{"report_id":"e81c20e1-f600-4630-9015-936774afa938","version":0,"status":"done","tags":["netflix","phishing"],"date":"2026-09-08T20:26:38Z","url":{"schema":"https","addr":"netflix-login-clone.vercel.app/","fqdn":"netflix-login-clone.vercel.app","domain":"netflix-login-clone.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"netflix-login-clone.vercel.app/","fqdn":"netflix-login-clone.vercel.app","domain":"netflix-login-clone.vercel.app","tld":"vercel.app"},"title":"Netflix","dom":{"size":5439,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"3e21972801683e4100d28b07f66d6008","sha1":"157f5320280a84e1f592a898dc5a7846ada68d0d","sha256":"a285e84f16675c2738adec95dce8ae8d29c82e1ad1aa5e539c7e197e45b9c844","sha512":"d1b3f37e6fdf53457039bb41d4ad351e218aeb0d0da6eaef358d4d147c94eda26302f38f1c04dd663a3770fcf9bf57b256bea9f513f2352e89c6e9516af5d5b6","ssdeep":"96:n6UB8YXp7F2VT8C2fdChBkrmbyBvpDLA36:6UBZXpJ2VTphBkOgZE36","tlshash":"56b152a285f3254720a3d1983ba017491b71d107de5fca2437ed63998fcbdc6d993389","dom_hash":"domhash706d4f2b54bdab0100b2660bd207302d","first_seen":"2026-08-22T15:30:42.732267Z","last_seen":"2026-09-08T20:26:40.07144Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"netflix-login-clone.vercel.app/","fqdn":"netflix-login-clone.vercel.app","domain":"netflix-login-clone.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-13T20:26:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"netflix-login-clone.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"netflix-login-clone.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"netflix-login-clone.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"cdn-icons-png.flaticon.com","ip":{"addr":"95.101.10.49","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-05-10","domain_rank":239972,"first_seen":"2021-09-02T06:55:19Z","last_seen":"2026-09-05T00:06:34.835246Z","alert_count":0,"request_count":1,"received_data":2874,"sent_data":575,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets.nflxext.com","ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"domain_registered":"2011-02-11","domain_rank":22756,"first_seen":"2015-07-22T04:02:07Z","last_seen":"2026-09-04T20:17:38.904452Z","alert_count":0,"request_count":1,"received_data":307793,"sent_data":705,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-06T23:16:32.201366Z","alert_count":0,"request_count":1,"received_data":194316,"sent_data":556,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"netflix-login-clone.vercel.app","ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-22T15:30:38.80168Z","last_seen":"2026-08-22T15:30:38.80168Z","alert_count":12,"request_count":3,"received_data":9735,"sent_data":1518,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Bootstrap:1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-login-clone.vercel.app/","date":"2026-09-08T20:26:10.783Z","timestamp":1788899170783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://netflix-login-clone.vercel.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-login-clone.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.2.0-beta1\r\nx-jsd-version-type: version\r\netag: W/\"2f3f9-YnOsGiPXmhIvAi9qh8W3XCz6/Do\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 08 Sep 2026 20:26:10 GMT\r\nage: 3745254\r\nx-served-by: cache-fra-etou8220069-FRA, cache-bma-essb1270038-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 28778\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193529,"size_decoded":29565,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"6d9c6fda1e7087224431cc8068bb998f","sha1":"6273ac1a23d79a122f022f6a87c5b75c2cfafc3a","sha256":"fb1763b59f9f5764294b5af9fa5250835ae608282fe6f2f2213a5952aacf1fbf","sha512":"a3f321a113d52c4c71663085541b26d7b3e4ced9339a1ec3a7c93bff726bb4d087874010e3cf64c297c0ddd3d21f32837bc602b848715eadd8ef579bfe8e9a9a","ssdeep":"1536:xtGMGH2K5wlP7WIgHf73Z6LsKkVkpz600I4lp:xtGMZvkVkpz600I4lp","tlshash":"be1482d6f190303d98a7c2499591fefd866fa585d7024aaaf0137b6847ca7c30963ecc","first_seen":"2023-04-06T08:38:45Z","last_seen":"2026-09-08T20:26:40.075632Z","times_seen":4858,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":11,"connect":9,"send":0,"wait":10,"receive":3,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-login-clone.vercel.app/style.css","fqdn":"netflix-login-clone.vercel.app","domain":"netflix-login-clone.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://netflix-login-clone.vercel.app/","date":"2026-09-08T20:26:10.786Z","timestamp":1788899170786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: netflix-login-clone.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-login-clone.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1497217\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"style.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Tue, 08 Sep 2026 20:26:10 GMT\r\netag: W/\"fb13046c276c92090b6875de371391f1\"\r\nlast-modified: Sat, 22 Aug 2026 12:32:33 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dc58b-1788899170790-1f4a56be056f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2584,"size_decoded":1467,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fb13046c276c92090b6875de371391f1","sha1":"4861e88db68f5d5105418ba39aae7a7b2374a65c","sha256":"f26ff782c47a41704715932621680fe34d8798358fc3c877f0e00692581b44bc","sha512":"8bd1947143c9371cdb6d98300ae1ef7a5ff72eb872e84523b195e072b835dd9a71c8e2bbd205204c797a7f342e23551efd6c41a33f3c89286caa93cf1044143c","ssdeep":"","tlshash":"7751fb1ac25320437173e6982b700789c774818bdf5b866c33ea33909fba49c9693fd9","first_seen":"2026-08-22T15:30:42.735482Z","last_seen":"2026-09-08T20:26:40.077044Z","times_seen":3,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"netflix-login-clone.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"netflix-login-clone.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"netflix-login-clone.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn-icons-png.flaticon.com/128/5977/5977590.png","fqdn":"cdn-icons-png.flaticon.com","domain":"flaticon.com","tld":"com"},"ip":{"addr":"95.101.10.49","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-login-clone.vercel.app/","date":"2026-09-08T20:26:10.793Z","timestamp":1788899170793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.flaticon.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 06:14:08 GMT","end":"Sun, 01 Nov 2026 06:14:07 GMT"},"fingerprint":{"sha1":"A6:F3:8B:7A:AF:0D:36:E9:87:89:0B:D5:FC:12:43:BC:B6:12:56:D2","sha256":"F0:29:E3:97:07:E1:FB:FA:85:99:31:BE:7B:ED:EC:5B:5C:B4:0F:C1:28:ED:DC:08:8E:F1:90:D2:55:89:3F:95"}}},"request":{"raw":"GET /128/5977/5977590.png HTTP/1.1\r\nHost: cdn-icons-png.flaticon.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-login-clone.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-length: 2338\r\netag: \"7918a01f05d75465b312ca138a784da8\"\r\nlast-modified: Wed, 14 May 2025 11:25:51 GMT\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\ndate: Tue, 08 Sep 2026 20:26:10 GMT\r\nalt-svc: h3=\":443\"; ma=93600,h3-29=\":443\"; ma=93600\r\nserver-timing: cdn-cache; desc=HIT, edge; dur=4, ak_p; desc=\"1788899170833_1600457261_633835529_421_1248_1_21_11\";dur=1\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\npragma: public\r\ncache-control: public, max-age=31536000\r\nx-default-rule: YES\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2338,"size_decoded":2874,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"7918a01f05d75465b312ca138a784da8","sha1":"38ded450d60e1dcab0026dbdb262adc65be68be1","sha256":"6aed6552d4d236d25b6900bacefeb9ed1d8b66e037d91079a833a7b67796deb6","sha512":"cfd5f7a12e943ea07eeed08507f67557d9c7867f8f063b72f00712e553fc52327218b85cd2950c87ad28ca5282de26e65eb005840e182bca63ac77bd9d398bdd","ssdeep":"","tlshash":"0b412beb75cbc54ac9a3941e7114a6760d32030846285235e2bbefbfe14b47890b5fdc","first_seen":"2023-10-20T02:37:31Z","last_seen":"2026-09-08T20:26:40.07819Z","times_seen":33,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":38,"dns":0,"connect":1,"send":0,"wait":9,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.nflxext.com/ffe/siteui/vlv3/c732cb00-be61-4d64-b8c3-99f022e7a123/eceef24d-4920-430f-988b-d2f48f8ad060/IN-en-20220620-popsignuptwoweeks-perspective_alpha_website_large.jpg","fqdn":"assets.nflxext.com","domain":"nflxext.com","tld":"com"},"ip":{"addr":"45.57.90.1","port":443,"asn":40027,"as":"NETFLIX-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-login-clone.vercel.app/","date":"2026-09-08T20:26:10.865Z","timestamp":1788899170865,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":""},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 02 Sep 2026 00:00:00 GMT","end":"Wed, 07 Oct 2026 00:36:22 GMT"},"fingerprint":{"sha1":"6C:0C:D8:F7:D9:28:53:8A:CE:B3:4F:CE:DD:B0:20:B1:B7:26:39:CA","sha256":"FF:C5:7F:47:CA:BA:69:69:74:52:16:1F:6F:8E:39:B7:85:62:B2:94:A7:68:A3:33:EB:1F:71:A7:56:48:FD:96"}}},"request":{"raw":"GET /ffe/siteui/vlv3/c732cb00-be61-4d64-b8c3-99f022e7a123/eceef24d-4920-430f-988b-d2f48f8ad060/IN-en-20220620-popsignuptwoweeks-perspective_alpha_website_large.jpg HTTP/1.1\r\nHost: assets.nflxext.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-login-clone.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Tue, 08 Sep 2026 20:26:10 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 307466\r\nConnection: keep-alive\r\nContent-MD5: oCReiZtSYPpNvPZiaPVuLw==\r\nLast-Modified: Wed, 22 Jun 2022 14:04:02 GMT\r\nCache-Control: max-age=604801\r\nExpires: Tue, 15 Sep 2026 20:26:11 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":307466,"size_decoded":307793,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"a0245e899b5260fa4dbcf66268f56e2f","sha1":"6d01cb50a5b85247ca1f98fa2398cd29406b0541","sha256":"b0cc4578e4b5854cf073e19b02d2f796684d14287bfb3f1daf97b135bffb459d","sha512":"db4f814c1d13fc87df35078cab41dffbfb13d5626ebaa6e2912153881597837d7b0ed4b15d949ccb0fa1c0358f463b74549dc0818e63fd8d14a10a82107cae8a","ssdeep":"6144:qEr1Op8EyWhbP7zaCIY1xd8O2Q37oZsI8dg9n6dorsjV/ZZnpjLzreHm+uLPSd3A:D68EyWhbWY1x1r7wL8Wl6dorsjVhZnBD","tlshash":"b764235a6ce1ddbbc593537f108092cb5b3b9412e2cfcfadba40529cea905922413ad8","first_seen":"2024-08-20T06:36:58.909581Z","last_seen":"2026-09-08T20:26:40.079228Z","times_seen":4,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":18,"receive":90,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netflix-login-clone.vercel.app/favicon.ico","fqdn":"netflix-login-clone.vercel.app","domain":"netflix-login-clone.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://netflix-login-clone.vercel.app/","date":"2026-09-08T20:26:10.986Z","timestamp":1788899170986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: netflix-login-clone.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://netflix-login-clone.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Tue, 08 Sep 2026 20:26:10 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::jbdxc-1788899170990-ca3eae6ebe37\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":432,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"c65cc70e9a700a944859098cb64e22f3","sha1":"aca9fd14d81a12c4ca78d7eba9740e5e8eeb26d4","sha256":"2f0679bf2c896706a36f96ff17e5bc152970d0cc7c9d554ca3ed6b7774247c3c","sha512":"76d1d1fd6a79017e06243c567da8e5321f46d45e62c7bcdeb8bcdcb41870188a1e00ef38c60090f7315ce6decedfa34c986b0147cdc8e97bf2c48d595b0a20c1","ssdeep":"","tlshash":"aba0121d0b450e0c37c8040039071334050419115e15aa0050895b0022204ced340090","first_seen":"2026-09-08T20:26:40.080135Z","last_seen":"2026-09-08T20:26:40.080135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"netflix-login-clone.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"netflix-login-clone.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"netflix-login-clone.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"netflix-login-clone.vercel.app/","fqdn":"netflix-login-clone.vercel.app","domain":"netflix-login-clone.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.131","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-08T20:26:10.324Z","timestamp":1788899170324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 19:48:09 GMT","end":"Fri, 27 Nov 2026 19:48:08 GMT"},"fingerprint":{"sha1":"E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC","sha256":"8F:46:C4:A0:A2:89:BF:DE:40:60:D0:69:86:F2:AF:76:1E:E6:2D:66:8D:DE:97:2E:6B:EF:46:87:EE:4F:60:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: netflix-login-clone.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 421226\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Tue, 08 Sep 2026 20:26:10 GMT\r\netag: W/\"05f40abd68ee58b710b750da3ecfb3cf\"\r\nlast-modified: Thu, 03 Sep 2026 23:25:43 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::75ltc-1788899170377-092f72b1823c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap:1","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5673,"size_decoded":2538,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"05f40abd68ee58b710b750da3ecfb3cf","sha1":"75745d801f1f6d4f03e5cce56d2f188a37670e63","sha256":"0bbddd5be39518a6d6084d87f40aec2f5e17617638d33bc6730528facba03f0d","sha512":"63039e6827f981230b6871c4d5c7621de443bd9ccc6546d76287b912b99a2b748543c09f72e1e7929d9cd5064628db0bbb743c1bf229f25e70b1191b2f364d87","ssdeep":"96:BEBGx8zRz4AKucfWUu6NyFV+EekuGLeB53ZYFM:BEBwWz43ufEG+EekXQtCFM","tlshash":"33c14165c5d210036173c2d827b05788ebb28147cf5b8a2437ed63939fbbc48daa3ad5","first_seen":"2026-08-22T15:30:42.733657Z","last_seen":"2026-09-08T20:26:40.082608Z","times_seen":3,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":17,"connect":2,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"netflix-login-clone.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-08","alert":"Phishing Block","trigger":"netflix-login-clone.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-08","alert":"Sinkholed","trigger":"netflix-login-clone.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}