{"report_id":"eb46fa47-e433-4c37-aca0-b1165710ed09","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-03-26T13:48:03Z","url":{"schema":"https","addr":"ughfjdu-ten.vercel.app","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/login","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"title":"Netflix","dom":{"size":7006,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7002), with no line terminators","md5":"290e3cff6beef660918fa5f7d062ab04","sha1":"e5ffa4b3ef7d694dd692deec21f61574a0ee4c4b","sha256":"4c8e72c28a2584b26aecaf5520798d37be5f5979b5859a6b2bf0b64a6ce725ef","sha512":"b90f4d01094bb0e11da65c6ae38b92081db60240f261e9c338944068849abedd25cb1759d81029f52c3312213f3867d94b4f1188467452f963385dce85b9f167","ssdeep":"96:zvcZuDnnzhT+K0ggKc0xQ2YggCzWfEJ9cf+O8HZZlkZs+lqxUSqzqkdjrc+z9cnK:DcZuDnnzhT+yxQ2t6KbOe+lqxUS6224i","tlshash":"45e195b0de01cd8bdc23695eb03eef7850cd851bd6abce5862ecce482391d724a549e1","dom_hash":"domhash9546755b389b1ce22e1f0f19a44cb277","first_seen":"2026-03-26T13:48:04.609898Z","last_seen":"2026-03-26T13:48:04.609898Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.67","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T13:48:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"ughfjdu-ten.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2026-02-11T02:33:59.556297Z","last_seen":"2026-03-26T13:15:34.815284Z","alert_count":75,"request_count":15,"received_data":716335,"sent_data":7176,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-08-15T02:08:47.432829Z","times_seen":101436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"adc1308061aa82e301dabf704b53a813","sha1":"ed406d01fbaac3d8a99a9266fd7327a1712f0fcc","sha256":"b48cece92971ff1cf779fa9a4f96179529c1fc4aced7f4049fab715f1d3cc031","sha512":"b1ae7f2fc4c45beadbd33b43c5e7691c06ef27b65e97f081c9c775790dc70f252edbe2c8596731ee9e63fa87f3b55d2ce9f4de7288f9b40be2126fafd4d9c584","ssdeep":"","tlshash":"73a01228c008dc5942300047003e1910809cc60d5290504423b4d5dd4090cb82284c84","size":86,"data":"","first_seen":"2026-01-13T00:15:05.623663Z","last_seen":"2026-07-22T14:57:10.468273Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b4bb78d6ee2182c79155b92003c8e001","sha1":"a9a87f28f165ab111895b9b6a07be67093deb07f","sha256":"7e4899b5effd84957896a0a146e030571c2c8fa12bcc9be47dcbfccf7bf29c17","sha512":"2e687200194757ba4f6dce97b8371044aede4d72c3fb13da0a5463901d82f6e6fc8c6c5f8a88e79cdec0b0ec2066a525d180808aaa89669aad8b3e4195ad8462","ssdeep":"","tlshash":"b531dc7e9502dd8becaa3d5a427f9c3264ccc83b4761ddb842dece08171697a26c9dc0","size":1510,"data":"","first_seen":"2026-03-26T13:48:04.623852Z","last_seen":"2026-03-26T13:48:04.623852Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/app/page-64632f1cf75b606e.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf4e9ff261eb706c868a38cee0703673","sha1":"a474e75834860aaa3489dac2100a0294da1027ad","sha256":"c036883cac86d0499aabc6af07f381c34627466fc86471a9090a38ebec36a19e","sha512":"b2a12f30a756449398c0c00c0ae43bf2bd9c6b1395634a79e5136906704c965fdf7f3b9147c9d4bf69e69e3180aa58b31b0d971679df1bb1842239b6ee60e463","ssdeep":"","tlshash":"1ef0c049bcc378041e9f14f4513bc48961fa0c6f38288491d57088d27c7251d8273f4d","size":518,"data":"","first_seen":"2026-02-14T17:05:14.395002Z","last_seen":"2026-07-22T14:57:10.463277Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/fd9d1056-1f9bd2c1b1f9ce48.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","size":172834,"data":"","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-08-15T01:35:07.732429Z","times_seen":4665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/117-8da57966bdd63c53.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","size":124364,"data":"","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-08-15T01:32:19.645544Z","times_seen":2275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/app/login/page-481ee601ac8222c1.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4ee656bfb2e7cae030f2b6621b0908d","sha1":"ff04b7dc6694ffccfc5fea94c58db3018c5c9795","sha256":"412a97632de9f1280c5bf051ad766a342d4f8c598ea1d33b5b5fab0eb15106aa","sha512":"03e0fd5443903cae2b97696facd8ea117f9fc4ea8ce72e0835088c3e24e58217e4a73e6f0381cc943c0b36d8fb319bf7ad78064b4633d91a7e1749995464f569","ssdeep":"","tlshash":"15818f04f191afdcf9a708a4656fa44cb12f4a9ace4f49b5bab4a41125c309c3a03fc9","size":4075,"data":"","first_seen":"2026-02-11T02:34:01.782066Z","last_seen":"2026-07-22T14:57:10.46558Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a7206db1994b57e639a1f8bd6bd39a9","sha1":"2073aaa88feb224242b5b6f46571556c6a006551","sha256":"ee98c27f81a1d9566d593e9e163c6469af170ae964dec966e8305c724fc01483","sha512":"54ea96a8d33ac3afc88fc9ef34975a7630a8f082aea24f424d8cd320f9a9dd2ca2582bb36825aebcdddf8e35dc16b834c673d0d962b132cecc1a7eb9332f9a8d","ssdeep":"","tlshash":"b4e0cd619c01dd1dc75b5f651c3f1c7920ddc3794245964699c4dd140943e754af2ec5","size":316,"data":"","first_seen":"2026-01-13T00:15:05.629311Z","last_seen":"2026-07-22T14:57:10.469654Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/main-app-2dcde4753ea0d175.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","size":461,"data":"","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-08-15T01:32:19.737503Z","times_seen":1740,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/145-79cf2224e3b5e4f0.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ee423bfd61fe11f929f20babc9fac04","sha1":"27495b0f342c553aa662fe9ee383bb1fb8e4d803","sha256":"95bb4d4907c1756f6f9f623af126bed3d6c00d03142a36ce7aa11db9b557e4e9","sha512":"739e42fb872d7e5cf6b37584422d3dd0bb292d81f695c0d08acd59457ce3af83958c64373fee1c7fe0a3e92b41a72480fbe0d00d5abc5cd95418be1817af1bc4","ssdeep":"192:FGr9W25JmtJ6/khfI2BjlwJY13M8nuFIaHDtau27fcMRFVYxu4BvqK4:FI8CJm9hfRoGOht47fdd4h2","tlshash":"7b522a7731d4f8ea238b80d1987f000df3755d76662ab14467a9c8c9e6f0158b163fba","size":14205,"data":"","first_seen":"2025-06-03T03:41:47.581082Z","last_seen":"2026-07-22T14:57:10.457958Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/webpack-616e068a201ad621.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bea5b71f74cf46b4b79944526511ea04","sha1":"1fa22228ffe2cd1b870659c19f0b1ce80587e75b","sha256":"e24b7ffb75aabb09548e5c30def45a11815a2fe4d91c289fe929cf8b83ee1e2c","sha512":"519206b5f4f475fb078090e0431228709168253971b8609252a5cf221fd24fa1dc61253b39e98524fe62da29cd8c6e32c8fb83676a72fcdda93ed864e2b465cf","ssdeep":"","tlshash":"0781b7ed7161f8b9178350e1003fd456b63b24b2291ee4a0ca1dd8f8fc349488613fa9","size":3996,"data":"","first_seen":"2026-02-11T02:34:01.778751Z","last_seen":"2026-03-26T13:48:04.621953Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/117-8da57966bdd63c53.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/117-8da57966bdd63c53.js HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3708\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"117-8da57966bdd63c53.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: \"9cb6b0f0a1fa627863d07362f4ad12b1\"\r\nlast-modified: Thu, 26 Mar 2026 12:45:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/117-8da57966bdd63c53.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lj5lw-1774532861508-07e90a72eb49\r\ncontent-length: 32932\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":124364,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d13e87eb771cb1dc6c862544c92dd720","sha1":"846bf0013f880dd962a499008ad7b3c7fba8937f","sha256":"7bd6f41cfe0ce8b68c0fcfc0c580bf3f21c9d7b49f22665e6b21bb5ef49b476a","sha512":"1ba96f22742f8333dbe47235b5a037bb8c4764d0554ab1d6d1edad2fc722d6dbbdef50f5c89cb5daa9f8f6e684bcf53db54a3a7e237b1ed218b832bb75d809a7","ssdeep":"768:fO9P55e7wbSlPftVDK//d9icrEAKH1ag8xxqKjj3fOpDKdlr/NaO8Qr93UsGoROz:Ugw2l+Wc3mY5jFdl/iPsibn2kJ51oCv7","tlshash":"bcc3d8ba71d0f8e2079744e5843b400af3791c3b146f70a0a7a5cdd9b5a44eea1a3f5e","first_seen":"2025-12-16T15:37:48.63769Z","last_seen":"2026-08-15T01:32:19.645544Z","times_seen":2275,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/image?url=%2Fbg.jpg\u0026w=1920\u0026q=75","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/image?url=%2Fbg.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1622131\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bg.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\nlast-modified: Wed, 04 Feb 2026 16:08:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept\r\nx-matched-path: /bg.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dcbrz-1774532861727-5afa01ee638a\r\ncontent-length: 206426\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":158624,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3065aa42254847021621ee30b5ad9279","sha1":"af88d9514390150ccd2d109e03cf0ff14740fe13","sha256":"b4a8c390d31711da91d1625e7df21cab38e1f93335612b0a3bf162b2d37e5725","sha512":"c2c447d22d3dc7753ab65e0a335e58c625739f4c249424b39c127fc43c3aa5a357763db945cbc768afe86579079f75a7afb47c5e20c46756b699868413f4d4ed","ssdeep":"3072:rPhswTj/t0byiS5bEVjH3GfIfw9RlVEND/DdBoH/R4ZpyjYf5t:rPhswFo+b+3GfIITuhyNjc5t","tlshash":"5df312cf21ce6c58201b66e7ea64c6b14e2e2777544f3afe4004670a89bc2db10de4e7","first_seen":"2026-03-26T13:48:04.612143Z","last_seen":"2026-03-26T13:48:04.612143Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/image?url=%2Flogo.png\u0026w=128\u0026q=75","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/image?url=%2Flogo.png\u0026w=128\u0026q=75 HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1603257\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\nlast-modified: Sun, 08 Mar 2026 00:26:44 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept\r\nx-matched-path: /logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dcbrz-1774532861761-1982a526faa7\r\ncontent-length: 2542\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2542,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b4b0b4342b798b8977dbcac4500ee304","sha1":"5f7128f182547c67c70efc7382a15f1e3e9635bc","sha256":"c91e5c7489cdb50120781aac98954801fbe6ef06c35bc5720433d14fbf88590d","sha512":"a9ac7b1610e7da5eb52e2775ab0c4b762281a0b8ba8871d9ea519695d4ad9331b87dbc2d49aab533cd2b1f15920d82c5611a407f00c6f40382e5881afc03dde9","ssdeep":"","tlshash":"c3514ccb12e4273d1a9b4010b4c75af3e0158c240724ee72f1b9c97c44d5ab05f42618","first_seen":"2026-02-11T02:34:01.786097Z","last_seen":"2026-07-22T14:57:10.466702Z","times_seen":15,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/app/page-64632f1cf75b606e.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/app/page-64632f1cf75b606e.js HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3708\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-64632f1cf75b606e.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: \"bf4e9ff261eb706c868a38cee0703673\"\r\nlast-modified: Thu, 26 Mar 2026 12:45:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/page-64632f1cf75b606e.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dcbrz-1774532861511-4eea6219f4f9\r\ncontent-length: 518\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":518,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (518), with no line terminators","md5":"bf4e9ff261eb706c868a38cee0703673","sha1":"a474e75834860aaa3489dac2100a0294da1027ad","sha256":"c036883cac86d0499aabc6af07f381c34627466fc86471a9090a38ebec36a19e","sha512":"b2a12f30a756449398c0c00c0ae43bf2bd9c6b1395634a79e5136906704c965fdf7f3b9147c9d4bf69e69e3180aa58b31b0d971679df1bb1842239b6ee60e463","ssdeep":"","tlshash":"1ef0c049bcc378041e9f14f4513bc48961fa0c6f38288491d57088d27c7251d8273f4d","first_seen":"2026-02-14T17:05:14.395002Z","last_seen":"2026-07-22T14:57:10.463277Z","times_seen":5,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/145-79cf2224e3b5e4f0.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/145-79cf2224e3b5e4f0.js HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3708\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"145-79cf2224e3b5e4f0.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: \"e19ec56d37cf1caf28453ff4ae5c3978\"\r\nlast-modified: Thu, 26 Mar 2026 12:45:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/145-79cf2224e3b5e4f0.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dcbrz-1774532861686-7c139481ceef\r\ncontent-length: 5534\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":14205,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14205), with no line terminators","md5":"9ee423bfd61fe11f929f20babc9fac04","sha1":"27495b0f342c553aa662fe9ee383bb1fb8e4d803","sha256":"95bb4d4907c1756f6f9f623af126bed3d6c00d03142a36ce7aa11db9b557e4e9","sha512":"739e42fb872d7e5cf6b37584422d3dd0bb292d81f695c0d08acd59457ce3af83958c64373fee1c7fe0a3e92b41a72480fbe0d00d5abc5cd95418be1817af1bc4","ssdeep":"192:FGr9W25JmtJ6/khfI2BjlwJY13M8nuFIaHDtau27fcMRFVYxu4BvqK4:FI8CJm9hfRoGOht47fdd4h2","tlshash":"7b522a7731d4f8ea238b80d1987f000df3755d76662ab14467a9c8c9e6f0158b163fba","first_seen":"2025-06-03T03:41:47.581082Z","last_seen":"2026-07-22T14:57:10.457958Z","times_seen":42,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/css/4badee37d02622ff.css","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/css/4badee37d02622ff.css HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 904971\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"4badee37d02622ff.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: \"5b07e435dc3d0733a6eb154d231f2377\"\r\nlast-modified: Mon, 16 Mar 2026 02:24:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/4badee37d02622ff.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zfz4k-1774532861506-f276da24b734\r\ncontent-length: 3059\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11239,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11239), with no line terminators","md5":"7d8bed8a07312d227b3367bb277d8c62","sha1":"4873e611adb8df686d8490ea028e0e59a1331d5c","sha256":"7e1757abcc3f5ef5b7230057772d0197cf5efdf88e1fbe027209440029dc1875","sha512":"080c18f16b7601837c6edb6dbe27c9788375ea4e6d4da776959a3ba8f82c0c3ab9d93f635b7edad8279c6429dbcff5134f092a626d7f6ed9214906c3842da602","ssdeep":"96:oStw7m4rBebdVm7y9eP7J+OY/AT37J+OY/ATgVcbnPWanyRcnU7knv7P60mDMilr:oGw2s7JXYS7JXYiVkSSHtBie","tlshash":"3a32841da611053a7c2784fbd5a4fa59b026a0c2de3ad7e7ad836500fbe67f718d3204","first_seen":"2026-01-13T00:15:05.611549Z","last_seen":"2026-07-22T14:57:10.458724Z","times_seen":23,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/fd9d1056-1f9bd2c1b1f9ce48.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/fd9d1056-1f9bd2c1b1f9ce48.js HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3708\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"fd9d1056-1f9bd2c1b1f9ce48.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: \"556dd9b4b34d9530b34857c272aaf4eb\"\r\nlast-modified: Thu, 26 Mar 2026 12:45:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/fd9d1056-1f9bd2c1b1f9ce48.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bxcd9-1774532861507-86e984576217\r\ncontent-length: 55209\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":172834,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d70ea42503ecdf865cc5b50951e7a260","sha1":"d6024cc44a508c5e42bccc99aa6939490273b3a3","sha256":"b8bddf9481d859d648e1e050f8322eb3defe3dd3f9bd13f4c44dd6f2ecf5ab80","sha512":"c38885a712287d6c88b14f3a78df8b03c671a1e8fe71ec680edad591b056eabd5cc510e7cf2b565d94779bbb258ca49068d31adb94d343d59c653c57e77035ee","ssdeep":"1536:PVjExazug79h2U4kcNxakmBjt4oGZlibTR5ikxYhlUuRNka2wblHiN+wL8z9Ggum:3zug758kkEiXjOAprX2wd5WjguGOK","tlshash":"50f3f8e83995f6666eb30277009f1803737c262b280d4d60a211fd9eb5b845eb17bfd9","first_seen":"2025-01-18T11:47:06.649614Z","last_seen":"2026-08-15T01:35:07.732429Z","times_seen":4665,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/favicon.ico","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccess-control-allow-origin: *\r\nage: 14188\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"404\"\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: W/\"11e957044c03896e6001aae13a93ec9b\"\r\nlast-modified: Thu, 26 Mar 2026 09:51:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /404\r\nx-next-error-status: 404\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dcbrz-1774532861559-e010a116ee35\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3599,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3593), with no line terminators","md5":"11e957044c03896e6001aae13a93ec9b","sha1":"49a8d94ac9bfa13d4d46fdd7d929da132a551e55","sha256":"87ba74208305a7658731241536968483e2d3609980c09f6de4647131d832b14b","sha512":"f5e66b8319f8bc38634f2c93da3fd2da6f474d2f08bcdab13c0e6d7a74cbbf42295d11dab6effcd91c56acf2c071429b8227088e3e075ec72f6106f048b2ca5b","ssdeep":"","tlshash":"a071f17a9c05dd4bdd7a3d6d443fac3a14ddc83b8b25c95892ddce081642a792bcadc0","first_seen":"2026-02-11T02:34:01.787206Z","last_seen":"2026-03-26T13:48:04.617062Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/main-app-2dcde4753ea0d175.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/main-app-2dcde4753ea0d175.js HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3708\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-app-2dcde4753ea0d175.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: \"ace3268523ca829896f160bf5401feab\"\r\nlast-modified: Thu, 26 Mar 2026 12:45:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-app-2dcde4753ea0d175.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dcbrz-1774532861510-72a0672c6aed\r\ncontent-length: 461\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":461,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (461), with no line terminators","md5":"ace3268523ca829896f160bf5401feab","sha1":"4062a8402cf24a1ccd0d38752462535e922f4cf8","sha256":"d7008163f1ed16ecb840d251190ac8a9d02132df87f25781faef1499945f9bdc","sha512":"f784ee7190413f445f0e16ed2f564f87c8183172462889739ac3f812be0e9d14762bcf1e55e794e14a8a62e6e3348f6b5c008efb66c7a2692cca98b742287486","ssdeep":"","tlshash":"def082992b4c702f2913ad24fdd35c2e255e416428a719501a04ddb12c336a893f1c39","first_seen":"2024-10-04T10:20:35.510701Z","last_seen":"2026-08-15T01:32:19.737503Z","times_seen":1740,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/login?_rsc=8kzk2","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /login?_rsc=8kzk2 HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nRSC: 1\r\nNext-Router-State-Tree: %5B%22%22%2C%7B%22children%22%3A%5B%22__PAGE__%22%2C%7B%7D%2Cnull%2Cnull%5D%7D%2Cnull%2Cnull%2Ctrue%5D\r\nNext-Url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1553302\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/x-component\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: W/\"6bf527d80e9ae07ef81f51fe1d1d9131\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /login.rsc\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dcbrz-1774532861613-1ddc6d99d3cc\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1740,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1308)","md5":"d84996698d14d73de2c393e936ca682c","sha1":"8d23568eafbb1efd070d644a9391aa9148a67e74","sha256":"687c0ae04c829608f0adc2074e2d985c095496cf26c1f2bea61e708f2996f97e","sha512":"71bd07acdb84719783d5c41287ec27635f63064fb594be9140d6b9e3ff703f4ed0e3df0067e1fc401e2a314ff482cf45acc68d30a5ce1e148da72585d2e9e019","ssdeep":"","tlshash":"d13168364a0ad97a5fbb01e1451fc60a76ac8a7767214cf0c6ee9e2c17653361ecf2d0","first_seen":"2026-03-26T13:48:04.618368Z","last_seen":"2026-03-26T13:48:04.618368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/app/login/page-481ee601ac8222c1.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/app/login/page-481ee601ac8222c1.js HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3708\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"page-481ee601ac8222c1.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: \"88c96b68ad76e6c4d0efdc1dae35ca0e\"\r\nlast-modified: Thu, 26 Mar 2026 12:45:53 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/app/login/page-481ee601ac8222c1.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dcbrz-1774532861688-431dc798aa2d\r\ncontent-length: 1529\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4075,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4073), with no line terminators","md5":"f4ee656bfb2e7cae030f2b6621b0908d","sha1":"ff04b7dc6694ffccfc5fea94c58db3018c5c9795","sha256":"412a97632de9f1280c5bf051ad766a342d4f8c598ea1d33b5b5fab0eb15106aa","sha512":"03e0fd5443903cae2b97696facd8ea117f9fc4ea8ce72e0835088c3e24e58217e4a73e6f0381cc943c0b36d8fb319bf7ad78064b4633d91a7e1749995464f569","ssdeep":"","tlshash":"15818f04f191afdcf9a708a4656fa44cb12f4a9ace4f49b5bab4a41125c309c3a03fc9","first_seen":"2026-02-11T02:34:01.782066Z","last_seen":"2026-07-22T14:57:10.46558Z","times_seen":15,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/image?url=%2Flogo.png\u0026w=128\u0026q=75","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/image?url=%2Flogo.png\u0026w=128\u0026q=75 HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T02:46:20.262176Z","times_seen":17896252,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/image?url=%2Fbg.jpg\u0026w=1920\u0026q=75","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/image?url=%2Fbg.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/login\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1622131\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bg.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\ncontent-type: image/webp\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\nlast-modified: Wed, 04 Feb 2026 16:08:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: Accept\r\nx-matched-path: /bg.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::dcbrz-1774532861763-cc037301acbb\r\ncontent-length: 206426\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":206426,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"055b504a32357ffedd49404bbbf8458c","sha1":"701dc0790208981455160925ad60d513ee24810f","sha256":"198b23173ce49888ea02eb5153b92bebfa74301490cb30648d7436398a23e2ad","sha512":"87a5257264f31394450ae19ab60b82f6490d814621d656080a6e37cf63817bcaca921c8b5dde63839d0604e2abbe843e164dbb3e126fd7c77e9375458664d1f8","ssdeep":"6144:rPhswFo+b+3GfIITuhyNjc55sAsS0PKrd:rPuA5qwFiY45npZrd","tlshash":"0e1422de61cfac15101ba6e3e758c7a28a863773210f1abe5109ab0dd9bd1c750ce4e7","first_seen":"2026-01-13T00:15:05.573096Z","last_seen":"2026-07-22T14:57:10.461018Z","times_seen":23,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T13:47:41.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 1553302\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: W/\"7e5e7ab1a998e16ea76c68b90372cbf7\"\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch\r\nx-matched-path: /\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gcmjf-1774532861258-4ade8aa6d93a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2972,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2970), with no line terminators","md5":"5f98cbfe51b3c9492b1b8b716481912a","sha1":"5b20f4ddd3683f7422341d24bab46707813f68cf","sha256":"6f9e64fb878fa6d22892704fdb66e2ece7bacdeccc148f8be9a8e172060c4aac","sha512":"f3e7ee624cf45af78993a7d7b01d1c978c29d1b03872bd134fae35c024846387ac1506fd90844da2c246a20f1a5751c8188546ecf9d555de792f1bca3e9825e9","ssdeep":"","tlshash":"6b510faa9c06dd4bdd763e9d043eac3a10ddc83b9a24c95852ddce080711bba6bc5dc0","first_seen":"2026-03-26T13:48:04.621008Z","last_seen":"2026-03-26T13:48:04.621008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":28,"dns":4,"connect":1,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"ughfjdu-ten.vercel.app/_next/static/chunks/webpack-616e068a201ad621.js","fqdn":"ughfjdu-ten.vercel.app","domain":"ughfjdu-ten.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ughfjdu-ten.vercel.app/","date":"2026-03-26T13:47:41.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Feb 2026 06:28:03 GMT","end":"Wed, 27 May 2026 06:28:02 GMT"},"fingerprint":{"sha1":"D6:62:1A:52:B7:FD:F6:BB:FA:AC:01:9E:BB:CD:40:86:5F:04:95:51","sha256":"4B:37:7D:7D:8E:17:70:BB:E1:51:9B:58:96:24:6C:11:6A:B3:AE:A9:68:43:46:58:B3:30:F0:54:F7:EA:43:38"}}},"request":{"raw":"GET /_next/static/chunks/webpack-616e068a201ad621.js HTTP/1.1\r\nHost: ughfjdu-ten.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ughfjdu-ten.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3708\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-616e068a201ad621.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 26 Mar 2026 13:47:41 GMT\r\netag: \"f7e5c9978a0c952e8f33044632c8a9d6\"\r\nlast-modified: Thu, 26 Mar 2026 12:45:52 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-616e068a201ad621.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gcmjf-1774532861506-e58058ffee2d\r\ncontent-length: 1966\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3996,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3557)","md5":"bea5b71f74cf46b4b79944526511ea04","sha1":"1fa22228ffe2cd1b870659c19f0b1ce80587e75b","sha256":"e24b7ffb75aabb09548e5c30def45a11815a2fe4d91c289fe929cf8b83ee1e2c","sha512":"519206b5f4f475fb078090e0431228709168253971b8609252a5cf221fd24fa1dc61253b39e98524fe62da29cd8c6e32c8fb83676a72fcdda93ed864e2b465cf","ssdeep":"","tlshash":"0781b7ed7161f8b9178350e1003fd456b63b24b2291ee4a0ca1dd8f8fc349488613fa9","first_seen":"2026-02-11T02:34:01.778751Z","last_seen":"2026-03-26T13:48:04.621953Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-26","alert":"Phishing Block","trigger":"ughfjdu-ten.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"ughfjdu-ten.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}
