{"report_id":"f72d0660-29ab-4a58-8c2b-700a07da1cf3","version":6,"status":"done","tags":[],"date":"2026-01-02T08:02:00Z","url":{"schema":"http","addr":"www.redesigned-doodle-xi.vercel.app/","fqdn":"www.redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"redesigned-doodle-xi.vercel.app/","fqdn":"redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"title":"Naver Sign in","dom":{"size":19036,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (427)","md5":"9daf22047b813bdcd0c6e9fc82af892a","sha1":"5f8c46d4c37037cf03c5d1bdabb652a0c0c48ab9","sha256":"dbcd702ccd250b67dbf8f98034a6dffba8149d323303402bc1f22af1734de6f0","sha512":"2e2418b342b68eecf2fe65e7b5646158f9ec720f6332c32331a3e9cd2e0ff49ba86683676fc3c35f9bee328f290da8b124f32f8521001b18700c04665411f22e","ssdeep":"192:Y+h+FvYR8tcSa0lljbtigae4n3I6rdnNuEjdT06L:/MpYKa0njbtigae4n3I6hnhA2","tlshash":"e582e62298f98c33411380e8baf6eb296d998117c70e9c00b2fc1be45fd7e869d1756d","dom_hash":"domhashf3e5b431bd7d7083291f09dcd5c4bf67","first_seen":"2026-01-02T08:01:45.636868Z","last_seen":"2026-01-02T08:02:04.534138Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.redesigned-doodle-xi.vercel.app/","fqdn":"www.redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-06T08:02:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":13}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-02","alert":"Hunting_JS_WebAssembly","trigger":"wtm.pstatic.net/5218a1d/125dcfc3d28e3603b6a5.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-02","alert":"Hunting_JS_WebAssembly","trigger":"wtm.pstatic.net/39cb238/11b3bf3f99abd6f7c749.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-02","alert":"Phishing - Naver","trigger":"www.redesigned-doodle-xi.vercel.app/","verdict":"phishing","severity":"medium","comment":"Naver","link":"https://openphish.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-02","alert":"Phishing Block","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-02","alert":"Phishing Block","trigger":"redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-02","alert":"Phishing - Naver","trigger":"redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"Naver","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-02","alert":"Phishing - Naver","trigger":"redesigned-doodle-xi.vercel.app/","verdict":"phishing","severity":"medium","comment":"Naver","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"nlog.naver.com","ip":{"addr":"203.104.162.225","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"Germany","country_code":"DE"},"domain_registered":"1997-09-12","domain_rank":354439,"first_seen":"2023-05-26T15:20:44Z","last_seen":"2025-12-27T18:52:46.829586Z","alert_count":0,"request_count":1,"received_data":492,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.redesigned-doodle-xi.vercel.app","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-12-02T14:38:06.433945Z","last_seen":"2025-12-02T14:38:06.433945Z","alert_count":20,"request_count":4,"received_data":19125,"sent_data":1932,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ntm.pstatic.net","ip":{"addr":"2.18.173.26","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2011-09-06","domain_rank":387570,"first_seen":"2022-02-04T12:44:48Z","last_seen":"2026-01-02T04:49:30.291839Z","alert_count":0,"request_count":4,"received_data":811120,"sent_data":1754,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wtm.pstatic.net","ip":{"addr":"23.36.76.113","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2011-09-06","domain_rank":2156085,"first_seen":"2024-12-31T15:52:33.77949Z","last_seen":"2025-12-27T18:52:46.738751Z","alert_count":2,"request_count":4,"received_data":1397497,"sent_data":1990,"comment":"","tags":null,"fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}]},{"fqdn":"redesigned-doodle-xi.vercel.app","ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-01-28","domain_rank":0,"first_seen":"2025-12-16T19:02:02.619085Z","last_seen":"2026-01-02T08:01:40.459315Z","alert_count":15,"request_count":3,"received_data":20010,"sent_data":1403,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"ssl.pstatic.net","ip":{"addr":"95.101.10.41","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2011-09-06","domain_rank":71086,"first_seen":"2012-10-18T18:40:49Z","last_seen":"2025-12-30T07:17:53.869074Z","alert_count":0,"request_count":2,"received_data":161197,"sent_data":933,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.pstatic.net","ip":{"addr":"23.36.76.107","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2011-09-06","domain_rank":436861,"first_seen":"2017-01-30T06:32:01Z","last_seen":"2026-01-02T08:01:40.319611Z","alert_count":0,"request_count":1,"received_data":2171,"sent_data":502,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nid.naver.com","ip":{"addr":"110.93.159.38","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"domain_registered":"1997-09-12","domain_rank":10343,"first_seen":"2013-11-07T14:13:54Z","last_seen":"2026-01-02T08:01:40.389569Z","alert_count":0,"request_count":4,"received_data":958906,"sent_data":1861,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-12-28T22:27:44.219613Z","alert_count":0,"request_count":1,"received_data":268971,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"ncpt.naver.com","ip":{"addr":"110.93.151.161","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"domain_registered":"1997-09-12","domain_rank":603816,"first_seen":"2024-12-31T15:52:33.770818Z","last_seen":"2025-12-27T18:52:46.81275Z","alert_count":0,"request_count":1,"received_data":56604,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nid.naver.com/passkey/js/passkeyApi.js?v=20250120","fqdn":"nid.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"110.93.159.38","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c4595fdee65864e174fc3357573d946","sha1":"8b1b11ae14792eb5a83e72822eb72850faddaaed","sha256":"fb8c3b935afc95c553f17e34d3d361b7f5ca92f3869e4f1a204c6d3e23891d0d","sha512":"e60ee8caa0fae79461a6fdd2d62dce467d1fe188931b2cd20b3d323c9bb9be7a556d13f170739f63e28602754c8a7ac38fb0b6dd58cf2a080fc64eeee91ebb7b","ssdeep":"1536:foC9HFEKQERch/6t7JyMin9RrYkcRHh89NtleEVgMwyyZmjsGG20zUdVZKW4XVDk:AC9HFEKDK/qKn3qBGt4Ao/dX32ecpL","tlshash":"37d4735002a2ddf6ffe50995c2b21818387d5a7b646125b0aad2bdfe6c1adc480f1f1f","size":653263,"data":"","first_seen":"2025-12-20T07:48:15.018126Z","last_seen":"2026-01-07T04:19:18.641511Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redesigned-doodle-xi.vercel.app/","fqdn":"redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"47eabbf321ef294d5886f8a9486fa7cb","sha1":"fc674faa8afd39f389e04e38f5536f1d220ea1f9","sha256":"09c88593b1c7b5c7f99532b7789acbcf334e887c25153ec6d23b6a9b40df3b0b","sha512":"d93170a0ca15f7d07609241b1c01d0b082b0bcfcbb11944b09a85843c0f5213910935f4705f99f6c66481920a8df6a76ddf9046e0d1fa7627f4b70b6a92b676a","ssdeep":"","tlshash":"66e092ca3989a1bc5b5720b9716b41c92818a2430d05ecb0be0c39a81f20f82cdad6e1","size":428,"data":"","first_seen":"2025-08-18T13:54:47.89613Z","last_seen":"2026-06-04T14:22:42.129385Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wtm.pstatic.net/5218a1d/125dcfc3d28e3603b6a5.js","fqdn":"wtm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.76.113","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf28d365a615744a8fbd419e63eb1cf5","sha1":"44eecc3979a1d20d11149adfd2a96fab90fb0bf1","sha256":"3b2ff9ee39e9aa8073e56da05bcf9033a0d141e575753b0a09b91eb8ac325ade","sha512":"7a7a93d114ec07f6e24892feea7e4f84f1971dfc06002fa665c76dabc23db608c187b98958dec751ed511bd61c60298446c35c0a2adbbe1c3b397802bcfaae63","ssdeep":"6144:ZXMmu9gBGefatrMgvhW2kbLiNgquHUPoaYJHYu:Ru92fyogYkjuHU7u","tlshash":"15643bd8b5e3b0220a5710e1007f069bf27dd914614a93d0e26aecd67c74e6ba47be3d","size":325330,"data":"","first_seen":"2025-12-20T07:48:15.013061Z","last_seen":"2026-01-14T13:12:00.962904Z","times_seen":31,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-02","alert":"Hunting_JS_WebAssembly","trigger":"wtm.pstatic.net/5218a1d/125dcfc3d28e3603b6a5.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/scripts/ntm_109a32482d88.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"2.18.173.26","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b008c9e4ab7d6953dcfc429ca03e13b","sha1":"3e938a3fc0e981813ef7639a04fb9c487d9370da","sha256":"e0be3e937f5a05e1f06dccb1e73a9415fc01d1de9e9c168dfaaacd2d019771a6","sha512":"c9c6ff2dc8cdf93fc94e8aa9fcd7a85665bc844c597f3b153bae065e26c34b1d6d2197be83b64da9287c18fdd9fde46f38f17a7a17e2a5c148c36dd47785a086","ssdeep":"3072:wbuNTDNsO+18C9wdYI4JJa8JJj6vdluTxm1d1Rhs0:wwuO+18MJOvdB1rs0","tlshash":"c234b78cfe92f0b956e3a1a4802f550af17b2a25701ed4d1daa2c5d1ac7898f4173f3d","size":249611,"data":"","first_seen":"2024-12-22T16:31:50.016921Z","last_seen":"2026-06-24T10:29:23.464828Z","times_seen":460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wtm.pstatic.net/39cb238/11b3bf3f99abd6f7c749.js","fqdn":"wtm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.76.113","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"81c31475a00e9e9614a6bb0cb5d9b38a","sha1":"5f654735c2224508a9f8bbc7e1fc4903d1f022c4","sha256":"22c9a8a5ae6d9d41afd9fa1c40c22a5985e018a26b5c69c0c66b17715d547310","sha512":"2839dca20fab844d85bb5ea8066b2c4d54eabfa665c218778c90f9d458f49fecf1e3314bc585ea03245d55e8fb72db6850ae9ea9be44916d570841db8df832e0","ssdeep":"3072:q/Sjy/dLd6JgTg+bpcglT8vcQCT+Ep5xC6NVG85K+wvvNuw1gPWfmdKm47TXCXhG:kzT++wvvNuaHCxgen1rNcR+eAqLoEV","tlshash":"7d844b88b6fff16a73921061507f06a7f17e9424144d8990e368dce67c746bab03be39","size":378343,"data":"","first_seen":"2025-06-07T04:54:43.751047Z","last_seen":"2026-06-11T13:33:42.419445Z","times_seen":301,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-02","alert":"Hunting_JS_WebAssembly","trigger":"wtm.pstatic.net/39cb238/11b3bf3f99abd6f7c749.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"nid.naver.com/login/js/v3/default/default_202105.js?v=20250411","fqdn":"nid.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"110.93.159.38","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf38c65c4d7177a77afb770302997aee","sha1":"b06a24751d028e5333d3d5104f96117ce1ccd497","sha256":"13b4e5573bfa132aea709a5c7c0acd6938620076b2cbdcf0e0a742a856637feb","sha512":"377a3ee90c654f9928fe75af9df128a22f7028f6807abe8ec2a3f6187a991d78357c29622e1c059d743583a47269bb71bf0a1f94c053c2ce94360bbd36cc7606","ssdeep":"3072:wVrNPdpEFZPMlFaFITY7o52KGGDTiM7B5:wVrmMlFaykE522D","tlshash":"1834078cb6d6b47203e720a5113f110bf23b5969744e84d4e2a5d9f1adb888e813bf7d","size":233727,"data":"","first_seen":"2025-12-19T20:15:04.680622Z","last_seen":"2026-01-07T04:19:18.624237Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/ex/nlog.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"2.18.173.26","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"30aeeedcdc0093b7d9c0d814f05caa04","sha1":"b08d4a2137536c358be3899eb210e14297ec622c","sha256":"34d6fc3ec2bd6cb5f9159ae093e9e49e9e97e3597a1a567272b879fc64c71443","sha512":"b1cbcc30c5ecc8ef40fc17d95f8bc6e6c3b4bd693f4d5e9aa78fd4486ec40901342931ac5963d5eb69a58e135d60fc7d5458340f2392d577c7693a07847dee4f","ssdeep":"1536:QujDhew3nDTLnoBruK+o42Z1UZPvJYRS6I7Qpkit2nzi0XLxlxB5TNTadvL2fRJ0:JtcBaBoXdoFQYZaWRJs3HGbIZ","tlshash":"36e3b78cfad2f0b546f365a0806f960af17b2a25740ee4d1d6a6c4c1ac7898f5173e3d","size":154915,"data":"","first_seen":"2026-01-02T04:49:43.006503Z","last_seen":"2026-02-11T02:54:15.804293Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/ex/nlog.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"2.18.173.26","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"30aeeedcdc0093b7d9c0d814f05caa04","sha1":"b08d4a2137536c358be3899eb210e14297ec622c","sha256":"34d6fc3ec2bd6cb5f9159ae093e9e49e9e97e3597a1a567272b879fc64c71443","sha512":"b1cbcc30c5ecc8ef40fc17d95f8bc6e6c3b4bd693f4d5e9aa78fd4486ec40901342931ac5963d5eb69a58e135d60fc7d5458340f2392d577c7693a07847dee4f","ssdeep":"1536:QujDhew3nDTLnoBruK+o42Z1UZPvJYRS6I7Qpkit2nzi0XLxlxB5TNTadvL2fRJ0:JtcBaBoXdoFQYZaWRJs3HGbIZ","tlshash":"36e3b78cfad2f0b546f365a0806f960af17b2a25740ee4d1d6a6c4c1ac7898f5173e3d","size":154915,"data":"","first_seen":"2026-01-02T04:49:43.006503Z","last_seen":"2026-02-11T02:54:15.804293Z","times_seen":118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/scripts/ntm_109a32482d88.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"2.18.173.26","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b008c9e4ab7d6953dcfc429ca03e13b","sha1":"3e938a3fc0e981813ef7639a04fb9c487d9370da","sha256":"e0be3e937f5a05e1f06dccb1e73a9415fc01d1de9e9c168dfaaacd2d019771a6","sha512":"c9c6ff2dc8cdf93fc94e8aa9fcd7a85665bc844c597f3b153bae065e26c34b1d6d2197be83b64da9287c18fdd9fde46f38f17a7a17e2a5c148c36dd47785a086","ssdeep":"3072:wbuNTDNsO+18C9wdYI4JJa8JJj6vdluTxm1d1Rhs0:wwuO+18MJOvdB1rs0","tlshash":"c234b78cfe92f0b956e3a1a4802f550af17b2a25701ed4d1daa2c5d1ac7898f4173f3d","size":249611,"data":"","first_seen":"2024-12-22T16:31:50.016921Z","last_seen":"2026-06-24T10:29:23.464828Z","times_seen":460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.9.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08c235d357750c657ac1db7d1cf656a9","sha1":"9257afd2d46c3a189ec0d40a45722701d47e9ca5","sha256":"7bd80d06c01c0340c1b9159b9b4a197db882ca18cbac8e9b9aa025e68f998d40","sha512":"d62700e7a1ff41f9d6326ca024ba2be1d391bc8fbb2aeae0f427d74837899b230940bf7c2df3d193f5300a68bb3686706d4c31328234b5cda026a1bf52ef9e70","ssdeep":"6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i","tlshash":"fa44b6d8f78c112e8232316aad2f51cdb67cd172561058afbd8d597c24a083d42faf7a","size":268381,"data":"","first_seen":"2023-03-07T01:03:57Z","last_seen":"2026-08-15T07:03:18.669552Z","times_seen":39263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redesigned-doodle-xi.vercel.app/","fqdn":"redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9cfe6fb0b6c9048990073a31409c7d78","sha1":"fd8154388fb5342dd7a7d4a91bd1f3e113bf7fc9","sha256":"e48ea95786db0a4ff364943317a3a376a821780e3155c412a287435462c03bcb","sha512":"f495e53007d510c50169629dd30709729a8f3dd544adc3a52372fe672862d3ac0bb46df411cea4f471c8ca619b4df89ce16c41ed4bc627064c336784a94f271b","ssdeep":"","tlshash":"6041780f79ab359019b3703a67bf62047a62218f1809ed01355c6ae00f19f1f8d9b78a","size":1934,"data":"","first_seen":"2025-11-03T14:18:04.697753Z","last_seen":"2026-02-08T22:24:14.8978Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpt.naver.com/static/ncaptcha-api.js?ncaptcha-sitekey=6e3d93f4f845d053db08d51e2eb36ca3efe03fea21f21ee8d02e60ef10f6b73a15e951eccc1ef4b866ab3ce4","fqdn":"ncpt.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"110.93.151.161","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d430d2e4b0c4c521d34ee4c1db06adfd","sha1":"e42ffc96fa9e350fea00bdc93e722a40fbda9173","sha256":"79dd6a4ca9fa29af458edbf47127c22e56415376fed1d65f91d358b93d354b7c","sha512":"6891d589174e882427708377a65c9456ccb4546130e43652d15ba358b713340b40a5c3fb0196d71c379d08b4d6e3fd0e04203b43b3a50c413ab3675caecd9fc3","ssdeep":"1536:Au2eIDUv2BMQJ1nBzN2cgWg0AmtcbqC1PL1:Au2eIDUv2BvnBzwcg/0dtcbqC1L1","tlshash":"834385845538dfae0743c125630f6832bf23aba348b81055a97eb7003bb8d96bb5b575","size":56144,"data":"","first_seen":"2026-01-02T08:02:04.544263Z","last_seen":"2026-01-10T06:35:27.32454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nlog.naver.com/n","fqdn":"nlog.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"203.104.162.225","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:42.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corp."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:B3:02:B8:26:D6:90:49:71:40:F3:8C:B6:B9:2C:4D:13:30:EC:A2","sha256":"DF:1D:9B:40:32:7F:1B:B3:26:CA:00:EE:98:B6:E9:77:2D:FD:1B:4A:4E:BE:45:AF:66:92:5B:4D:3E:AB:E7:3B"}}},"request":{"raw":"POST /n HTTP/1.1\r\nHost: nlog.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 1031\r\nOrigin: https://redesigned-doodle-xi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1031,"data":"{\"corp\":\"naver\",\"svc\":\"nid\",\"location\":\"korea_real/korea\",\"svc_tags\":{},\"send_ts\":1767340902042,\"tool\":{\"name\":\"ntm-web\",\"ver\":\"nlogLibVersion=v0.1.60; verName=1.0.1; ntmVersion=v1.4.0\"},\"usr\":{},\"env\":{\"os\":\"Win32\",\"br_ln\":\"en-US\",\"br_sr\":\"1280x1024\",\"device_sr\":\"1280x1024\",\"platform_type\":\"web\",\"device_pr\":\"1\",\"timezone\":\"UTC\"},\"evts\":[{\"page_url\":\"https://redesigned-doodle-xi.vercel.app/\",\"page_ref\":\"\",\"page_id\":\"c1e99a7fc015959ac26ba5fd74a7a94b\",\"timing\":{\"type\":\"reload\",\"unloadEventStart\":0,\"unloadEventEnd\":0,\"redirectStart\":0,\"redirectEnd\":0,\"workerStart\":0,\"fetchStart\":1123,\"domainLookupStart\":1125,\"domainLookupEnd\":1125,\"connectStart\":1125,\"secureConnectionStart\":1129,\"connectEnd\":1152,\"requestStart\":1152,\"responseStart\":1163,\"responseEnd\":1329,\"domInteractive\":61,\"domContentLoadedEventStart\":213,\"domContentLoadedEventEnd\":215,\"domComplete\":4049,\"loadEventStart\":4049,\"loadEventEnd\":4049,\"first_contentful_paint\":2606},\"type\":\"pageview\",\"evt_ts\":1767340902038,\"nlog_id\":\"7c660ac5-7642-4e0f-9e08-8d88d5155c18\"}]}"}},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 02 Jan 2026 08:01:41 GMT\r\nset-cookie: NNB=SUK3CTLGPNLWS; expires=Sat, 01 Jan 2050 09:00:00 GMT; path=/; domain=.naver.com; SameSite=None; Secure\nSRT30=1767340902; expires=Fri, 02 Jan 2026 08:31:42 GMT; path=/; domain=.naver.com; SameSite=None; Secure\nSRT5=1767340902; expires=Fri, 02 Jan 2026 08:06:42 GMT; path=/; domain=.naver.com; SameSite=None; Secure\r\nx-envoy-upstream-service-time: 0\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T17:04:31.509094Z","times_seen":17905180,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":80,"dns":1,"connect":33,"send":0,"wait":135,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redesigned-doodle-xi.vercel.app/","fqdn":"www.redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T08:01:36.836Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.redesigned-doodle-xi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T17:04:31.509094Z","times_seen":17905180,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":350,"dns":0,"connect":3,"send":0,"wait":0,"receive":0,"ssl":348},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-02","alert":"Phishing - Naver","trigger":"www.redesigned-doodle-xi.vercel.app/","verdict":"phishing","severity":"medium","comment":"Naver","link":"https://openphish.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-02","alert":"Phishing Block","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/ex/nlog.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"2.18.173.26","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:39.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Mon, 29 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:1A:5B:CB:CA:6F:4D:C4:54:14:EA:80:9E:58:78:0B:E5:4E:15:75","sha256":"47:40:52:1C:BD:D1:EE:A2:FF:89:F7:2D:0B:AF:6D:77:E0:59:2D:26:8C:5F:4B:A2:89:74:12:FE:8B:E9:02:27"}}},"request":{"raw":"GET /ex/nlog.js HTTP/1.1\r\nHost: ntm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 31 Dec 2025 04:39:50 GMT\r\nserver: Testa/6.2.11\r\ncontent-type: application/javascript; charset=utf-8\r\nmutated: false\r\nx-etag: 25d2300006954a916\r\nx-object-archived: false\r\nx-object-restored: false\r\ncontent-encoding: gzip\r\ncontent-length: 48256\r\ncache-control: max-age=888\r\nexpires: Fri, 02 Jan 2026 08:16:27 GMT\r\ndate: Fri, 02 Jan 2026 08:01:39 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154915,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65499), with no line terminators","md5":"30aeeedcdc0093b7d9c0d814f05caa04","sha1":"b08d4a2137536c358be3899eb210e14297ec622c","sha256":"34d6fc3ec2bd6cb5f9159ae093e9e49e9e97e3597a1a567272b879fc64c71443","sha512":"b1cbcc30c5ecc8ef40fc17d95f8bc6e6c3b4bd693f4d5e9aa78fd4486ec40901342931ac5963d5eb69a58e135d60fc7d5458340f2392d577c7693a07847dee4f","ssdeep":"1536:QujDhew3nDTLnoBruK+o42Z1UZPvJYRS6I7Qpkit2nzi0XLxlxB5TNTadvL2fRJ0:JtcBaBoXdoFQYZaWRJs3HGbIZ","tlshash":"36e3b78cfad2f0b546f365a0806f960af17b2a25740ee4d1d6a6c4c1ac7898f5173e3d","first_seen":"2026-01-02T04:49:43.006503Z","last_seen":"2026-02-11T02:54:15.804293Z","times_seen":118,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":28,"dns":8,"connect":2,"send":0,"wait":7,"receive":5,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/ex/nlog.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"2.18.173.26","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:39.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Mon, 29 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:1A:5B:CB:CA:6F:4D:C4:54:14:EA:80:9E:58:78:0B:E5:4E:15:75","sha256":"47:40:52:1C:BD:D1:EE:A2:FF:89:F7:2D:0B:AF:6D:77:E0:59:2D:26:8C:5F:4B:A2:89:74:12:FE:8B:E9:02:27"}}},"request":{"raw":"GET /ex/nlog.js HTTP/1.1\r\nHost: ntm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Wed, 31 Dec 2025 04:39:50 GMT\r\nserver: Testa/6.2.11\r\ncontent-type: application/javascript; charset=utf-8\r\nmutated: false\r\nx-etag: 25d2300006954a916\r\nx-object-archived: false\r\nx-object-restored: false\r\ncontent-encoding: gzip\r\ncontent-length: 48256\r\ncache-control: max-age=888\r\nexpires: Fri, 02 Jan 2026 08:16:27 GMT\r\ndate: Fri, 02 Jan 2026 08:01:39 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":154915,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65499), with no line terminators","md5":"30aeeedcdc0093b7d9c0d814f05caa04","sha1":"b08d4a2137536c358be3899eb210e14297ec622c","sha256":"34d6fc3ec2bd6cb5f9159ae093e9e49e9e97e3597a1a567272b879fc64c71443","sha512":"b1cbcc30c5ecc8ef40fc17d95f8bc6e6c3b4bd693f4d5e9aa78fd4486ec40901342931ac5963d5eb69a58e135d60fc7d5458340f2392d577c7693a07847dee4f","ssdeep":"1536:QujDhew3nDTLnoBruK+o42Z1UZPvJYRS6I7Qpkit2nzi0XLxlxB5TNTadvL2fRJ0:JtcBaBoXdoFQYZaWRJs3HGbIZ","tlshash":"36e3b78cfad2f0b546f365a0806f960af17b2a25740ee4d1d6a6c4c1ac7898f5173e3d","first_seen":"2026-01-02T04:49:43.006503Z","last_seen":"2026-02-11T02:54:15.804293Z","times_seen":118,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/static/nid/login/m_sp_00_common_978240a6.png","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"95.101.10.41","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:40.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /static/nid/login/m_sp_00_common_978240a6.png HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nid.naver.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 28 Oct 2021 05:48:39 GMT\r\nserver: Testa/6.2.11\r\naccept-ranges: bytes\r\ncontent-length: 21505\r\nreferrer-policy: unsafe-url\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ncache-control: max-age=190393\r\nexpires: Sun, 04 Jan 2026 12:54:53 GMT\r\ndate: Fri, 02 Jan 2026 08:01:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 488 x 214, 8-bit/color RGBA, non-interlaced","md5":"978240a64630afc18684d2b835a27ae2","sha1":"d4605e0721901ac73e8b9e92526c06d715e964f9","sha256":"3be89f766c6a9ac418ec1c6f33dc7a24607a6e067c0731e77b8cc01fb3355bc7","sha512":"49da669a13e87333d599ceba735df00fa73e70c1446f1296a6f14e9dfea7b7853858f914019be10560347c86a0e743b79f20a0fe09bee561d6ae7fa6673c8561","ssdeep":"384:32utVj9x+pdRkpT1KM31767kkbMw6t8oce2zEeT3ae/5kxVKT7Z:GaZVTu7kJhqc09/Cxq7Z","tlshash":"54a2e1c0443de6df34e6bf310a5a114c28ae674b202a1fbbdd14d8eda5d604c8c4acd3","first_seen":"2023-05-17T15:15:42Z","last_seen":"2026-08-02T17:18:00.750632Z","times_seen":1296,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":46,"dns":9,"connect":1,"send":0,"wait":2,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wtm.pstatic.net/5218a1d/125dcfc3d28e3603b6a5.js","fqdn":"wtm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.76.113","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:41.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /5218a1d/125dcfc3d28e3603b6a5.js HTTP/1.1\r\nHost: wtm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redesigned-doodle-xi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 16 Dec 2025 11:00:18 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\ncontent-length: 122198\r\ncache-control: public, max-age=1301924\r\ndate: Fri, 02 Jan 2026 08:01:41 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":325330,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"cf28d365a615744a8fbd419e63eb1cf5","sha1":"44eecc3979a1d20d11149adfd2a96fab90fb0bf1","sha256":"3b2ff9ee39e9aa8073e56da05bcf9033a0d141e575753b0a09b91eb8ac325ade","sha512":"7a7a93d114ec07f6e24892feea7e4f84f1971dfc06002fa665c76dabc23db608c187b98958dec751ed511bd61c60298446c35c0a2adbbe1c3b397802bcfaae63","ssdeep":"6144:ZXMmu9gBGefatrMgvhW2kbLiNgquHUPoaYJHYu:Ru92fyogYkjuHU7u","tlshash":"15643bd8b5e3b0220a5710e1007f069bf27dd914614a93d0e26aecd67c74e6ba47be3d","first_seen":"2025-12-20T07:48:15.013061Z","last_seen":"2026-01-14T13:12:00.962904Z","times_seen":31,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-02","alert":"Hunting_JS_WebAssembly","trigger":"wtm.pstatic.net/5218a1d/125dcfc3d28e3603b6a5.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"s.pstatic.net/static/www/mobile/edit/20220408_0/upload_1649397328060s5AJW.png","fqdn":"s.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.76.107","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:42.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /static/www/mobile/edit/20220408_0/upload_1649397328060s5AJW.png HTTP/1.1\r\nHost: s.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Testa/6.2.4\r\nlast-modified: Fri, 08 Apr 2022 05:55:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1827\r\nreferrer-policy: unsafe-url\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ncache-control: max-age=23801902\r\nexpires: Sun, 04 Oct 2026 19:40:04 GMT\r\ndate: Fri, 02 Jan 2026 08:01:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"87d98f5921fdf40e7beb2b5ac85e2dcf","sha1":"d3457557626935928de82d480ff4dfd9913229b8","sha256":"136e2b818974551edbab71461cc8fc948ddfb19143fdaeabe1137a0a4f11f96a","sha512":"8555d5bf0f92d0fe1a5bd4dd7c81a741a14ab3f6384a28c22b66be87693dd33d18bc752e6f00f79bf4123277fa66107f4d1ca05f856dd25f2a0a44c158cd3f1e","ssdeep":"","tlshash":"bf3119d3fea74ea2570e3732f5951b4f406b25ad99325d15b231086008d49bcb893604","first_seen":"2023-06-22T15:19:37Z","last_seen":"2026-07-03T17:30:15.078569Z","times_seen":873,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":10,"connect":1,"send":0,"wait":4,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redesigned-doodle-xi.vercel.app/","fqdn":"www.redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T08:01:39.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.redesigned-doodle-xi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 Temporary Redirect\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html\r\ndate: Fri, 02 Jan 2026 08:01:39 GMT\r\nlocation: https://redesigned-doodle-xi.vercel.app/\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-id: arn1::5jlp7-1767340899087-af3ea125197b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18571,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T17:04:31.509094Z","times_seen":17905180,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":29,"dns":1,"connect":1,"send":0,"wait":10,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-02","alert":"Phishing Block","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-02","alert":"Phishing - Naver","trigger":"www.redesigned-doodle-xi.vercel.app/","verdict":"phishing","severity":"medium","comment":"Naver","link":"https://openphish.com","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redesigned-doodle-xi.vercel.app/login/js/srcOnError.js","fqdn":"redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:39.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /login/js/srcOnError.js HTTP/1.1\r\nHost: redesigned-doodle-xi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 02 Jan 2026 08:01:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::44jr2-1767340899485-28e85884b16f\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"47070d6c8da94d9c633ee9b6a0179b3a","sha1":"eed83f256abf50ea6a4b8fc78bd9123afcffc55b","sha256":"504574070bf77abecc0723815f4dd045f7f57c96e0ea6d7beedaf72fc7e4bbff","sha512":"897dad25af574730bb503aaeb33d7397ea965d0314a9a9af9b0376c74d918d2ce8404c2141eb6f3af414fb6a1a33df435a8b2baadd17a6177ae59012a4c1a944","ssdeep":"","tlshash":"23a0120e05420c0932c504027163013a001c01119d94a208308d25443d0028ea340055","first_seen":"2026-01-02T08:02:04.539253Z","last_seen":"2026-01-02T08:02:04.539253Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-02","alert":"Phishing Block","trigger":"redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-02","alert":"Phishing - Naver","trigger":"redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"Naver","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wtm.pstatic.net/39cb238/11b3bf3f99abd6f7c749.js","fqdn":"wtm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.76.113","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:39.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /39cb238/11b3bf3f99abd6f7c749.js HTTP/1.1\r\nHost: wtm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://redesigned-doodle-xi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 12 May 2025 08:22:20 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\ncontent-length: 138325\r\ncache-control: public, max-age=952205\r\ndate: Fri, 02 Jan 2026 08:01:39 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":378343,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"81c31475a00e9e9614a6bb0cb5d9b38a","sha1":"5f654735c2224508a9f8bbc7e1fc4903d1f022c4","sha256":"22c9a8a5ae6d9d41afd9fa1c40c22a5985e018a26b5c69c0c66b17715d547310","sha512":"2839dca20fab844d85bb5ea8066b2c4d54eabfa665c218778c90f9d458f49fecf1e3314bc585ea03245d55e8fb72db6850ae9ea9be44916d570841db8df832e0","ssdeep":"3072:q/Sjy/dLd6JgTg+bpcglT8vcQCT+Ep5xC6NVG85K+wvvNuw1gPWfmdKm47TXCXhG:kzT++wvvNuaHCxgen1rNcR+eAqLoEV","tlshash":"7d844b88b6fff16a73921061507f06a7f17e9424144d8990e368dce67c746bab03be39","first_seen":"2025-06-07T04:54:43.751047Z","last_seen":"2026-06-11T13:33:42.419445Z","times_seen":301,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":52,"dns":13,"connect":9,"send":0,"wait":2,"receive":6,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-01-02","alert":"Hunting_JS_WebAssembly","trigger":"wtm.pstatic.net/39cb238/11b3bf3f99abd6f7c749.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"nid.naver.com/passkey/js/passkeyApi.js?v=20250120","fqdn":"nid.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"110.93.159.38","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:39.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corp."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:B3:02:B8:26:D6:90:49:71:40:F3:8C:B6:B9:2C:4D:13:30:EC:A2","sha256":"DF:1D:9B:40:32:7F:1B:B3:26:CA:00:EE:98:B6:E9:77:2D:FD:1B:4A:4E:BE:45:AF:66:92:5B:4D:3E:AB:E7:3B"}}},"request":{"raw":"GET /passkey/js/passkeyApi.js?v=20250120 HTTP/1.1\r\nHost: nid.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 08:01:40 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 653263\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nlast-modified: Wed, 17 Dec 2025 06:34:29 GMT\r\naccept-ranges: bytes\r\naccept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang, ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile, sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile\r\naccept-ch-lifetime: 86400\r\nx-ua-compatible: IE=edge\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":653263,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65468), with escape sequences","md5":"7c4595fdee65864e174fc3357573d946","sha1":"8b1b11ae14792eb5a83e72822eb72850faddaaed","sha256":"fb8c3b935afc95c553f17e34d3d361b7f5ca92f3869e4f1a204c6d3e23891d0d","sha512":"e60ee8caa0fae79461a6fdd2d62dce467d1fe188931b2cd20b3d323c9bb9be7a556d13f170739f63e28602754c8a7ac38fb0b6dd58cf2a080fc64eeee91ebb7b","ssdeep":"1536:foC9HFEKQERch/6t7JyMin9RrYkcRHh89NtleEVgMwyyZmjsGG20zUdVZKW4XVDk:AC9HFEKDK/qKn3qBGt4Ao/dX32ecpL","tlshash":"37d4735002a2ddf6ffe50995c2b21818387d5a7b646125b0aad2bdfe6c1adc480f1f1f","first_seen":"2025-12-20T07:48:15.018126Z","last_seen":"2026-01-07T04:19:18.641511Z","times_seen":21,"resource_available":true,"data":null}},"time_used":2863,"timings":{"blocked":559,"dns":0,"connect":276,"send":0,"wait":679,"receive":1056,"ssl":290},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wtm.pstatic.net/39cb238/55f7b0045d72c4b26a99.wasm","fqdn":"wtm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.76.113","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:40.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /39cb238/55f7b0045d72c4b26a99.wasm HTTP/1.1\r\nHost: wtm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nOrigin: https://redesigned-doodle-xi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/wasm\r\nlast-modified: Mon, 12 May 2025 08:22:20 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\ncontent-length: 91055\r\ncache-control: public, max-age=742227\r\ndate: Fri, 02 Jan 2026 08:01:40 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":336477,"size_decoded":0,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"fb167b3eb0fdfe95004c86068e64bde2","sha1":"8335e4efee8b6145f4c2660b9c4a15f1989de619","sha256":"799724d72bfa187864a17064b1710ffd1a30be642c6ea65bc4be42ebefa2ca47","sha512":"ae0dfb754aa9fa7456e43da47cf5dbd098e589fbcf5f3fed2eee14be6cd8a16bf782b7401fc975891460f0e2d4ac29b6a7533d36eba2eef80922be76719379bd","ssdeep":"6144:+UMrb2Aw81989mvQR6ebm/AQVRllXWQJNJ/S+Gi:+UMh989mvQR61zlXWQPwdi","tlshash":"6c642042d6a30825f521dd34754c5a2b6b39e845369cc2dbc38d88972cbf60e7efa760","first_seen":"2025-06-07T04:54:43.754129Z","last_seen":"2026-06-04T14:22:42.118247Z","times_seen":296,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nid.naver.com/login/image/favicon.ico","fqdn":"nid.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"110.93.159.38","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:42.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corp."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:B3:02:B8:26:D6:90:49:71:40:F3:8C:B6:B9:2C:4D:13:30:EC:A2","sha256":"DF:1D:9B:40:32:7F:1B:B3:26:CA:00:EE:98:B6:E9:77:2D:FD:1B:4A:4E:BE:45:AF:66:92:5B:4D:3E:AB:E7:3B"}}},"request":{"raw":"GET /login/image/favicon.ico HTTP/1.1\r\nHost: nid.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 08:01:42 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\nlast-modified: Mon, 22 Dec 2025 08:22:08 GMT\r\netag: \"6948ffb0-1536\"\r\naccept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang, ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile, sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile\r\naccept-ch-lifetime: 86400\r\nx-ua-compatible: IE=edge\r\naccept-ranges: bytes\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b707378e4db3fcca990f228c4d865f86","sha1":"8feaa55c2973a7e40fb1d09d65ab762c5d6bdcc4","sha256":"4059be15d3943507390a124da698cf6f46da07582d846d30eb46e51f1000974c","sha512":"e4945fd998c8c678238edbca7de4374a04e2faf6cbf1a083411bc9c186f757bb3139b39150de5ede47a8d55a20820004bce0cc2c4b19fbe238b6b1a71ca5e94b","ssdeep":"96:jjqH++uzH++nXANy1g9E++++++++++++++++++++++++++++++x999999999999z:jg++uzH++nQNAgC++++++++++++++++P","tlshash":"4db108f3846623a9f4471db1580443c259b2ac8e3a275eb4f2cd3de8c4ba467c1a17b7","first_seen":"2023-04-06T12:49:18Z","last_seen":"2026-08-10T12:38:07.280421Z","times_seen":1092,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.redesigned-doodle-xi.vercel.app/","fqdn":"www.redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T08:01:37.551Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.redesigned-doodle-xi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 308 Permanent Redirect\r\nContent-Type: text/plain\r\nLocation: https://www.redesigned-doodle-xi.vercel.app/\r\nRefresh: 0;url=https://www.redesigned-doodle-xi.vercel.app/\r\nserver: Vercel\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T17:04:31.509094Z","times_seen":17905180,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":1,"dns":0,"connect":1,"send":0,"wait":341,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-02","alert":"Phishing - Naver","trigger":"www.redesigned-doodle-xi.vercel.app/","verdict":"phishing","severity":"medium","comment":"Naver","link":"https://openphish.com","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-02","alert":"Phishing Block","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/scripts/ntm_109a32482d88.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"2.18.173.26","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:39.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Mon, 29 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:1A:5B:CB:CA:6F:4D:C4:54:14:EA:80:9E:58:78:0B:E5:4E:15:75","sha256":"47:40:52:1C:BD:D1:EE:A2:FF:89:F7:2D:0B:AF:6D:77:E0:59:2D:26:8C:5F:4B:A2:89:74:12:FE:8B:E9:02:27"}}},"request":{"raw":"GET /scripts/ntm_109a32482d88.js HTTP/1.1\r\nHost: ntm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 13 Dec 2024 03:03:14 GMT\r\nserver: Testa/6.2.11\r\nx-error-code: NotModified\r\nx-error-message: file's lastModifiedTime:2024-12-13 12:03:14.822997758 +0900 KST, IfModifiedSince:2024-12-13 03:03:14 +0000 GMT\r\ncontent-type: text/javascript\r\nmutated: false\r\nx-etag: 3cf370000675ba3f2\r\nx-object-archived: false\r\nx-object-restored: false\r\ncontent-encoding: gzip\r\ncontent-length: 69969\r\ncache-control: max-age=329\r\nexpires: Fri, 02 Jan 2026 08:07:08 GMT\r\ndate: Fri, 02 Jan 2026 08:01:39 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249655,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62946)","md5":"1b008c9e4ab7d6953dcfc429ca03e13b","sha1":"3e938a3fc0e981813ef7639a04fb9c487d9370da","sha256":"e0be3e937f5a05e1f06dccb1e73a9415fc01d1de9e9c168dfaaacd2d019771a6","sha512":"c9c6ff2dc8cdf93fc94e8aa9fcd7a85665bc844c597f3b153bae065e26c34b1d6d2197be83b64da9287c18fdd9fde46f38f17a7a17e2a5c148c36dd47785a086","ssdeep":"3072:wbuNTDNsO+18C9wdYI4JJa8JJj6vdluTxm1d1Rhs0:wwuO+18MJOvdB1rs0","tlshash":"c234b78cfe92f0b956e3a1a4802f550af17b2a25701ed4d1daa2c5d1ac7898f4173f3d","first_seen":"2024-12-22T16:31:50.016921Z","last_seen":"2026-06-24T10:29:23.464828Z","times_seen":460,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":27,"dns":9,"connect":5,"send":0,"wait":12,"receive":11,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.9.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:39.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-1.9.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-4185d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 02 Jan 2026 08:01:39 GMT\r\nage: 3617681\r\nx-served-by: cache-lga21952-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 31, 6010\r\nx-timer: S1767340900.556507,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 79506\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":268381,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"08c235d357750c657ac1db7d1cf656a9","sha1":"9257afd2d46c3a189ec0d40a45722701d47e9ca5","sha256":"7bd80d06c01c0340c1b9159b9b4a197db882ca18cbac8e9b9aa025e68f998d40","sha512":"d62700e7a1ff41f9d6326ca024ba2be1d391bc8fbb2aeae0f427d74837899b230940bf7c2df3d193f5300a68bb3686706d4c31328234b5cda026a1bf52ef9e70","ssdeep":"6144:UvD8eq9mPKl4OfKcknEHZciGhjZPdDwjdwTJFPk78vmAnhZSxwI14i:UE4OfcaZhfOeATG14i","tlshash":"fa44b6d8f78c112e8232316aad2f51cdb67cd172561058afbd8d597c24a083d42faf7a","first_seen":"2023-03-07T01:03:57Z","last_seen":"2026-08-15T07:03:18.669552Z","times_seen":39263,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":3,"connect":18,"send":0,"wait":13,"receive":22,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpt.naver.com/static/ncaptcha-api.js?ncaptcha-sitekey=6e3d93f4f845d053db08d51e2eb36ca3efe03fea21f21ee8d02e60ef10f6b73a15e951eccc1ef4b866ab3ce4","fqdn":"ncpt.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"110.93.151.161","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:39.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corp."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:B3:02:B8:26:D6:90:49:71:40:F3:8C:B6:B9:2C:4D:13:30:EC:A2","sha256":"DF:1D:9B:40:32:7F:1B:B3:26:CA:00:EE:98:B6:E9:77:2D:FD:1B:4A:4E:BE:45:AF:66:92:5B:4D:3E:AB:E7:3B"}}},"request":{"raw":"GET /static/ncaptcha-api.js?ncaptcha-sitekey=6e3d93f4f845d053db08d51e2eb36ca3efe03fea21f21ee8d02e60ef10f6b73a15e951eccc1ef4b866ab3ce4 HTTP/1.1\r\nHost: ncpt.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: private, max-age=300\r\ncontent-length: 56144\r\netag: W/\"db50-5C/8lvqeNQ/qAL3JPnIqQPvakXM\"\r\ndate: Fri, 02 Jan 2026 08:01:40 GMT\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":56144,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29942)","md5":"d430d2e4b0c4c521d34ee4c1db06adfd","sha1":"e42ffc96fa9e350fea00bdc93e722a40fbda9173","sha256":"79dd6a4ca9fa29af458edbf47127c22e56415376fed1d65f91d358b93d354b7c","sha512":"6891d589174e882427708377a65c9456ccb4546130e43652d15ba358b713340b40a5c3fb0196d71c379d08b4d6e3fd0e04203b43b3a50c413ab3675caecd9fc3","ssdeep":"1536:Au2eIDUv2BMQJ1nBzN2cgWg0AmtcbqC1PL1:Au2eIDUv2BvnBzwcg/0dtcbqC1L1","tlshash":"834385845538dfae0743c125630f6832bf23aba348b81055a97eb7003bb8d96bb5b575","first_seen":"2026-01-02T08:02:04.544263Z","last_seen":"2026-01-10T06:35:27.32454Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1388,"timings":{"blocked":-1,"dns":0,"connect":271,"send":0,"wait":290,"receive":537,"ssl":290},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.pstatic.net/static/nid/login/m_sp_01_login_7b3d4fc3.png","fqdn":"ssl.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"95.101.10.41","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:40.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /static/nid/login/m_sp_01_login_7b3d4fc3.png HTTP/1.1\r\nHost: ssl.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nid.naver.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 02 Dec 2024 05:29:05 GMT\r\nserver: Testa/6.2.11\r\naccept-ranges: bytes\r\ncontent-length: 139004\r\nreferrer-policy: unsafe-url\r\naccess-control-allow-origin: *\r\ncontent-type: image/png\r\ncache-control: max-age=85164\r\nexpires: Sat, 03 Jan 2026 07:41:04 GMT\r\ndate: Fri, 02 Jan 2026 08:01:40 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139004,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 672 x 660, 8-bit/color RGBA, non-interlaced","md5":"7b3d4fc388d2ceca4ccf74e52ecb126a","sha1":"9109e4ac08b041e85e5022ec895990f37d4c87a5","sha256":"17ca03d40b1d0c8bef15a42027fefd730cd7b43422f8eae5a6cf5a1914838e34","sha512":"7ceddb22acad142703346524c2d740bd08f361959c19ef645da213a7d4cb66a26aabd7125484ac4479df220d1835d5c729ad6ea4e9e713ecbc65152bc3d59aed","ssdeep":"3072:OWzlQeqMiRw8eqgtrCAOO5ZRc8OrPxMJGY9JN0aAAfzP9ZXhRB:zlQnDRwtrrRcBSp9f0AL3Xt","tlshash":"55d3026e5d26418eba501130fd8bbbf9f43a90d591e59190bb24a44d2f221bfa4bf370","first_seen":"2025-04-04T12:10:18.368274Z","last_seen":"2026-06-04T14:22:42.111675Z","times_seen":665,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":44,"dns":10,"connect":1,"send":0,"wait":3,"receive":5,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.redesigned-doodle-xi.vercel.app/","fqdn":"www.redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T08:01:37.900Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.redesigned-doodle-xi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-15T17:04:31.509094Z","times_seen":17905180,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":29,"dns":0,"connect":1,"send":0,"wait":0,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-02","alert":"Phishing - Naver","trigger":"www.redesigned-doodle-xi.vercel.app/","verdict":"phishing","severity":"medium","comment":"Naver","link":"https://openphish.com","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-02","alert":"Phishing Block","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"www.redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"redesigned-doodle-xi.vercel.app/","fqdn":"redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-02T08:01:39.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: redesigned-doodle-xi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2786339\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Fri, 02 Jan 2026 08:01:39 GMT\r\netag: \"de6f64a77cf201ba6ddb88d2c294c79e\"\r\nlast-modified: Mon, 01 Dec 2025 02:02:39 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::m5sfw-1767340899137-34179ce36083\r\ncontent-length: 4626\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":18571,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"a30f26c2322ceb3cf433356ed476e836","sha1":"a95352e939ada55c91b898a20425012227d3eead","sha256":"4813dfd53907cef7733bf0c02f9c9238667cf2cfd0644844ef70494bc607ff1e","sha512":"5d118edcc893ee9b7c66b5a4e6b2c51e25a40ff62e57f1c0f6d3d8fb8835b7157cded2e764df7ec6e0344a242740115c497b4ef7024e0ddbbbed1e036d5f4e9c","ssdeep":"192:Y+hLjvYR8zc5aZlljbtigae4n3IsrdnNuEjdT065T:/lbYjaZnjbtigae4n3IshnhAg","tlshash":"6b82d62294f98c33411380e8baf6ab296d99c117c70e9d00b2fc1be45fe7d869d1366d","first_seen":"2025-11-03T14:18:04.669385Z","last_seen":"2026-02-08T22:24:14.890941Z","times_seen":100,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":11,"receive":167,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-02","alert":"Phishing - Naver","trigger":"redesigned-doodle-xi.vercel.app/","verdict":"phishing","severity":"medium","comment":"Naver","link":"https://openphish.com","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-02","alert":"Phishing Block","trigger":"redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nid.naver.com/login/css/global/desktop/w_20250409.css?20250409","fqdn":"nid.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"110.93.159.38","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:39.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corp."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:B3:02:B8:26:D6:90:49:71:40:F3:8C:B6:B9:2C:4D:13:30:EC:A2","sha256":"DF:1D:9B:40:32:7F:1B:B3:26:CA:00:EE:98:B6:E9:77:2D:FD:1B:4A:4E:BE:45:AF:66:92:5B:4D:3E:AB:E7:3B"}}},"request":{"raw":"GET /login/css/global/desktop/w_20250409.css?20250409 HTTP/1.1\r\nHost: nid.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 08:01:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 22 Dec 2025 08:22:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6948ffb0-f9ce\"\r\naccept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang, ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile, sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile\r\naccept-ch-lifetime: 86400\r\nx-ua-compatible: IE=edge\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63950,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63945)","md5":"cbcccca0f48890f443a294599a191a6b","sha1":"3689054de7a59ce964a5b5256f24daa0fc21a69b","sha256":"5fae5b53d6a2040d1031246e0d1593df5c820c07055857a0ddc1a08268048954","sha512":"10e931ebfa5f0105a0db31728d21947b999bf13d64a32396635be95d39df6591cc36e99298b20368a01c4204b1f50d00ad047175dc5ae122e801e4777f42e067","ssdeep":"768:U4LRShnhoTSg0/2Uf09DklGcyx9yVA6cvIptcyPAhStT0dT85:MhuNhStf","tlshash":"bc537436b668a11ef5bbc611f9417bde3020c217d4234f6dd6cab63c85c38a71663b89","first_seen":"2025-06-07T04:54:43.762303Z","last_seen":"2026-06-04T14:22:42.114748Z","times_seen":623,"resource_available":false,"data":null}},"time_used":1418,"timings":{"blocked":547,"dns":1,"connect":266,"send":0,"wait":322,"receive":0,"ssl":279},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nid.naver.com/login/js/v3/default/default_202105.js?v=20250411","fqdn":"nid.naver.com","domain":"naver.com","tld":"com"},"ip":{"addr":"110.93.159.38","port":443,"asn":23576,"as":"NAVER Cloud Corp.","country":"South Korea","country_code":"KR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:39.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.naver.com","organization":"NAVER Corp."},"issuer":{"commonName":"DigiCert TLS Hybrid ECC SHA384 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 05 Mar 2025 00:00:00 GMT","end":"Tue, 17 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DF:B3:02:B8:26:D6:90:49:71:40:F3:8C:B6:B9:2C:4D:13:30:EC:A2","sha256":"DF:1D:9B:40:32:7F:1B:B3:26:CA:00:EE:98:B6:E9:77:2D:FD:1B:4A:4E:BE:45:AF:66:92:5B:4D:3E:AB:E7:3B"}}},"request":{"raw":"GET /login/js/v3/default/default_202105.js?v=20250411 HTTP/1.1\r\nHost: nid.naver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 02 Jan 2026 08:01:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 22 Dec 2025 08:22:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6948ffb0-390ff\"\r\naccept-ch: dpr,device-memory,viewport-width,rtt,downlink,ect,lang, ua-arch,ua-platform,ua-platform-version,ua-model,ua-full-version,ua,ua-mobile, sec-ch-ua-arch,sec-ch-ua-platform,sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-mobile\r\naccept-ch-lifetime: 86400\r\nx-ua-compatible: IE=edge\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":233727,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65463), with escape sequences","md5":"cf38c65c4d7177a77afb770302997aee","sha1":"b06a24751d028e5333d3d5104f96117ce1ccd497","sha256":"13b4e5573bfa132aea709a5c7c0acd6938620076b2cbdcf0e0a742a856637feb","sha512":"377a3ee90c654f9928fe75af9df128a22f7028f6807abe8ec2a3f6187a991d78357c29622e1c059d743583a47269bb71bf0a1f94c053c2ce94360bbd36cc7606","ssdeep":"3072:wVrNPdpEFZPMlFaFITY7o52KGGDTiM7B5:wVrmMlFaykE522D","tlshash":"1834078cb6d6b47203e720a5113f110bf23b5969744e84d4e2a5d9f1adb888e813bf7d","first_seen":"2025-12-19T20:15:04.680622Z","last_seen":"2026-01-07T04:19:18.624237Z","times_seen":23,"resource_available":true,"data":null}},"time_used":1648,"timings":{"blocked":551,"dns":1,"connect":271,"send":0,"wait":533,"receive":0,"ssl":289},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ntm.pstatic.net/scripts/ntm_109a32482d88.js","fqdn":"ntm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"2.18.173.26","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:41.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 30 Jun 2025 00:00:00 GMT","end":"Mon, 29 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"73:1A:5B:CB:CA:6F:4D:C4:54:14:EA:80:9E:58:78:0B:E5:4E:15:75","sha256":"47:40:52:1C:BD:D1:EE:A2:FF:89:F7:2D:0B:AF:6D:77:E0:59:2D:26:8C:5F:4B:A2:89:74:12:FE:8B:E9:02:27"}}},"request":{"raw":"GET /scripts/ntm_109a32482d88.js HTTP/1.1\r\nHost: ntm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 13 Dec 2024 03:03:14 GMT\r\nserver: Testa/6.2.11\r\nx-error-code: NotModified\r\nx-error-message: file's lastModifiedTime:2024-12-13 12:03:14.822997758 +0900 KST, IfModifiedSince:2024-12-13 03:03:14 +0000 GMT\r\ncontent-type: text/javascript\r\nmutated: false\r\nx-etag: 3cf370000675ba3f2\r\nx-object-archived: false\r\nx-object-restored: false\r\ncontent-encoding: gzip\r\ncontent-length: 69969\r\ncache-control: max-age=327\r\nexpires: Fri, 02 Jan 2026 08:07:08 GMT\r\ndate: Fri, 02 Jan 2026 08:01:41 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249655,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62946)","md5":"1b008c9e4ab7d6953dcfc429ca03e13b","sha1":"3e938a3fc0e981813ef7639a04fb9c487d9370da","sha256":"e0be3e937f5a05e1f06dccb1e73a9415fc01d1de9e9c168dfaaacd2d019771a6","sha512":"c9c6ff2dc8cdf93fc94e8aa9fcd7a85665bc844c597f3b153bae065e26c34b1d6d2197be83b64da9287c18fdd9fde46f38f17a7a17e2a5c148c36dd47785a086","ssdeep":"3072:wbuNTDNsO+18C9wdYI4JJa8JJj6vdluTxm1d1Rhs0:wwuO+18MJOvdB1rs0","tlshash":"c234b78cfe92f0b956e3a1a4802f550af17b2a25701ed4d1daa2c5d1ac7898f4173f3d","first_seen":"2024-12-22T16:31:50.016921Z","last_seen":"2026-06-24T10:29:23.464828Z","times_seen":460,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"redesigned-doodle-xi.vercel.app/dynamicKey/","fqdn":"redesigned-doodle-xi.vercel.app","domain":"redesigned-doodle-xi.vercel.app","tld":"vercel.app"},"ip":{"addr":"64.29.17.3","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:41.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vercel.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 17:44:01 GMT","end":"Thu, 26 Mar 2026 17:44:00 GMT"},"fingerprint":{"sha1":"F0:13:B9:71:48:C8:B9:A2:32:B5:3A:66:4B:52:54:A3:2F:FB:D4:9A","sha256":"D8:79:21:64:77:21:A9:4C:0B:30:50:5C:32:33:69:3C:1D:4A:EE:9C:4C:4D:9A:34:EB:3D:4C:86:86:B8:05:08"}}},"request":{"raw":"GET /dynamicKey/ HTTP/1.1\r\nHost: redesigned-doodle-xi.vercel.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 02 Jan 2026 08:01:42 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-vercel-error: NOT_FOUND\r\nx-vercel-id: arn1::vqccz-1767340901895-a4a0f3841b47\r\ncontent-length: 79\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text","md5":"5b7a3161e0c92d928c3f5e12e245a338","sha1":"a574c9faef9037ce68b3d652c305fab7e0cdfff5","sha256":"70d01b8263aedad070dacdfd632c3c565551800e96042ae2913be6b58d764a8e","sha512":"ed68b7ff6ed2f8c028fc28fd72c01570f54d2af0cbdf5b13a9384f322a76d38505b005b460a68a972b89c655be36d543186fdd372e165d2d49084610b2e31e8c","ssdeep":"","tlshash":"3ba0245f43514f0c73c404011d4303740c040513fd51d70410dc150430000cf7340045","first_seen":"2026-01-02T08:02:04.547798Z","last_seen":"2026-01-02T08:02:04.547798Z","times_seen":1,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-02","alert":"Phishing Block","trigger":"redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2026-01-02","alert":"Phishing - Naver","trigger":"redesigned-doodle-xi.vercel.app","verdict":"phishing","severity":"medium","comment":"Naver","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-02","alert":"Sinkholed","trigger":"redesigned-doodle-xi.vercel.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wtm.pstatic.net/5218a1d/70b03991283fc59a0fae.wasm","fqdn":"wtm.pstatic.net","domain":"pstatic.net","tld":"net"},"ip":{"addr":"23.36.76.113","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://redesigned-doodle-xi.vercel.app/","date":"2026-01-02T08:01:42.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.pstatic.net","organization":"NAVER Cloud Corp."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 29 Oct 2025 00:00:00 GMT","end":"Fri, 30 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:A4:B5:94:1C:EF:77:E4:AF:9B:24:8C:16:E6:F5:98:1A:FC:7B:55","sha256":"57:A4:99:36:59:4E:40:13:51:E1:7B:1C:3D:67:FA:60:C3:37:78:95:80:05:A6:53:C6:BE:4C:EA:01:86:D0:35"}}},"request":{"raw":"GET /5218a1d/70b03991283fc59a0fae.wasm HTTP/1.1\r\nHost: wtm.pstatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://redesigned-doodle-xi.vercel.app/\r\nOrigin: https://redesigned-doodle-xi.vercel.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/wasm\r\nlast-modified: Tue, 16 Dec 2025 11:00:18 GMT\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nreferrer-policy: unsafe-url\r\nserver: nfront\r\ncontent-length: 96599\r\ncache-control: public, max-age=1301926\r\ndate: Fri, 02 Jan 2026 08:01:42 GMT\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]}],"data":{"size":355993,"size_decoded":0,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"e8964d4a94b383e7776fb67745d5906e","sha1":"99b65fb8d090cf5199752ddf5e05ba9364e24a2c","sha256":"4e2828f1259ada75140577c54ff54594aed0fe79c095930d8e1b2a0f9e93e165","sha512":"72868f35470fdc8ad057015e2dcbf8b016eca5ef63f4d940c9dd517232f1cf8082021c5924903cbd4431c6dc9ce9a0a1cdfcac01a92b71f403fa92312b3b6286","ssdeep":"6144:+rdKd79u9v9wBScSSf4TnqHARFnGuVf1Rmve7+7txSAY:+rod7oqSSf4TnqgRFnGuVf1R97+lY","tlshash":"64742d12d2a20c26f511ed71790c9a6f6b39e44076adc2db838d48972cbf50e3efa754","first_seen":"2025-12-20T07:48:15.010465Z","last_seen":"2026-01-14T13:12:00.960554Z","times_seen":31,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}