{"report_id":"f3901bf5-e5fb-433d-bd57-a8e46f3bf152","version":6,"status":"done","tags":["netflix","phishing"],"date":"2025-10-16T00:23:18Z","url":{"schema":"http","addr":"nextflix-six.vercel.app/auth","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nextflix-six.vercel.app/auth","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"title":"nextflix-six.vercel.app/auth"},"submit":{"url":{"schema":"http","addr":"nextflix-six.vercel.app/auth","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-20T00:23:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app/auth","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"summary":[{"fqdn":"nextflix-six.vercel.app","ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-10-07T12:39:04.318453Z","last_seen":"2025-10-07T12:39:04.318453Z","alert_count":102,"request_count":16,"received_data":711043,"sent_data":7582,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/_IOkjpDeaqagzrGlVO_pX/_buildManifest.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01c1db2c26f92f2211ff2bc7b166ad05","sha1":"229fac324a574746e21f55fe89ae5fe4220fd62c","sha256":"84cd8a82d7779e05d2a438f056f5ca76231655f08715be5154b15c9bdf3ded49","sha512":"7a5d71ab728ee36103d20aa8edbee17a4e9b6904acc42b835cfc272e0ccfee6be4bf219ffb2f1a00c9ca69809613ad1de7e03ea38b1ef29cb7351e01b37cacd8","ssdeep":"","tlshash":"1a1148a3921af81bdee1ec89786e0763afd19836143409d7c3ed1e6c54901b39f5d83a","size":959,"data":"","first_seen":"2025-10-07T12:39:07.713646Z","last_seen":"2025-10-16T00:23:20.333282Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/pages/auth-364fc3af3d62dd72.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"351fd1552d1247de6946066117ffb947","sha1":"d67f41be893c39afc9800bf8575666696f08ca36","sha256":"ff7c3a9ea9dcd914f84cd500f6715d8e657a18cb536e56c3c831d482e4384d6b","sha512":"9179179147ceba85be4b2d06ac05a1d126aa39abdd647d357afe74b785e2e1b350adefba57f085fe23982fc1412a65015c5381f69c8c7510ec547ad06f0a6175","ssdeep":"","tlshash":"48715208b0637edea46704d8245f900cb15d9694ca1e0db4f7f87c2a25978d4b7c2bdd","size":3614,"data":"","first_seen":"2025-10-07T12:39:07.719419Z","last_seen":"2025-10-16T00:23:20.37923Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/_IOkjpDeaqagzrGlVO_pX/_ssgManifest.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-13T08:43:10.473303Z","times_seen":252697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/154-3106e83829c99344.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2b6d8a8ffd4e495a7c3889c463bcd97","sha1":"66029654a2958f8aab67088d5b164af528145c56","sha256":"35002e086fbba7e81d54b90d2695117b5b4284b3fb6b5a55868f269e38d8c552","sha512":"a641323bc3f894c4da6bce86343e47a15e91ab53d3434ea7fe914ead0817a1ce05c24ed4a6ae42ce362e153ec686482fca84ec493f4a9a6f0cb67acfd40a9415","ssdeep":"768:XS+CtW9kstn4YsReoZNiMBGYsAUV9/Q+k/h4AUQvxnwYbs79nmFZJ0ckDf3ze9lK:icn4zMyU8h4gcm7Kc7W9F","tlshash":"88330cc5f7e5b03513a611a4405f440bf27ada69a44e0ce8f250e8d738b998e91fbf78","size":50238,"data":"","first_seen":"2025-10-07T12:39:07.695632Z","last_seen":"2025-10-16T00:23:20.327291Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/98-adef635177c7789a.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcd10502ac15caabb886ee44cbea94bd","sha1":"a6ae537c2a4739fa96158d191a5e34e699352173","sha256":"f5cd6c7b76b774096b2519ec4312764a18de99b4043f224ef7a6721d15a95666","sha512":"953b101229f19058f9a7a7c10582473da62c7832139b545326305c0dcc1b1b96481a0f107135b8f6ecf0d249b0e237d27051695c18a0c3eb331a5374e077b00a","ssdeep":"768:41ZioEMqMBMLM2MVMaMuMNMhO8q1xyQlnGrjCWLTMLi5XxZX:+iU3u4baHTShO8qxerMixX","tlshash":"9df2b6c971d2f4a203d39561403f6206f22a1d6d640df4d0e365dee2e93895fa132fba","size":36633,"data":"","first_seen":"2025-10-07T12:39:07.711608Z","last_seen":"2025-10-16T00:23:20.36651Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/pages/_app-891652dd44e1e4e1.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d7da4fe1843aaec68ff71076873432e","sha1":"a3a47ee14b8366bc427701816e57f1710a81159f","sha256":"6cf9b69fc054d0c77d2dedc68d648cb3349f6727a2b058ec537eaaf71f831a92","sha512":"570cd59a824cd356ebac31a88888d43763f37a31944c86b093b877c6bfe825b479adab1845e3ac5149f2e4708ebb6b08d76f73bbf8468d89bb388a175dcabd02","ssdeep":"","tlshash":"14f027983cd2b824129752b841bf256e72bf2d9824ad658097a2d0d97e7115d9122f8c","size":470,"data":"","first_seen":"2023-03-26T03:39:30Z","last_seen":"2026-05-22T23:03:03.846891Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/framework-2c79e2a64abdb08b.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fc4bed6b4319c62343f0bf5db91a5bb","sha1":"6e283c4ea2b12da64476af280236a8c5d85dbbbc","sha256":"f2ae26ff518d9519afd2a3dc277d84e098458e6b6b85fa9548cda2bed24435e7","sha512":"e2e0072386f2f35690899509229136406c27c2b95e3e8cc810aeb6630d7f13bd0872e0f6e650b4fddce2567680e7c42eea49c62bd2653006f5151d9ba0430cd7","ssdeep":"1536:2YjvmNg6kMudjY+o3F36qmk1S/qcnde//ZQg:Dj7UN6qT1S5cXmg","tlshash":"a3d309e83995f6526ab311a700af2803733d2a1b280c4960e615fd9e75b841fb17bfdd","size":141052,"data":"","first_seen":"2023-03-13T20:58:32Z","last_seen":"2026-08-12T16:50:36.878814Z","times_seen":2317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/1bfc9850-ee9594b91b258940.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ceb280bb31d1e28fb1e5fb92fce3c12d","sha1":"0ef31da0f9338254aea18e92ede13163f1b8d5d9","sha256":"244a22ecbbb0ff2de9eccfdcce177db6aa05bcab1aa1cd2ea628baf6516ff600","sha512":"9753286eae8e93f7e860de3dfdc7f61d079ebab19628ce5f6599162d3021623b402ccb3a7658db162e15ae50660d333d50247015f1005dbefce4a41b54d4f721","ssdeep":"","tlshash":"0f31dd7d9294d7eccdb62ded8a3b50b9548f992d20d19b068b60c6b0b5b00c8816eccf","size":1561,"data":"","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-07-30T08:02:43.617218Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"739ca4ff1562e6418fe90a93135d9ddb","sha1":"1dee7b0d39f7aae0c381831390daa0cea3bcef8b","sha256":"6aad604817dd874413449cce9af0b4ddd8ab618984a35d970a1899db987dc9f2","sha512":"4833078975c6304f2111637a233ca835386a894d3b3b4246b8006879dce060ab8769f4d04f4e7822f036d2fb8bec21c5ae85f64cec3d6423062a08e013476dbc","ssdeep":"","tlshash":"752168c4237074add9c52c3850b2266616b8145f34e6c594b77f04c8de61bd45868c6f","size":1264,"data":"","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-07-30T08:02:43.593648Z","times_seen":622,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/webpack-38cee4c0e358b1a3.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26a485e9fb19732af7bc08f2ebf0154d","sha1":"3af402b5971c083af89dc1fdd17320e98eb01d99","sha256":"c1e92a1c5827b02b976fdd931b13ee9f09d45d31db0edbaadf03ca82b96e9a5a","sha512":"5e632a912e250b250f921d654b51bfbfaa7ee3a37999cdd7ec0abcf729b5dddf019ebac0eec1772da71c9631ad5411b5e0d0eccbf5e1056296afa8c9b35481f7","ssdeep":"","tlshash":"b13145c932e2f8d81717ad65482f809bb03a9973146dd5f2eb11c1b57c351584237f7a","size":1700,"data":"","first_seen":"2023-03-14T04:03:47Z","last_seen":"2026-07-30T08:02:43.601572Z","times_seen":761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/main-19bc621d38313aef.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0bb5aa72f40ddda1aa81ff13afbd6a2d","sha1":"32af85d53e0ce081ddcbb3a21b938ab70427b003","sha256":"316f9c5c1e25387a8e3ea454b7acd46a28016d07a863e53391db555f914cf4f3","sha512":"cd8c1e0cd0b473561c4ae331dd29dc974ea809e13a1c9ca0a1924b217c5527a47115fd14554ae419ba392d9700e115c7e1d05f8a57e3318d0d073d1df71e0e88","ssdeep":"768:2D8djHLTnYYx3qO9w2NBsEHdnBDjhEZ1gfvebVzPVnoKt0OcEng3i6JUKT82Let3:2odjHoY3zRnBfhEZ1xduKtE2g3pgr88","tlshash":"509309b572d1f4a207db41a5843b0202f3661d3e641fa855e3ebdcd775a0d8ea0a2f36","size":89284,"data":"","first_seen":"2024-10-27T17:02:21.607107Z","last_seen":"2026-07-23T14:48:25.970417Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nextflix-six.vercel.app/images/logo.png","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 772427\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo.png\"\r\ncontent-type: image/png\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"9f92a087bbfb01ddb0a85ed962650039\"\r\nlast-modified: Tue, 07 Oct 2025 01:49:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /images/logo.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4m2js-1760574170493-89b8e1a52c86\r\ncontent-length: 18043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 346, 8-bit/color RGBA, non-interlaced","md5":"9f92a087bbfb01ddb0a85ed962650039","sha1":"da354e20a5d0d9d88a222e2c841f025a970dfba4","sha256":"52edac7b27bc236a816dce4f818204b5eef293f036914fd12fec2bc476126a85","sha512":"000ae8a7969d863e52f3894b9e62e92152db3a7d4b863ff1b1dac87b5be52882656c97be6b96651e87ec4347eb7fb30e19baafae9343d297ec618b0801b301c3","ssdeep":"384:SQfXXODBNLlIr6SpbT3fhU29IeXQN39i59drWj2+6Hjn:NonLlI2eHueXQN3Qndre2L7","tlshash":"8682af89dcdb84dafc188034d6ef8f517b62dc8f5160172683e8c9b71d07abca4ad590","first_seen":"2023-05-06T08:35:42Z","last_seen":"2026-07-30T08:02:43.595583Z","times_seen":752,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/auth","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-16T00:22:49.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /auth HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /auth\r\nx-powered-by: Next.js\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::gchfc-1760574169697-47adafd81178\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6327,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3477), with CRLF line terminators","md5":"f81ca1e133fdb6fd9c5d0a75511e6c7d","sha1":"41845a18e9d86aab2a17b941186db21cf9d9ea4e","sha256":"bf22421d7ebb19ecfecb37ffd1fb58e74d5138541f38cc96972dec2916e6ffae","sha512":"0995c69c62d34c68be3ec83ce9446b89a717528df15dda9372ebed4d61beb2a2dfefcde484ced36a170200466619fd7a741c211346dda99205232ecf3fbdd3a3","ssdeep":"96:dDXydq7hB7hhNezds1UDOskgRAbm1qb1oy8g73WntzuId6h1Dmnb:Zidq7ht/1UD2mAbmAb98kSRxd61yb","tlshash":"0ed1c7555922cadec8574deca572b37e608ed22fc4b38848e3dc426c1b91ec98e5cc99","first_seen":"2025-10-07T12:39:07.70589Z","last_seen":"2025-10-16T00:23:20.310095Z","times_seen":8,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":29,"dns":0,"connect":1,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app/auth","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/webpack-38cee4c0e358b1a3.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/webpack-38cee4c0e358b1a3.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 511209\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"webpack-38cee4c0e358b1a3.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"26a485e9fb19732af7bc08f2ebf0154d\"\r\nlast-modified: Fri, 10 Oct 2025 02:22:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/webpack-38cee4c0e358b1a3.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::nxvz7-1760574170477-9694095f18c0\r\ncontent-length: 886\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1700,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1700), with no line terminators","md5":"26a485e9fb19732af7bc08f2ebf0154d","sha1":"3af402b5971c083af89dc1fdd17320e98eb01d99","sha256":"c1e92a1c5827b02b976fdd931b13ee9f09d45d31db0edbaadf03ca82b96e9a5a","sha512":"5e632a912e250b250f921d654b51bfbfaa7ee3a37999cdd7ec0abcf729b5dddf019ebac0eec1772da71c9631ad5411b5e0d0eccbf5e1056296afa8c9b35481f7","ssdeep":"","tlshash":"b13145c932e2f8d81717ad65482f809bb03a9973146dd5f2eb11c1b57c351584237f7a","first_seen":"2023-03-14T04:03:47Z","last_seen":"2026-07-30T08:02:43.601572Z","times_seen":761,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/pages/_app-891652dd44e1e4e1.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-891652dd44e1e4e1.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_app-891652dd44e1e4e1.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"4d7da4fe1843aaec68ff71076873432e\"\r\nlast-modified: Thu, 16 Oct 2025 00:22:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/pages/_app-891652dd44e1e4e1.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4m2js-1760574170483-6fe1ed25eab0\r\ncontent-length: 470\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":470,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (470), with no line terminators","md5":"4d7da4fe1843aaec68ff71076873432e","sha1":"a3a47ee14b8366bc427701816e57f1710a81159f","sha256":"6cf9b69fc054d0c77d2dedc68d648cb3349f6727a2b058ec537eaaf71f831a92","sha512":"570cd59a824cd356ebac31a88888d43763f37a31944c86b093b877c6bfe825b479adab1845e3ac5149f2e4708ebb6b08d76f73bbf8468d89bb388a175dcabd02","ssdeep":"","tlshash":"14f027983cd2b824129752b841bf256e72bf2d9824ad658097a2d0d97e7115d9122f8c","first_seen":"2023-03-26T03:39:30Z","last_seen":"2026-05-22T23:03:03.846891Z","times_seen":19,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/1bfc9850-ee9594b91b258940.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/1bfc9850-ee9594b91b258940.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 511208\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"1bfc9850-ee9594b91b258940.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"ceb280bb31d1e28fb1e5fb92fce3c12d\"\r\nlast-modified: Fri, 10 Oct 2025 02:22:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/1bfc9850-ee9594b91b258940.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gchfc-1760574170485-fa2235597d54\r\ncontent-length: 821\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1561,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1561), with no line terminators","md5":"ceb280bb31d1e28fb1e5fb92fce3c12d","sha1":"0ef31da0f9338254aea18e92ede13163f1b8d5d9","sha256":"244a22ecbbb0ff2de9eccfdcce177db6aa05bcab1aa1cd2ea628baf6516ff600","sha512":"9753286eae8e93f7e860de3dfdc7f61d079ebab19628ce5f6599162d3021623b402ccb3a7658db162e15ae50660d333d50247015f1005dbefce4a41b54d4f721","ssdeep":"","tlshash":"0f31dd7d9294d7eccdb62ded8a3b50b9548f992d20d19b068b60c6b0b5b00c8816eccf","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-07-30T08:02:43.617218Z","times_seen":547,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/154-3106e83829c99344.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/154-3106e83829c99344.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 511208\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"154-3106e83829c99344.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"b2b6d8a8ffd4e495a7c3889c463bcd97\"\r\nlast-modified: Fri, 10 Oct 2025 02:22:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/154-3106e83829c99344.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6r4h9-1760574170486-9f09ea1d66b1\r\ncontent-length: 18617\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":50238,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48643)","md5":"b2b6d8a8ffd4e495a7c3889c463bcd97","sha1":"66029654a2958f8aab67088d5b164af528145c56","sha256":"35002e086fbba7e81d54b90d2695117b5b4284b3fb6b5a55868f269e38d8c552","sha512":"a641323bc3f894c4da6bce86343e47a15e91ab53d3434ea7fe914ead0817a1ce05c24ed4a6ae42ce362e153ec686482fca84ec493f4a9a6f0cb67acfd40a9415","ssdeep":"768:XS+CtW9kstn4YsReoZNiMBGYsAUV9/Q+k/h4AUQvxnwYbs79nmFZJ0ckDf3ze9lK:icn4zMyU8h4gcm7Kc7W9F","tlshash":"88330cc5f7e5b03513a611a4405f440bf27ada69a44e0ce8f250e8d738b998e91fbf78","first_seen":"2025-10-07T12:39:07.695632Z","last_seen":"2025-10-16T00:23:20.327291Z","times_seen":8,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/_IOkjpDeaqagzrGlVO_pX/_buildManifest.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/_IOkjpDeaqagzrGlVO_pX/_buildManifest.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 511208\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_buildManifest.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"01c1db2c26f92f2211ff2bc7b166ad05\"\r\nlast-modified: Fri, 10 Oct 2025 02:22:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/_IOkjpDeaqagzrGlVO_pX/_buildManifest.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4m2js-1760574170490-faf8f105cf52\r\ncontent-length: 959\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":959,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (959), with no line terminators","md5":"01c1db2c26f92f2211ff2bc7b166ad05","sha1":"229fac324a574746e21f55fe89ae5fe4220fd62c","sha256":"84cd8a82d7779e05d2a438f056f5ca76231655f08715be5154b15c9bdf3ded49","sha512":"7a5d71ab728ee36103d20aa8edbee17a4e9b6904acc42b835cfc272e0ccfee6be4bf219ffb2f1a00c9ca69809613ad1de7e03ea38b1ef29cb7351e01b37cacd8","ssdeep":"","tlshash":"1a1148a3921af81bdee1ec89786e0763afd19836143409d7c3ed1e6c54901b39f5d83a","first_seen":"2025-10-07T12:39:07.713646Z","last_seen":"2025-10-16T00:23:20.333282Z","times_seen":8,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/main-19bc621d38313aef.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/main-19bc621d38313aef.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 511208\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"main-19bc621d38313aef.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"0bb5aa72f40ddda1aa81ff13afbd6a2d\"\r\nlast-modified: Fri, 10 Oct 2025 02:22:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/main-19bc621d38313aef.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4m2js-1760574170481-33dc37dc9df2\r\ncontent-length: 27872\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":89284,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0bb5aa72f40ddda1aa81ff13afbd6a2d","sha1":"32af85d53e0ce081ddcbb3a21b938ab70427b003","sha256":"316f9c5c1e25387a8e3ea454b7acd46a28016d07a863e53391db555f914cf4f3","sha512":"cd8c1e0cd0b473561c4ae331dd29dc974ea809e13a1c9ca0a1924b217c5527a47115fd14554ae419ba392d9700e115c7e1d05f8a57e3318d0d073d1df71e0e88","ssdeep":"768:2D8djHLTnYYx3qO9w2NBsEHdnBDjhEZ1gfvebVzPVnoKt0OcEng3i6JUKT82Let3:2odjHoY3zRnBfhEZ1xduKtE2g3pgr88","tlshash":"509309b572d1f4a207db41a5843b0202f3661d3e641fa855e3ebdcd775a0d8ea0a2f36","first_seen":"2024-10-27T17:02:21.607107Z","last_seen":"2026-07-23T14:48:25.970417Z","times_seen":13,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"b98bc7c3-3b2716b59bdfc294.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"739ca4ff1562e6418fe90a93135d9ddb\"\r\nlast-modified: Thu, 16 Oct 2025 00:22:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/b98bc7c3-3b2716b59bdfc294.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::sqshs-1760574170484-2eec2fad3f59\r\ncontent-length: 653\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1264,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1264), with no line terminators","md5":"739ca4ff1562e6418fe90a93135d9ddb","sha1":"1dee7b0d39f7aae0c381831390daa0cea3bcef8b","sha256":"6aad604817dd874413449cce9af0b4ddd8ab618984a35d970a1899db987dc9f2","sha512":"4833078975c6304f2111637a233ca835386a894d3b3b4246b8006879dce060ab8769f4d04f4e7822f036d2fb8bec21c5ae85f64cec3d6423062a08e013476dbc","ssdeep":"","tlshash":"752168c4237074add9c52c3850b2266616b8145f34e6c594b77f04c8de61bd45868c6f","first_seen":"2023-03-26T07:53:48Z","last_seen":"2026-07-30T08:02:43.593648Z","times_seen":622,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/98-adef635177c7789a.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/98-adef635177c7789a.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 511209\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"98-adef635177c7789a.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"bcd10502ac15caabb886ee44cbea94bd\"\r\nlast-modified: Fri, 10 Oct 2025 02:22:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/98-adef635177c7789a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nffp-1760574170487-49332a03d143\r\ncontent-length: 11001\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":36633,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36633), with no line terminators","md5":"bcd10502ac15caabb886ee44cbea94bd","sha1":"a6ae537c2a4739fa96158d191a5e34e699352173","sha256":"f5cd6c7b76b774096b2519ec4312764a18de99b4043f224ef7a6721d15a95666","sha512":"953b101229f19058f9a7a7c10582473da62c7832139b545326305c0dcc1b1b96481a0f107135b8f6ecf0d249b0e237d27051695c18a0c3eb331a5374e077b00a","ssdeep":"768:41ZioEMqMBMLM2MVMaMuMNMhO8q1xyQlnGrjCWLTMLi5XxZX:+iU3u4baHTShO8qxerMixX","tlshash":"9df2b6c971d2f4a203d39561403f6206f22a1d6d640df4d0e365dee2e93895fa132fba","first_seen":"2025-10-07T12:39:07.711608Z","last_seen":"2025-10-16T00:23:20.36651Z","times_seen":8,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/pages/auth-364fc3af3d62dd72.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/pages/auth-364fc3af3d62dd72.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 741555\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"auth-364fc3af3d62dd72.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"351fd1552d1247de6946066117ffb947\"\r\nlast-modified: Tue, 07 Oct 2025 10:23:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/pages/auth-364fc3af3d62dd72.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::f79qq-1760574170503-6e116d8c3322\r\ncontent-length: 1574\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3614,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3614), with no line terminators","md5":"351fd1552d1247de6946066117ffb947","sha1":"d67f41be893c39afc9800bf8575666696f08ca36","sha256":"ff7c3a9ea9dcd914f84cd500f6715d8e657a18cb536e56c3c831d482e4384d6b","sha512":"9179179147ceba85be4b2d06ac05a1d126aa39abdd647d357afe74b785e2e1b350adefba57f085fe23982fc1412a65015c5381f69c8c7510ec547ad06f0a6175","ssdeep":"","tlshash":"48715208b0637edea46704d8245f900cb15d9694ca1e0db4f7f87c2a25978d4b7c2bdd","first_seen":"2025-10-07T12:39:07.719419Z","last_seen":"2025-10-16T00:23:20.37923Z","times_seen":8,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/images/hero.jpg","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /images/hero.jpg HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/_next/static/css/bb8bc96b53f1f6a4.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"hero.jpg\"\r\ncontent-type: image/jpeg\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"a737c03b02520f8f95eebaccd0a67cf9\"\r\nlast-modified: Thu, 16 Oct 2025 00:22:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /images/hero.jpg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nffp-1760574170560-657c05c1961e\r\ncontent-length: 305755\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305755,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3","md5":"a737c03b02520f8f95eebaccd0a67cf9","sha1":"338fda630759a03dc136a3aaa3ff3134cb6391c8","sha256":"7218b6041ee8b2d63be9bb7aab4322cab1f92bc795586693bffea561b4df9047","sha512":"11d56297c94a94249fa4e53f6ea00b836d103f3683a5f3a828edcaa3ca0cc90a43639e9d441a52eb40ae81bb79229a9910ab6ceefffd8f14cbf48ce9d4973a08","ssdeep":"6144:qEyQZGPMVDNPA3nXDnfr6c9FyqPSe/jCnwj1NkCl693RTLsN1Bja:rnZPA3nXDfrFvyetdjnY9RTo4","tlshash":"4b5423728d532cc634ecdf982454eec8b46bfde694c7246e015dc854392d068daee71a","first_seen":"2023-05-06T08:35:42Z","last_seen":"2026-08-11T08:02:36.742485Z","times_seen":677,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/css/bb8bc96b53f1f6a4.css","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/css/bb8bc96b53f1f6a4.css HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 772427\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"bb8bc96b53f1f6a4.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"1c041ca9b360115f57f401054bdac753\"\r\nlast-modified: Tue, 07 Oct 2025 01:49:03 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/css/bb8bc96b53f1f6a4.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6r4h9-1760574170475-7cb65e2b7560\r\ncontent-length: 4325\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17998,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17934)","md5":"1c041ca9b360115f57f401054bdac753","sha1":"d63927d588ecdc08474b4c687c08c116b49845c9","sha256":"1aeb5dc7937685c033d140c959d2cfb1d98ea0342df275900b1ec11703f379e8","sha512":"d2da4cc659c5e6be2fed96d259a77857745b3d48fd08f3885321bb02dad00ca7df1036b340252c6ca9fdc41c919f1c5f7d3df11b159ef0f64ec2bb60c50448aa","ssdeep":"192:n6wns7JyYY7JyY7isfNsf7sfqFsfj+L+YGdOZrS8x0/YZeZNuUtRsfYsfJXsf8s6:6wawNYGdOf0AZeZNuGz6","tlshash":"1982531daf65003f6c6680f6db94fa9c710a70c1de3b5ab6ba931101afd13f60de6618","first_seen":"2025-10-07T12:39:07.717398Z","last_seen":"2025-10-16T00:23:20.393828Z","times_seen":8,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/chunks/framework-2c79e2a64abdb08b.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 511208\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"framework-2c79e2a64abdb08b.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"7fc4bed6b4319c62343f0bf5db91a5bb\"\r\nlast-modified: Fri, 10 Oct 2025 02:22:41 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/chunks/framework-2c79e2a64abdb08b.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nffp-1760574170480-664de4fed052\r\ncontent-length: 46631\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"7fc4bed6b4319c62343f0bf5db91a5bb","sha1":"6e283c4ea2b12da64476af280236a8c5d85dbbbc","sha256":"f2ae26ff518d9519afd2a3dc277d84e098458e6b6b85fa9548cda2bed24435e7","sha512":"e2e0072386f2f35690899509229136406c27c2b95e3e8cc810aeb6630d7f13bd0872e0f6e650b4fddce2567680e7c42eea49c62bd2653006f5151d9ba0430cd7","ssdeep":"1536:2YjvmNg6kMudjY+o3F36qmk1S/qcnde//ZQg:Dj7UN6qT1S5cXmg","tlshash":"a3d309e83995f6526ab311a700af2803733d2a1b280c4960e615fd9e75b841fb17bfdd","first_seen":"2023-03-13T20:58:32Z","last_seen":"2026-08-12T16:50:36.878814Z","times_seen":2317,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/_next/static/_IOkjpDeaqagzrGlVO_pX/_ssgManifest.js","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /_next/static/_IOkjpDeaqagzrGlVO_pX/_ssgManifest.js HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 741555\r\ncache-control: public,max-age=31536000,immutable\r\ncontent-disposition: inline; filename=\"_ssgManifest.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"b6652df95db52feb4daf4eca35380933\"\r\nlast-modified: Tue, 07 Oct 2025 10:23:35 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /_next/static/_IOkjpDeaqagzrGlVO_pX/_ssgManifest.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6r4h9-1760574170491-15f91551b002\r\ncontent-length: 77\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-13T08:43:10.473303Z","times_seen":252697,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"nextflix-six.vercel.app/favicon.ico","fqdn":"nextflix-six.vercel.app","domain":"nextflix-six.vercel.app","tld":"vercel.app"},"ip":{"addr":"216.198.79.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nextflix-six.vercel.app/auth","date":"2025-10-16T00:22:50.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 24 Aug 2025 16:25:33 GMT","end":"Sat, 22 Nov 2025 16:25:32 GMT"},"fingerprint":{"sha1":"65:BC:A7:BA:F4:02:35:5A:8E:26:1A:28:11:13:6E:A9:04:93:AF:53","sha256":"4A:D3:2C:0E:A9:6E:49:2B:0F:83:76:28:51:24:AD:FC:65:D0:91:9D:87:49:B8:B5:AE:97:5D:33:87:86:7D:7C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nextflix-six.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nextflix-six.vercel.app/auth\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 733453\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"favicon.ico\"\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Thu, 16 Oct 2025 00:22:50 GMT\r\netag: \"c30c7d42707a47a3f4591831641e50dc\"\r\nlast-modified: Tue, 07 Oct 2025 12:38:37 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-matched-path: /favicon.ico\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::5nffp-1760574170946-49f8da042b44\r\ncontent-length: 9308\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25931,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-08-13T08:07:31.529496Z","times_seen":39462,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-10-16","alert":"Phishing Block","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-10-16","alert":"Phishing - Netflix Inc.","trigger":"nextflix-six.vercel.app","verdict":"phishing","severity":"medium","comment":"Netflix Inc.","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-16","alert":"Sinkholed","trigger":"nextflix-six.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Netflix","verdict":"phishing","severity":"medium","comment":"Associated with Netflix phishing","tags":["netflix","phishing"],"meta":null}]}}]}