:40:15.565475Z","times_seen":246,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/js/jquery.js","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:03.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/js/jquery.js HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/update.php\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 18:03:48 GMT\r\netag: \"4516a-63de96d23c900-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTzPihDZzrcVC2piJLSNHb0pKjPD0S4OvSbHcDWAwX6Io1AJi6n60mqY%2BI1jXwmAv0pOC7763OP1eaj2f72xHOvxt9%2BwRY%2Fg53B1FRJ9CCHQbKNG0JVx9bhe4P%2B3VtcgMSTzUAhNiRUF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9e745b2bcac25690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282986,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"9942970f31d917fa6aae66fa3b9b09ff","sha1":"0edae6ec7634e6b6c69c8732461ce1bf2ca3752d","sha256":"53b256938007038f734eb986b836c4c0427c5b91cd44e36d1ea40cff0a1e633e","sha512":"5a56870cf7ab47983baa21419a230ea0eaf5e54056999961e7101e97dfb1b5e06a7109e9c6767006e546b8153a7942e5a9ed6437868b6f766861892f20029245","ssdeep":"6144:O0UiarTGP59u59RaljlFq1vVA9emxZsq4fZZ3/SqJjIb4ESNWxppeVc:OVeHljlD9ZOEbpSApeVc","tlshash":"5a54c5d8734f515f86a2336ae43b6249fe7cd1b1520151bdb58d987c24a081883fafbe","first_seen":"2023-03-13T02:41:32Z","last_seen":"2026-04-09T01:30:19.393154Z","times_seen":33,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/img/nt_logo.svg","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:03.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/img/nt_logo.svg HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/update.php\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:03 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Jul 2018 03:09:18 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l4sJ0Y2UT31LD3wuzjCB3oCVnpfSjqOoQSAL%2FAt0WtA3YilDpSsQM97c2V8WbrWOVlhvNgMfTr0AO3NQzeqjJtVfXkIAALeyrb77hzYK0WnsCiNpwUhwK%2FUBJAwJBiMqKtJFtmPHKpdy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\netag: W/\"396-5718ddac19380\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9e745b2bcac45690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":918,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86f0566ebb39dd5172fa8e0b908805d4","sha1":"36ca2185a5cc8dc312b294eb790b53cbf0945a36","sha256":"359f43eac89ff6f20262ed973adea44c734b927b8f8aad6610307693ab230dc9","sha512":"5484bb2da527ca266ce01b570b6b5540ed058281951f7d5fc4b8495b8f07f327582fd3b3eda3769d6c233ccd8c04b6bf426479ef64a719421628cee7f6b0c2d7","ssdeep":"","tlshash":"f91110d81236d2a4e6eacb9ffab26044721e40f80484911982bbbb1884934e83a0cd64","first_seen":"2024-01-01T17:17:04Z","last_seen":"2026-04-05T09:37:59.145805Z","times_seen":15,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/img/vsa.png","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:10.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/img/vsa.png HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/files/css/none2.css\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:10 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Jul 2018 05:22:36 GMT\r\netag: \"79b-5718fb7795f00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1947\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdwQslmDaOBNxOt3Iup5Y4FSE0zWA10l1FJWqxF7Ev2EKhRSxLiqh0%2Fdt1I8u%2Bhoog7d7qXnoauTL3WhqOEIabmAHMqLEKp64n0Q5Qf7vi0PagZ%2FiN1DtUSQKw0dIEfpcD5A72800qiR\"}]}\r\ncf-ray: 9e745b595bfa5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1947,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 25, 8-bit/color RGB, non-interlaced","md5":"0253d6dc7f382152f496b938b445e51d","sha1":"2120a4ca498dfbdb2aae89146b4e2006910be721","sha256":"7334c16dc04df9eef7152086d519c011301cdbf891aacff4dd28db3d09d32e42","sha512":"e660c8eada20d230916f323eae636d4a0a260ebeed2e44b184418f7c8e485ce4c651ef49ff1960b83fd5941f729f78240095fed282510728fb89a5d9870c3dff","ssdeep":"","tlshash":"8c41fb1be912b8053215f8e194e5601bad13508081d1d634d8dffe5d3e741f61add9cf","first_seen":"2023-11-15T01:34:05Z","last_seen":"2026-04-05T09:37:59.164586Z","times_seen":20,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/update.php","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-05T00:15:02.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/update.php HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:02 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EeOk5JkAvkZ%2F%2Bi5LPXcLL3hvUkXfB3ITHZniGPFdnlKcE0K03suJdRpbOHJpNxRC8Rrx0FsOlUiCEdomE6g%2BGDJ8LeBGLzD%2FnKhla6Npr%2FeZ9wyF5GgaDl6WS968x0u%2FfJvP%2Baou26Cw\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e745b2a1fb456c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]}],"data":{"size":16333,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"0fdc4a37b906288c6797fde6bc638808","sha1":"6ea007426fb6c010b4982edecbf821baaa52515c","sha256":"ef273ba5c342267ea1b7f96d81015585cd07fcd947b201b1c37b6d3786581432","sha512":"3a9274ce5c5840c39de9db1772a8dbc6d9781d8bc4b494dfe88412f12e2de209dd01d67ab593abb54fadda7067bfb836fe1be973b04bd8f1a040097eec821978","ssdeep":"192:aq+jACZsEnSwPyoVQXHwd7icnVkVBFVn9tFCQz9xRclt:qjSwPF8DH9twcIt","tlshash":"d6722d24a9c11437557372a58ff66b2afea98113c309930479ec27970fb3d418a67fac","first_seen":"2026-04-05T00:15:29.083369Z","last_seen":"2026-04-05T09:37:59.160223Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":22,"dns":8,"connect":1,"send":0,"wait":103,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/js/jquery.validate.min.js","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:03.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/js/jquery.validate.min.js HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/update.php\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:03 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 05 Sep 2025 11:50:58 GMT\r\netag: \"d7e8-63e0c73776c80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncontent-length: 23071\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FtNW3%2Bb2LbmOxEGJNXkqIi%2Ble2J%2FaELxP5L8PotSiZu9JbnSB5AnTROqxkhy3Mfq5q7%2BY17M8BTaJPYZj1jTmYHhQ%2FJvsX%2BuWJ3Nm8d0dngelLSI5CWyVhyruHYbxThE1HYS2LjyJw9u\"}]}\r\ncf-ray: 9e745b2bcac55690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55272,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (55129), with CRLF line terminators","md5":"b90491cc8829a48a3d61b3c66aec379d","sha1":"c7a6e79ec0eca3e381ea58e56f8b9578582fa21e","sha256":"c88dc980f7202e46ae3c9382344020f5f7f5a8c9c0ce2f8315ab5ca5c3e12441","sha512":"3c17fe3b59ce869912131fe90a58d1ceb460dc91d5df392dd9d0efc2d7aa8fc0535c22d85c6f0c4adf0612b87f7f4465d66a98572a571f6ba67ec67bc6893624","ssdeep":"1536:OSvA79qApiDmBvFpki7Ifg31SSgCtf2PSL:OrbBvFOgFSO1ESL","tlshash":"5e4373c43ee6f41141536b33366722abe33dec80a84d49d8f664f85cf86e57ce5a6a04","first_seen":"2026-04-05T00:15:29.084163Z","last_seen":"2026-04-05T09:37:59.151489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/img/favicon.png","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:03.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/img/favicon.png HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/update.php\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:03 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Sep 2018 07:48:30 GMT\r\netag: \"6db-57620840c8f80\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 1755\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xOc3Z28SpH%2FdOzUxA%2Bd4kft6QkwJ8wKVwGSq%2F4oGMEw6tGWoasbtwY5geBuUhG8Q71pjwXzBxI0B6Z2tvpb9oLEgXhzXcOFhQ0FMnCEgqiId%2BvNiQ%2BZNVFUuQ0jMTgIvLxkiZgeLBvt\"}]}\r\ncf-ray: 9e745b30aae15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3d194514babc5d7d010308a0f808ca51","sha1":"867e51e9b4a474c19da52d6454076c007a9d01f2","sha256":"7341f7b8b0ae3c0da4aea559efc31f0b53d9db9dd291664fdcf7d618fd95ed8a","sha512":"0f74161fa4324dab47e9152d8f771357506935ff028790c08d99bcb84d56ffe148995334e7da079a641994395d19b94615473846b932e44152a21c6ea6b7fc17","ssdeep":"","tlshash":"e731e9e05118afda2ce916cc091244bcdd5b6616c815dad1ecc9b4f82800f0ff5d5d9e","first_seen":"2023-04-21T18:59:15Z","last_seen":"2026-04-09T11:40:15.573726Z","times_seen":2760,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/img/msc.png","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:10.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/img/msc.png HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/files/css/none2.css\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:10 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Jul 2018 05:23:08 GMT\r\netag: \"121f-5718fb961a700\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4639\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1FrGaBFj7JYVn5QwhYyPjaN0J1m9BSEUVF4oPDs%2FZhYhTVlj9yCuOINrRjKHMRK26Ekh6M5yb4Ib4HLF91K%2B%2FdgL%2Bvnffv0i02FuGMmPFhar4MiuXSNZYbryZZtiTy61j7NSrlnl2OhY\"}]}\r\ncf-ray: 9e745b595bfb5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 25, 8-bit/color RGBA, non-interlaced","md5":"6654aa188f861f0d8705970b61f1f49b","sha1":"588b81ce1a508f9e9b043e31c3d034b33ea02809","sha256":"ed120beb869dfaf483128601dca83072784b5c8dfca4a54a2cb37f6409498832","sha512":"ab299e453130df46cd5cc45126293b941660273f91e372ee481a095452a05cd716c8b5fea5af00499fb3159108daa6f160ffc60895d65cd988a8be739387c040","ssdeep":"96:TllcHitlIxv9vk7C1+I4wWHLihk/xv2FbXb8fr/2tLEZG1xONwT:AIIHUCD4waozb86oMT","tlshash":"eda16d45f48146952109d9da28fb8d178957e590e2887a1cedfec01e42348312caabff","first_seen":"2024-01-01T17:17:04Z","last_seen":"2026-04-05T09:37:59.157071Z","times_seen":15,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/img/amx.png","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:10.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/img/amx.png HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/files/css/none2.css\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:10 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Jul 2018 05:25:22 GMT\r\netag: \"625-5718fc15e5480\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1573\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kGcPK1MCdPva%2Brj9PuvNaayPaZ4OGuyMFVE43KIGU38%2B2E3ENJ2d0gUXZoBTX8F3t6j6Wm%2Fp3NxsaY3tIGhCCvzaXZN9Lwci9Z22N40X4qDhmxuUcS%2BOMm0OaEX9G07En6SW0iZzXuJ1\"}]}\r\ncf-ray: 9e745b595bfc5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1573,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 25, 8-bit/color RGBA, non-interlaced","md5":"2b6385b88e8d05c5efaa6a1da2f7a5ba","sha1":"6fb21dcdf3bec17382fd86542390207f8a5cc2e4","sha256":"8ecdaac15d3a735629ac94ec194ea046e3387e8fb5315e043b093725bf21591a","sha512":"ef7a6aa7cef58e2d65b668a671c88ba6583f3587f436657d7144f034dc94fa665adaeef1e462fd63050e78c6c02c694756001d5fbfe44a1637706ba4fc01b047","ssdeep":"","tlshash":"0231954df2a0bc82476aaa4131f3501b61074f8097f0e9a1b9dedc2f67b00b4c4a92cb","first_seen":"2023-11-15T01:34:05Z","last_seen":"2026-04-05T09:37:59.158318Z","times_seen":22,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/css/none.css","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:03.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/css/none.css HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/update.php\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:03 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 22 Dec 2020 13:11:34 GMT\r\netag: \"245ae-5b70d5058ad80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 21377\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06f91zT%2Bd1adFKkgKP8z9qReJRsIpw1ke%2B1ajj6CXm%2BRIWkNd8Ge0%2Flk6BkJTJVum2mY84bW6kMMrdpXFwrXZsSoB2OXLgH2Vp2R77OUAeKjITMwCoXgIlXxs37D4%2FeRmbO57%2Bbt4rzf\"}]}\r\ncf-ray: 9e745b2bcabf5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148910,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (375), with CRLF line terminators","md5":"f1c287eb145ecb03b21e2c0d1a6165ed","sha1":"5f0ae41689046c822b45877c9ccd03bff63c2fc5","sha256":"996606e12517e3bb57e0a5f01fed3d7144e2d07a4d8076717a90285c351fa835","sha512":"f11903405279f40f95367f5ec17886ea94c6c4e2579239c688665db2ad2d83c3ce646b3378e524e0c45bce386c9216d6fa2fbac33e39a90e7e45225aad250586","ssdeep":"768:GDJPGDryjP0wM/kwbUqgnX29ZZw2uA0mp7jpea1FUJyJeRSxO3njwJ5+mwJ8J6I3:GljP0wM/keaSxOq+BgweinOhNtPaTbw","tlshash":"e2e3fe70ad07204f73039aa8b3f05b025f598462ae0789aef4d37d6d93d55b829b23dd","first_seen":"2023-04-05T07:45:07Z","last_seen":"2026-04-09T11:40:15.564864Z","times_seen":396,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/img/dsc.png","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:10.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/img/dsc.png HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/files/css/none2.css\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:10 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Jul 2018 05:24:56 GMT\r\netag: \"7d1-5718fbfd19a00\"\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2001\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nk36kUDPUmud6I4b7kXGkMj1EcisSxk9Pld2zTyDsLaDMEj9TfbEngLmRlhGgE1Q2JaIFXLb%2Bp6qgWETn1Q2YkdsT4u5rM%2FH%2FFH18xAdbSK1xguarCfSKWXXObjV65fXGlBbYTEZKLsL\"}]}\r\ncf-ray: 9e745b595bfd5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 37 x 25, 8-bit/color RGBA, non-interlaced","md5":"439bfcbd48d4f2e3b042f36e12a2d82f","sha1":"608a07e52979c03acea2aaa8e1e91e7f49533fff","sha256":"b1004d850a57ed3b94b18c7b7ef852b2641d91538a8e76192bb5ee7f2d52903d","sha512":"a66c50f9f246c013b11d3779c9f4969664fff55552b7658ea0e5d8b7ca43fe0fd672ea8e32da88ffb22b0f24c023574d21e90e6ce8c6ae955b270a9e3d8cccf9","ssdeep":"","tlshash":"e4410848e9c16c01a740899a40fb402faf3a4d819fc075b06d4fcc2e1bb15fa805c6df","first_seen":"2023-11-15T01:34:05Z","last_seen":"2026-04-05T09:37:59.159288Z","times_seen":20,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/js/modernizr.min.js","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:03.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/js/modernizr.min.js HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/update.php\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 17:07:10 GMT\r\netag: \"4e94-63de8a29a6b80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 8187\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S3bAnrsvhCtbD2izLB1AGxiByVQmZwsiAp7ZpQipz%2F7n%2FOx7Fvwd8OeQKxe%2FUdh%2BE8Ujok2Rv3eD8GShIy%2BA89nVmIwcCU1kU9RC3JtAWna6p0ng7ADnkrd%2B5hpM6vXbMhZFkRuHtXbB\"}]}\r\ncf-ray: 9e745b2bcac15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20116,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14856), with CRLF line terminators","md5":"67da488f35981b7c865123f7e97ed1e7","sha1":"29fc5c3bdcd93481c8c5debb335d074f1c4441be","sha256":"538803abb3e2032179657ded87f8d93b9d37b2481e50a6acde6a2951303bbe57","sha512":"3ef2de3837af678ce113e3ab65c14677dc3dd3db1704adfc645bb8f55be3bcba574d5be6f61f8f96418576fa05f23e06768bf4e3bdc21283a78ff7ea90c3a84f","ssdeep":"384:1EPDCHW519TpJGd+xesmAnx6KQoZRY5y60Hh1pfFIbvVrpezokUQMI1OhIS:1iDtjebAgKr25y60HLotrpezSQH1M3","tlshash":"c6921bcd725271099397607a61bf420ff13a98a9a8184854e059c8fcbe74dec027bf6e","first_seen":"2023-03-07T12:22:53Z","last_seen":"2026-04-07T23:51:31.256603Z","times_seen":216,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/js/jquery.mask.js","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:03.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/js/jquery.mask.js HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/update.php\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:03 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 03 Sep 2025 18:04:52 GMT\r\netag: \"5ce3-63de970f45900-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncontent-length: 5903\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Anxui9fgOk3VTGfDNUGa3IWrQ%2Bo1kpFgEFSPTNDr%2FQbHhWbvGGP4Od7TJrVujAPgAYn8AR9VzPIf9X629nSx5ZAAbvtmo%2F8Q4VUfSC%2B1ZbWtOZLpf1jF0p9HjnSr%2FTm3H9wwZO9M2k7F\"}]}\r\ncf-ray: 9e745b2bcac35690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23779,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7ee4f3bb62aadf9a654438c9802ace05","sha1":"4d3dfdcf69377ac217dc4e1029c5f93f9421bb2e","sha256":"f39d80646adf3df690bc1814b8a2fcfb02f83b69458a7e2fa41b73be4a7d6083","sha512":"5c01b08df2a0a3ddee4d1c86014aa083e911382e80a72a69b0bbf72729d386aefae63252d7bb7929cd03ceb08f4ad5197aee27bed70b24a5ff430c16cfae28de","ssdeep":"384:wvFSpq6C5UP/8QljzLbfUT5eSme/UdZiA1AB:wtP6XbfUQu8O","tlshash":"a6b26189395322725a7373bd8fab410dfbb6472300869601bd6d62815f31a6483e3fed","first_seen":"2024-08-20T12:03:24.33616Z","last_seen":"2026-04-05T09:37:59.163736Z","times_seen":5,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ntflx-reabonnieren.com/net/files/img/favicon.ico","fqdn":"ntflx-reabonnieren.com","domain":"ntflx-reabonnieren.com","tld":"com"},"ip":{"addr":"172.67.164.160","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ntflx-reabonnieren.com/net/update.php","date":"2026-04-05T00:15:03.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ntflx-reabonnieren.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 08:39:13 GMT","end":"Thu, 02 Jul 2026 08:39:12 GMT"},"fingerprint":{"sha1":"0A:0E:08:A3:CC:96:FF:53:4C:40:83:83:69:07:E5:CD:07:D5:50:67","sha256":"C0:60:BD:E4:B2:92:FC:DA:08:26:1C:74:38:66:23:B2:CF:EE:6F:FD:2C:9C:9E:77:0E:C4:E6:6D:B9:8B:CF:B5"}}},"request":{"raw":"GET /net/files/img/favicon.ico HTTP/1.1\r\nHost: ntflx-reabonnieren.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ntflx-reabonnieren.com/net/update.php\r\nCookie: PHPSESSID=m4jvvj28h0hhrk6iubhlljg52a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 05 Apr 2026 00:15:03 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 18 Sep 2018 07:48:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQrUI05kc%2BRrC%2BbdPhweTH8ClQkzNYLXUKGTwIUCY4l5tblJDcnimd02ZWLbVx%2F6KB%2B30jADjfUUfMeepAEShWlKX4DTc%2BJPk0a2NNdh5MOyzFeB7RnzEwtZs4VwtkfmhBb%2F1UdFYUlY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\netag: W/\"423e-5762085994a00\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9e745b30aae25690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16958,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel","md5":"41b45fdce09bd6acd07c7a8949da675e","sha1":"931e18dfc6e7d950dc2f2bbdfe31e1ea720acf7c","sha256":"abe8012eb65c0dc0ac3e87dcc1e60e1908ebd8f12b7c47a5df1856f7a7bb1edd","sha512":"a650426e681161f3673d5e56c1f6c45d609715f07e85b3a3b2c610d293fbcb04a882ac9f92e65977a7145ef45035d08870de3ab6ba331daa2ee2fb4b1ce83296","ssdeep":"48:vXswapDVp0m3T5xuzqnM6ly9mq2FtFe4iMFJ+fPHyc2/4:vcwkDVpr5YGiAVJHiyJ+Sc2/4","tlshash":"f372c8af60d3dd8dfe516ebad125cc38123c38e0edfc956bb0c14e2a0a1294266d39d0","first_seen":"2023-05-01T03:11:06Z","last_seen":"2026-04-09T11:43:19.057688Z","times_seen":6061,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-05","alert":"Phishing Block","trigger":"ntflx-reabonnieren.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-04-05","alert":"Sinkholed","trigger":"ntflx-reabonnieren.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}