{"report_id":"ef724e10-8322-4b16-92f1-95ae9539fe1e","version":6,"status":"done","tags":["netflix","phishing"],"date":"2026-05-17T03:34:10Z","url":{"schema":"https","addr":"sohamdarshak.github.io/netflix-page/","fqdn":"sohamdarshak.github.io","domain":"sohamdarshak.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"sohamdarshak.github.io/netflix-page/","fqdn":"sohamdarshak.github.io","domain":"sohamdarshak.github.io","tld":"github.io"},"title":"Netflix","dom":{"size":5458,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"07bd2c5ee4591813f5caaf01c6e4ecd6","sha1":"0e4a5da61ef32e999206241b7032c2e86d6891a4","sha256":"bde3fd0ab7a9a846fffb678caa8824e14cd6780112d4d9e2e22eb00b897a2ea7","sha512":"ce8c1d1e74feb91cd883c0ff9b04bb5fb2c981cf5dffefda7a37f62ca4b5d1b3ae3666cc1a71ebeab2f9cf035754ad35514c6dbf88186d174d9c3fddcad738d0","ssdeep":"96:nBrA8YKtW/sNk23ghULVgvlKOKxN9m7m+wIw3Z+KWUUrh+:Br/tsUk235VgKD9m7Dw1WU1","tlshash":"d7b1a8b6a0f515670a92c1c03b641f2f3fd2e65b8a4f16103aad6ec44fc7e4acd4758a","dom_hash":"domhash6b22d45b82e47958357be76aceff546e","first_seen":"2026-04-25T13:46:08.847197Z","last_seen":"2026-05-17T03:34:30.828178Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"sohamdarshak.github.io/netflix-page/","fqdn":"sohamdarshak.github.io","domain":"sohamdarshak.github.io","tld":"github.io"},"ip":{"addr":"185.199.108.153","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-21T03:34:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"sohamdarshak.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"sohamdarshak.github.io","ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-03-08","domain_rank":0,"first_seen":"2026-04-25T13:46:05.549753Z","last_seen":"2026-04-25T13:46:05.549753Z","alert_count":10,"request_count":5,"received_data":397382,"sent_data":2393,"comment":"","tags":null,"fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"occ-0-4875-2186.1.nflxso.net","ip":{"addr":"49.44.220.122","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"domain_registered":"2016-03-25","domain_rank":0,"first_seen":"2023-03-27T16:10:45Z","last_seen":"2026-04-25T13:46:06.105095Z","alert_count":0,"request_count":5,"received_data":94701,"sent_data":3049,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"sohamdarshak.github.io/netflix-page/","fqdn":"sohamdarshak.github.io","domain":"sohamdarshak.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-17T03:33:46.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /netflix-page/ HTTP/1.1\r\nHost: sohamdarshak.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Sat, 25 Apr 2026 07:21:09 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69ec6b65-1643\"\r\nexpires: Sun, 17 May 2026 03:43:47 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: BF6E:8C06:1C92C83:1D0097D:6A09371A\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 17 May 2026 03:33:47 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778988827.030340,VS0,VE129\r\nvary: Accept-Encoding\r\nx-fastly-request-id: f92feb6d5357f5b47a134707462f8f219d296087\r\ncontent-length: 1968\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5699,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"bfe88115763534a0048089d16ff31d52","sha1":"ed4bb8bd74564231d7444b02556864b5c11e578d","sha256":"4d1dbd408c3a977b630b9582803b3633d400f18b44349e0de68eef2733f04ada","sha512":"bdfe382aab8bf785b4907bc06983be1c419c2c6e0315eabe998d1387034c4e022a098a323733f82401ee6cd12386b87270751aa359b4c57de91513a5addcd0c2","ssdeep":"96:bNU004sak23VhlLegvlviKHx9msqz2DS+fvDM/:60049k23VeHKR9msY2NvDA","tlshash":"46c186b660c1151706b7c1c42b601faafe92c29b8b4b5a103aed6bc34ff7e09cd47586","first_seen":"2026-04-25T13:46:08.849943Z","last_seen":"2026-05-17T03:34:30.832066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":100,"dns":39,"connect":26,"send":0,"wait":157,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"sohamdarshak.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"sohamdarshak.github.io/netflix-page/logo.svg","fqdn":"sohamdarshak.github.io","domain":"sohamdarshak.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sohamdarshak.github.io/netflix-page/","date":"2026-05-17T03:33:47.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /netflix-page/logo.svg HTTP/1.1\r\nHost: sohamdarshak.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sohamdarshak.github.io/netflix-page/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/svg+xml\r\nx-origin-cache: HIT\r\nlast-modified: Sat, 25 Apr 2026 07:21:09 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69ec6b65-935\"\r\nexpires: Sun, 17 May 2026 03:43:47 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 74B2:1A42C7:1C5BD35:1CC98B3:6A093719\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 17 May 2026 03:33:47 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778988827.445491,VS0,VE126\r\nvary: Accept-Encoding\r\nx-fastly-request-id: cca49fbe39021e6b564835a0e4a02be82aa70959\r\ncontent-length: 939\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":2357,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25e641b85a14f8757a7986a4c65b0df0","sha1":"47869045fe92e6fd3d286ac1129e049e00814a02","sha256":"4bc20d031b7ec7c27cad3bb97786f655b20e5f66275826a17a993dc585250fb5","sha512":"3360f6f8533603b4d5f3ba2272f54eb8bc6b151cbf9fd82be60c4a503c86689942f5bbee13680c209a93f96a32939d8e7ae1933c50f6102c5e71217876f7beda","ssdeep":"","tlshash":"6e412055e3ad27d3ad664bcbb6ca0df33a2747b0f8a0524895ac0e28545a4e0852cd63","first_seen":"2025-11-06T03:55:16.79376Z","last_seen":"2026-05-17T03:34:30.834505Z","times_seen":16,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"sohamdarshak.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"occ-0-4875-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABRkXM8hFLe8CWQIE_G1c9voWyN359tVygK3KQSozXU2E7OODrX_x-6senbaphRMFjlSBuZVWPI_4bMBTqJQocNrxu6Mxzy-bo3ULy523.webp?r=8cd","fqdn":"occ-0-4875-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.220.122","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sohamdarshak.github.io/netflix-page/","date":"2026-05-17T03:33:47.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 04 May 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 21:50:05 GMT"},"fingerprint":{"sha1":"20:67:88:05:5E:8B:3B:72:90:0F:6C:D0:87:EE:B2:1E:9F:68:1D:AC","sha256":"00:BC:3A:3A:F1:34:99:48:41:69:B1:49:2E:CB:DD:F4:E5:D2:C6:CA:6A:1D:B0:59:60:1A:59:62:A7:62:6E:32"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABRkXM8hFLe8CWQIE_G1c9voWyN359tVygK3KQSozXU2E7OODrX_x-6senbaphRMFjlSBuZVWPI_4bMBTqJQocNrxu6Mxzy-bo3ULy523.webp?r=8cd HTTP/1.1\r\nHost: occ-0-4875-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sohamdarshak.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Sun, 17 May 2026 03:33:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 24956\r\nConnection: keep-alive\r\nlast-modified: Tue, 14 Apr 2026 20:24:55 GMT\r\netag: \"85d157dd2e61c6429206645e052bccbf\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"85d157dd2e61c6429206645e052bccbf","sha1":"a73c006671942289f34b9f959e484587ab0e2ab5","sha256":"8f1eefe4f60ceba1c901a9213ed54e995edf55ac8a5f0e7c5dfa461eb39c971b","sha512":"f3f9d1fdb4dfcbcb8f1125feeb36d78136700d39f07fea190ccaf10522d2a2014b22213eac4713cd513514478a0260fa7451a4fc1a0feab27bd336366b7c9e6c","ssdeep":"768:BiFBQWX+3mHDOQgtAh/uJjWRILFpAhOigQ:IB5XXSnJjsILYKQ","tlshash":"03b2f102255efc2687e7e2f054812bc623a15f9a0df1c781a7f716d6202f38837b3664","first_seen":"2026-04-16T14:33:19.826411Z","last_seen":"2026-05-25T22:35:14.210173Z","times_seen":96,"resource_available":false,"data":null}},"time_used":1249,"timings":{"blocked":460,"dns":21,"connect":151,"send":0,"wait":155,"receive":160,"ssl":297},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sohamdarshak.github.io/netflix-page/back.jpg","fqdn":"sohamdarshak.github.io","domain":"sohamdarshak.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sohamdarshak.github.io/netflix-page/","date":"2026-05-17T03:33:47.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /netflix-page/back.jpg HTTP/1.1\r\nHost: sohamdarshak.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sohamdarshak.github.io/netflix-page/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 25 Apr 2026 07:21:09 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: \"69ec6b65-5a089\"\r\nexpires: Sun, 17 May 2026 03:43:47 GMT\r\ncache-control: max-age=600\r\nx-proxy-cache: MISS\r\nx-github-request-id: 91B2:24CDAD:1D7FF5C:1DEE05E:6A09371B\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 17 May 2026 03:33:47 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778988828.610129,VS0,VE146\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 14a6631b5d09ad79c7fe1b8cf98dd61abc3c2327\r\ncontent-length: 368777\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":368777,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2000x1125, components 3","md5":"804bd4432459e26e5abdb0e6aab8ecaa","sha1":"903eb3fcf432f5093f2ca79d083c136e87d5e5c3","sha256":"466ae850d5d0574db6d856e4b0cb8611adc9f2f9461908d204ee8d8b599bc7b3","sha512":"d63ec04d661ef321e81ffb1f195831328920569872e1b0b130bb419a23bf3e5f1d88f6c2bb25d53cf2a34bf2ac61150f28710ba0927d42c85863b52516e89761","ssdeep":"6144:wJf1joj8u4V6xYIjoj8CldrP2OVlQ1lV8lL05VnFASE8KOBM1ev9I:wJ28u4Mxnjoj8+rOOVlF07nuStq01I","tlshash":"ca7423fad901ba169e03bbacb179c30ea74f954611ad12ba55c831c84f656b1fbfc0d0","first_seen":"2026-03-25T01:12:24.338156Z","last_seen":"2026-07-26T00:32:51.313609Z","times_seen":8,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":173,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"sohamdarshak.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"sohamdarshak.github.io/favicon.ico","fqdn":"sohamdarshak.github.io","domain":"sohamdarshak.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sohamdarshak.github.io/netflix-page/","date":"2026-05-17T03:33:48.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: sohamdarshak.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sohamdarshak.github.io/netflix-page/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: GitHub.com\r\ncontent-type: text/html; charset=utf-8\r\netag: W/\"69fcc76c-239b\"\r\ncontent-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'\r\ncontent-encoding: gzip\r\nx-github-request-id: 1BF8:1A42C7:1C5BE15:1CC998E:6A09371C\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 17 May 2026 03:33:48 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778988828.496972,VS0,VE124\r\nvary: Accept-Encoding\r\nx-fastly-request-id: ec6dfebe371e158ff7639de4182725c1678583ee\r\ncontent-length: 5142\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":9115,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3909)","md5":"1eb970ce5a18bec7165f016df8238566","sha1":"9efd1514af80fe14db4ed28e9bc53975b9ee089c","sha256":"70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3","sha512":"21b4d800cc282ca452f7394e95d5382340ac3481a002c21da681005a44f18ea6cf43959990cd715b4657f180e0e96d6087fe724f3200e909f9fd70ebcd5511bd","ssdeep":"192:Ywnb1iC9OA9XXMa9kukrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:7B8H3DUulGmmv3D6vglETliCfN","tlshash":"e6126d7e19e93308d8028a1539f267993d65880f9e866e6fb5ad0351cf8fe10e1637cc","first_seen":"2023-04-05T03:08:51Z","last_seen":"2026-08-08T20:18:40.723275Z","times_seen":59591,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"sohamdarshak.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"sohamdarshak.github.io/netflix-page/style.css","fqdn":"sohamdarshak.github.io","domain":"sohamdarshak.github.io","tld":"github.io"},"ip":{"addr":"185.199.109.153","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://sohamdarshak.github.io/netflix-page/","date":"2026-05-17T03:33:47.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.github.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 23:32:36 GMT","end":"Sun, 05 Jul 2026 23:32:35 GMT"},"fingerprint":{"sha1":"18:DE:96:E8:3D:99:B2:8A:0C:D1:0C:48:78:BD:6A:14:6A:05:25:60","sha256":"EA:69:BC:71:1C:B9:D4:56:98:D2:FD:AA:48:54:D7:DC:08:6A:CD:3A:9C:35:01:64:90:9B:68:8A:C7:C0:63:1F"}}},"request":{"raw":"GET /netflix-page/style.css HTTP/1.1\r\nHost: sohamdarshak.github.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sohamdarshak.github.io/netflix-page/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: GitHub.com\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 25 Apr 2026 07:21:09 GMT\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31556952\r\netag: W/\"69ec6b65-1f30\"\r\nexpires: Sun, 17 May 2026 03:43:47 GMT\r\ncache-control: max-age=600\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 91B2:24CDAD:1D7FF41:1DEE03C:6A09371B\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sun, 17 May 2026 03:33:47 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410025-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1778988827.444954,VS0,VE131\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b868a83f9d85ef8c11869e7bb6f123c96b7a9439\r\ncontent-length: 1529\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":7984,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"dee38b7cbbbc41e27d0ea295f0f32e58","sha1":"7218ab8270d9b059e177cbf01971a888ae7cfc70","sha256":"32e91c87177af2c88bee36e713e3779d6098eb1319cd551eab7fd495958f54be","sha512":"bfcc917c4840ccb88491944f328eb56d3f086f3ae29041a752664aafcced85057f8edd6fd1fc2fd561922781098dbe48d93d1870b32d355c3e36081ef402ead1","ssdeep":"96:VUOnBFuF8vafFv4kDC/NkQtm/iTIREjFuY/N+KgsUnuvexuE6:KOnDGVClAsIRE3l+KgduB","tlshash":"3df1ae4eda055005717aa7a8ff735b91fb860453830583ea3adc6289dfb906d9210fcc","first_seen":"2026-04-25T13:46:08.851367Z","last_seen":"2026-05-17T03:34:30.844868Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-17","alert":"Sinkholed","trigger":"sohamdarshak.github.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"occ-0-4875-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABe3NxIeT-EiMKJriLsq8x8p__gp0aw4_RllFLL-j1x3SJ12_XCDqpO5f1lI-f9T2KvZ67PmXoLhrx691oMEpwq5_hu6u5Xu44P17UMZa.webp?r=05f","fqdn":"occ-0-4875-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.220.122","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sohamdarshak.github.io/netflix-page/","date":"2026-05-17T03:33:47.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 04 May 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 21:50:05 GMT"},"fingerprint":{"sha1":"20:67:88:05:5E:8B:3B:72:90:0F:6C:D0:87:EE:B2:1E:9F:68:1D:AC","sha256":"00:BC:3A:3A:F1:34:99:48:41:69:B1:49:2E:CB:DD:F4:E5:D2:C6:CA:6A:1D:B0:59:60:1A:59:62:A7:62:6E:32"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABe3NxIeT-EiMKJriLsq8x8p__gp0aw4_RllFLL-j1x3SJ12_XCDqpO5f1lI-f9T2KvZ67PmXoLhrx691oMEpwq5_hu6u5Xu44P17UMZa.webp?r=05f HTTP/1.1\r\nHost: occ-0-4875-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sohamdarshak.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Sun, 17 May 2026 03:33:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 12070\r\nConnection: keep-alive\r\nlast-modified: Tue, 14 Apr 2026 20:53:50 GMT\r\netag: \"e41977bedcf00c0c9f1261e2299e1a29\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e41977bedcf00c0c9f1261e2299e1a29","sha1":"b6424ef5b4c67c095457672ca716f84db39c99a4","sha256":"067ce40c3923f05d00b2a0b28a02592af213080f32764208204441978ddf3600","sha512":"9c8ca8d5ec54617f3871f183efe38046dd7c0d1b34fdd31d7019c85199e86c5c2543a96964a2b4e3383502c29700d37affd1d961f3bb632a47dedbb5e3cc7935","ssdeep":"192:NAI6H9o4zHYl3EHOO1I666wsOR/2Frf1ifFPj8WG0FbtCyHxYjTBZqUbdhvnY5wN:utHwdg02FT1axmXy8qO/Y43mu5+M","tlshash":"5442c0df9794fce1ec158900089b6c9533a72d6756e756c84081cee7a7b136c2431eaa","first_seen":"2026-02-03T02:25:02.174Z","last_seen":"2026-08-01T03:17:18.725411Z","times_seen":102,"resource_available":false,"data":null}},"time_used":1874,"timings":{"blocked":858,"dns":18,"connect":148,"send":0,"wait":152,"receive":1,"ssl":695},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"occ-0-4875-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABXIpU6Lz9l0tvx3mTTW9sCAXNOOXjsxa8wjUw4_MYBkGihaBn3MPrw0JFMgJQxbIAQkoJWNszVs4bplO-V4nPKzunpoGtgWqulc-d0Ax37a46qv2bLPZrFo7ZmivdaWt5yd3h2nEdQ.webp?r=7e7","fqdn":"occ-0-4875-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.220.122","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sohamdarshak.github.io/netflix-page/","date":"2026-05-17T03:33:47.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 04 May 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 21:50:05 GMT"},"fingerprint":{"sha1":"20:67:88:05:5E:8B:3B:72:90:0F:6C:D0:87:EE:B2:1E:9F:68:1D:AC","sha256":"00:BC:3A:3A:F1:34:99:48:41:69:B1:49:2E:CB:DD:F4:E5:D2:C6:CA:6A:1D:B0:59:60:1A:59:62:A7:62:6E:32"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABXIpU6Lz9l0tvx3mTTW9sCAXNOOXjsxa8wjUw4_MYBkGihaBn3MPrw0JFMgJQxbIAQkoJWNszVs4bplO-V4nPKzunpoGtgWqulc-d0Ax37a46qv2bLPZrFo7ZmivdaWt5yd3h2nEdQ.webp?r=7e7 HTTP/1.1\r\nHost: occ-0-4875-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sohamdarshak.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Sun, 17 May 2026 03:33:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 20252\r\nConnection: keep-alive\r\nlast-modified: Wed, 15 Apr 2026 07:30:30 GMT\r\netag: \"619e2a7060cb5acbadf7d78d727a4e1d\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20252,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"619e2a7060cb5acbadf7d78d727a4e1d","sha1":"1d5450d6be88720edac5f5c161d5b11c0614c8fa","sha256":"af14b25a6af39a6fdc08d82b9119d6e9b1f951ed1041011a513978f88b441503","sha512":"a43f1f91624d1a7adcd9e26ec83f53c1d822277d1df1f4847292282d144689d0f6099e492f9d3674a96ec253449a98af8d4af40ffce9feeda9aa8b1389e6cb08","ssdeep":"384:6huPn456tHiEcsU+RG2MXEXYchS0xXmAXCpTPszDpGTylhtB45Y0Bl5tYq:68gWiEZUJ2MXEXYcjXbX2QzDp5lhtyh1","tlshash":"a492dfcb65e7d83becc937a03581b9e105a7788d521883db853aa9fb00c75225b4e881","first_seen":"2026-04-25T13:46:08.857639Z","last_seen":"2026-07-21T15:39:00.401048Z","times_seen":20,"resource_available":false,"data":null}},"time_used":1233,"timings":{"blocked":457,"dns":18,"connect":151,"send":0,"wait":153,"receive":158,"ssl":293},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"occ-0-4875-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABZBz0clOwylytxr_IGH7ahR6Z4njfU3qU5F2p1M2NoeJss21QGAepbRQZb0IPzmj54m9Z8DRXunTBl9gVu8gY-vpZJTkdJySJGApQknK.webp?r=13c","fqdn":"occ-0-4875-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.220.122","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sohamdarshak.github.io/netflix-page/","date":"2026-05-17T03:33:47.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 04 May 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 21:50:05 GMT"},"fingerprint":{"sha1":"20:67:88:05:5E:8B:3B:72:90:0F:6C:D0:87:EE:B2:1E:9F:68:1D:AC","sha256":"00:BC:3A:3A:F1:34:99:48:41:69:B1:49:2E:CB:DD:F4:E5:D2:C6:CA:6A:1D:B0:59:60:1A:59:62:A7:62:6E:32"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABZBz0clOwylytxr_IGH7ahR6Z4njfU3qU5F2p1M2NoeJss21QGAepbRQZb0IPzmj54m9Z8DRXunTBl9gVu8gY-vpZJTkdJySJGApQknK.webp?r=13c HTTP/1.1\r\nHost: occ-0-4875-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sohamdarshak.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Sun, 17 May 2026 03:33:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 14576\r\nConnection: keep-alive\r\nlast-modified: Tue, 14 Apr 2026 20:26:07 GMT\r\netag: \"5c8172419920aae379ade61e3dfe645e\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14576,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c8172419920aae379ade61e3dfe645e","sha1":"7ebd9f7e3903b8da1dc0e9d076d340eb4c8b3e51","sha256":"8fa4f1b49470871f3bd584a321de5d4a033fe3e2d0be0ccd31409c0e7fe8b84f","sha512":"1813cb55e095a1a951c0e87a22af33c368678c91a5a107b54b1c62df3237a24fafca1823d06c2b1ff28014e69affb5dd27d48e4df70b8e6a721553cec849a1c7","ssdeep":"384:jo5h4ykxPWzdpsI+AOMlbv/n5ehvurrm+0KAQuPgsT:jWpBpAAO6v/nUlul0KAQCgw","tlshash":"5162c0ade7b629cf71d63bd7815055bdb4ee863821a6ec70005502886948918fb4fac1","first_seen":"2026-03-27T13:19:58.992032Z","last_seen":"2026-07-26T00:32:51.316591Z","times_seen":16,"resource_available":false,"data":null}},"time_used":1877,"timings":{"blocked":849,"dns":21,"connect":158,"send":0,"wait":162,"receive":1,"ssl":683},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"occ-0-4875-2186.1.nflxso.net/dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABUcQs_WZr9J-df5c-sTvcbloKKiKq1Eg7fi1uqvBbKOTn2uXrVs7fVC2YeGyk-5MmGRcIykGb24f_M0z-ylS55rbz0fr31LnQoLnfTCt.webp?r=3ea","fqdn":"occ-0-4875-2186.1.nflxso.net","domain":"nflxso.net","tld":"net"},"ip":{"addr":"49.44.220.122","port":443,"asn":55836,"as":"Reliance Jio Infocomm Limited","country":"India","country_code":"IN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://sohamdarshak.github.io/netflix-page/","date":"2026-05-17T03:33:47.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.1.nflxso.net","organization":"Netflix"},"issuer":{"commonName":"DigiCert Global G3 TLS ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 04 May 2026 00:00:00 GMT","end":"Fri, 05 Jun 2026 21:50:05 GMT"},"fingerprint":{"sha1":"20:67:88:05:5E:8B:3B:72:90:0F:6C:D0:87:EE:B2:1E:9F:68:1D:AC","sha256":"00:BC:3A:3A:F1:34:99:48:41:69:B1:49:2E:CB:DD:F4:E5:D2:C6:CA:6A:1D:B0:59:60:1A:59:62:A7:62:6E:32"}}},"request":{"raw":"GET /dnm/api/v6/mAcAr9TxZIVbINe88xb3Teg5_OA/AAAABUcQs_WZr9J-df5c-sTvcbloKKiKq1Eg7fi1uqvBbKOTn2uXrVs7fVC2YeGyk-5MmGRcIykGb24f_M0z-ylS55rbz0fr31LnQoLnfTCt.webp?r=3ea HTTP/1.1\r\nHost: occ-0-4875-2186.1.nflxso.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://sohamdarshak.github.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: freenginx\r\nDate: Sun, 17 May 2026 03:33:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 20562\r\nConnection: keep-alive\r\nlast-modified: Tue, 14 Apr 2026 20:26:10 GMT\r\netag: \"118fc5ea78c08864fe90f8f0c36f5f59\"\r\naccept-ch: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width\r\ncache-control: max-age=31104000, public, s-maxage=604800\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20562,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"118fc5ea78c08864fe90f8f0c36f5f59","sha1":"5cc457cb4c3ef26ed2281fda7ca146226580e6f1","sha256":"c7a9d39494ec4bcc5fc83408017e418a696418fde26d55826a64115d7707957f","sha512":"f36152036515309bbf3ebfef019e82464c510df32c0758a0e9fc0af182d9246b13189c9a2e923e1adf4d36c5e4eae8c60746dc1b816085b138be03a7e5e75e30","ssdeep":"384:Yb0rKbaOa+fxz3JbGwC4MyARTVCH+BsG/Vma5ynLhbx5D7NNEdlzr+zIUZocj:YRda+fpZGCMhYeB7mMyLxLEAIUZocj","tlshash":"4092f16f2054e05a499e6af379f9c87e30285c6f14962d0fd62912217fa33e2413dfb6","first_seen":"2026-04-04T08:59:03.319614Z","last_seen":"2026-07-01T02:09:15.283992Z","times_seen":13,"resource_available":false,"data":null}},"time_used":1700,"timings":{"blocked":678,"dns":19,"connect":161,"send":0,"wait":164,"receive":166,"ssl":509},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
