Report - nimrahq.github.io/netlix-clone/

Report Overview

Submitted URL
nimrahq.github.io/netlix-clone/
IP
185.199.110.153
ASN
#54113 FASTLY
Submitted
2024-04-16 09:53:41
Access
public
Website Title
Netflix
Final URL
nimrahq.github.io/netlix-clone/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
13
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-04-15	2.8 kB	132 kB	151.101.129.229
nimrahq.github.io	unknown	2013-03-08	2022-11-21	2024-01-11	5.9 kB	1.0 MB	185.199.108.153
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-16	1.0 kB	46 kB	104.17.24.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-15	medium	nimrahq.github.io/netlix-clone/	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js	21 kB	2023-03-07	2024-04-29
Pretty URL cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js IP 151.101.129.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:05 Last Seen2024-04-29 14:59:12 Times Seen5997 Hash 1022eaf388cc780bcfeb6456157adb7d 313789ca0e31b654784dbba8b0f83f364f8683b4 fe28dc38bc057f6eb11180235bbe458b3295a39b674d889075d3d9a0b5071d9f Loading...

	cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.min.js	63 kB	2023-03-08	2024-04-29
Pretty URL cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.min.js IP 151.101.129.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 06:42:25 Last Seen2024-04-29 14:59:12 Times Seen858 Hash 2a753de0369d13becc9649fc48f55535 e324063c8f46c6b29427df1542f1026ad230f604 423217abf8775cea2dc30fa1fe3e1c5e24dc359a80f1c37ad29a86094bfe81d1 Loading...

	cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js	79 kB	2023-03-07	2024-04-29
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js IP 151.101.129.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:37 Last Seen2024-04-29 19:59:06 Times Seen26547 Hash 0aa8d64e726c4a57adb5c88f9115996b 901169527507ff9e662cf64d8e361f359308970d 7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe Loading...

	cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js	72 kB	2023-03-07	2024-04-29
Pretty URL cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js IP 151.101.129.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:10 Last Seen2024-04-29 19:51:00 Times Seen3233 Hash fb8409a092adc6e8be17e87d59e0595e cf8d9821552d51bb50ce572e696aba1309065800 e3e5f35d586c0e6a9a9d7187687be087580c40a5f8d0e52f0c4053bbc25c98db Loading...

HTTP Transactions (20)

URL IP Response Size

nimrahq.github.io/netlix-clone/

185.199.108.153

200 OK

3.1 kB

URL User Request GET HTTP/2
nimrahq.github.io/netlix-clone/
IP
185.199.108.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (403), with CRLF line terminators
Size
3.1 kB (3127 bytes)
Hash
7d9195ae6fb57efca42b839bfd6a8f00
c7a8a50cd4da62689123e9d7e1f6f729f25d2518
9520218d4fca1e9f9fae6895735f8080a7895d678e7faf8741141e1721a915d9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /netlix-clone/ HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"637b695d-37c7"
expires: Tue, 16 Apr 2024 00:11:19 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 2504:20EFDC:7AE3079:7D79C5A:661DBFCE
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
age: 491
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 2
x-timer: S1713261194.162831,VS0,VE0
vary: Accept-Encoding
x-fastly-request-id: 0da326adeeb9056ab4c1926bf80cbba1dff2f34a
content-length: 3127
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css

104.17.24.14

200 OK

19 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/css/all.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65317)
Size
19 kB (18688 bytes)
Hash
6cb5a85b30082e3d59d7e371e002ce8d
0c639634f474b4601a7937f440096185f3a9d8d3
01b035efb5dfa529c512f82962ed633328222da6f33c224244806d4798c67349

HTTP Headers

GET /ajax/libs/font-awesome/6.2.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nimrahq.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 09:53:14 GMT
content-type: text/css; charset=utf-8
content-length: 18688
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "630e6e62-4900"
last-modified: Tue, 30 Aug 2022 20:09:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 64265
expires: Sun, 06 Apr 2025 09:53:14 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S6qVE%2Ff%2Br%2BCIzO%2BHcKB6ypBY%2FTBxmfOB2qgQR4wV%2B4fYiu4L7WpNhiq32VsM4T9pUpMlQ8NxuCQmH6zkYzZoq%2F%2FNLh4AHNuk24mcPz5XbLm8EM1YTeM%2BQGMrlaZzAsQl189xyxMp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87534980f934b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js

151.101.129.229

200 OK

24 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (65299)
Size
24 kB (23943 bytes)
Hash
0aa8d64e726c4a57adb5c88f9115996b
901169527507ff9e662cf64d8e361f359308970d
7e1f1503df765cca5e099891b94e318a2ef95081ba2af1eb6d417cc884bfdbfe

HTTP Headers

GET /npm/bootstrap@5.0.2/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nimrahq.github.io
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.0.2
x-jsd-version-type: version
etag: W/"13397-kBFpUnUH/55mLPZNjjYfNZMIlw0"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:53:14 GMT
age: 28410389
x-served-by: cache-fra-eddf8230080-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23943
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css

151.101.129.229

200 OK

26 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text, with very long lines (65326)
Size
26 kB (26373 bytes)
Hash
a4b3f509e79c54a512b890d73235ef04
1be37b62306c8c0c6775bb4c93c5e4c4e13d9775
f886516f3d41e9e7bd994c7f7a39a89cafae9483f90396cb0ddeafe8d1ea5e72

HTTP Headers

GET /npm/bootstrap@4.6.2/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nimrahq.github.io
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.6.2
x-jsd-version-type: version
etag: W/"279d8-G+N7YjBsjAxndbtMk8XkxOE9l3U"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:53:14 GMT
age: 9506597
x-served-by: cache-fra-eddf8230063-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26373
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css

151.101.129.229

200 OK

26 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Unicode text, UTF-8 text, with very long lines (65306)
Size
26 kB (26333 bytes)
Hash
94994c66fec8c3468b269dc0cc242151
ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad
62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab

HTTP Headers

GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nimrahq.github.io
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:53:14 GMT
age: 20936
x-served-by: cache-fra-etou8220101-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26333
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js

151.101.129.229

200 OK

26 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (65245)
Size
26 kB (26139 bytes)
Hash
fb8409a092adc6e8be17e87d59e0595e
cf8d9821552d51bb50ce572e696aba1309065800
e3e5f35d586c0e6a9a9d7187687be087580c40a5f8d0e52f0c4053bbc25c98db

HTTP Headers

GET /npm/jquery@3.5.1/dist/jquery.slim.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nimrahq.github.io
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.5.1
x-jsd-version-type: version
etag: W/"11abc-z42YIVUtUbtQzlcuaWq6EwkGWAA"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:53:14 GMT
age: 7794331
x-served-by: cache-fra-eddf8230022-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26139
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js

151.101.129.229

200 OK

7.8 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (21060)
Size
7.8 kB (7831 bytes)
Hash
1022eaf388cc780bcfeb6456157adb7d
313789ca0e31b654784dbba8b0f83f364f8683b4
fe28dc38bc057f6eb11180235bbe458b3295a39b674d889075d3d9a0b5071d9f

HTTP Headers

GET /npm/popper.js@1.16.1/dist/umd/popper.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nimrahq.github.io
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.16.1
x-jsd-version-type: version
etag: W/"52f1-MTeJyg4xtlR4TbuosPg/Nk+Gg7Q"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:53:14 GMT
age: 19091398
x-served-by: cache-fra-eddf8230124-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7831
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.min.js

151.101.129.229

200 OK

17 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/js/bootstrap.min.js
IP
151.101.129.229:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (62284)
Size
17 kB (16588 bytes)
Hash
2a753de0369d13becc9649fc48f55535
e324063c8f46c6b29427df1542f1026ad230f604
423217abf8775cea2dc30fa1fe3e1c5e24dc359a80f1c37ad29a86094bfe81d1

HTTP Headers

GET /npm/bootstrap@4.6.2/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://nimrahq.github.io
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.6.2
x-jsd-version-type: version
etag: W/"f463-4yQGPI9GxrKUJ98VQvECatIw9gQ"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:53:14 GMT
age: 15741108
x-served-by: cache-fra-etou8220082-FRA, cache-hel1410033-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16588
X-Firefox-Spdy: h2

nimrahq.github.io/netlix-clone/media.css

185.199.108.153

200 OK

941 B

URL GET HTTP/2
nimrahq.github.io/netlix-clone/media.css
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
941 B (941 bytes)
Hash
abde189b656b1d0df77b91cf89ab9ee5
1046fba48c5be77c4613f73d0165f0bf1096feb5
5c9b353055beb22db9cab2704dfadf3deb300714f4a2670471ce6cc5a06dc08c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netlix-clone/media.css HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"637b695d-12c2"
expires: Tue, 16 Apr 2024 09:47:22 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: F58C:29EF9F:1F061C1:1FB783C:661E46D2
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261194.403075,VS0,VE120
vary: Accept-Encoding
x-fastly-request-id: 6e34bd4fcf776cf6a4e66b84716aa9f66fe1fb71
content-length: 941
X-Firefox-Spdy: h2

nimrahq.github.io/netlix-clone/style.css

185.199.108.153

200 OK

1.7 kB

URL GET HTTP/2
nimrahq.github.io/netlix-clone/style.css
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.7 kB (1710 bytes)
Hash
40d4ad39f0012cb33a5e77f448d4b39f
bf9eced1911dd816bef79c0c4a2151225c2fdf23
dac9a0bfc7e415f21aa8cd2f300fb1706079b6a2f4566aabc8d6d44e8b33a28b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netlix-clone/style.css HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"637b695d-1910"
expires: Tue, 16 Apr 2024 09:47:22 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: F586:2285C3:4169DEF:42E4653:661E46D2
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261194.402565,VS0,VE133
vary: Accept-Encoding
x-fastly-request-id: a7d8526f12c9361f4f3ae8146f0ebfd7a2f940fe
content-length: 1710
X-Firefox-Spdy: h2

nimrahq.github.io/netlix-clone/images/mobile-0819.jpg

185.199.108.153

200 OK

50 kB

URL GET HTTP/2
nimrahq.github.io/netlix-clone/images/mobile-0819.jpg
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3
Size
50 kB (49614 bytes)
Hash
a48333d43c19612ed61987fa5dbff3c5
8a8781250b96fee7830eb63ee8dda19e5c871881
492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netlix-clone/images/mobile-0819.jpg HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "637b695d-c1ce"
expires: Tue, 16 Apr 2024 09:47:23 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 396A:2AF6FA:146FECB:14E06B9:661E46D2
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261194.409485,VS0,VE129
vary: Accept-Encoding
x-fastly-request-id: ad36afdfebd8ab615e6534ce5fd3ce7f2db187f4
content-length: 49614
X-Firefox-Spdy: h2

nimrahq.github.io/netlix-clone/images/download-icon.gif

185.199.108.153

200 OK

22 kB

URL GET HTTP/2
nimrahq.github.io/netlix-clone/images/download-icon.gif
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
GIF image data, version 89a, 100 x 100
Size
22 kB (22171 bytes)
Hash
dd3cb78db78c3e0a13c9b77ee19deee6
9de1915d6543939218ff991b39ee5f9a11aad6f5
4f99e4c2ed1c2b7de72f47102c64d601567f8efaad5944a08c86786cad4050e6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netlix-clone/images/download-icon.gif HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/gif
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "637b695d-569b"
expires: Tue, 16 Apr 2024 09:47:22 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 4EDC:2285C3:4169E4A:42E46A7:661E46D2
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261194.413288,VS0,VE133
vary: Accept-Encoding
x-fastly-request-id: 40874fe4a3ded19c4ec6972e00d1669e3fca3ec8
content-length: 22171
X-Firefox-Spdy: h2

nimrahq.github.io/netlix-clone/images/logo.png

185.199.108.153

200 OK

17 kB

URL GET HTTP/2
nimrahq.github.io/netlix-clone/images/logo.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 2560 x 1440, 8-bit colormap, non-interlaced
Size
17 kB (17322 bytes)
Hash
a1f673e7df715f16dae49f4874009082
ad7270ec9b46d561edba8d94686751b2b77ce426
218bc2b47bb718e6c65206f46f0c9791edcfdf5ccff6e6abcecb7637be7cf33b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netlix-clone/images/logo.png HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "637b695d-43aa"
expires: Tue, 16 Apr 2024 09:47:22 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2B92:28A5D2:72FDC68:756A33B:661E46D2
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261194.408936,VS0,VE137
vary: Accept-Encoding
x-fastly-request-id: 6097ab1178a5ad7d708e9d52efd85c1277faac2f
content-length: 17322
X-Firefox-Spdy: h2

nimrahq.github.io/netlix-clone/images/tv.png

185.199.108.153

200 OK

11 kB

URL GET HTTP/2
nimrahq.github.io/netlix-clone/images/tv.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Size
11 kB (11418 bytes)
Hash
77994a67327ba957dfd880e33a91f041
5ba507de8c9bc4a063beecb569e89bcf9e0a901c
b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netlix-clone/images/tv.png HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "637b695d-2c9a"
expires: Tue, 16 Apr 2024 09:47:22 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2C14:2E541F:38F44CA:3A33B18:661E46D2
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1713261194.409199,VS0,VE139
vary: Accept-Encoding
x-fastly-request-id: 7ae478311778b86558f8c988f0561bd5fc26e790
content-length: 11418
X-Firefox-Spdy: h2

nimrahq.github.io/netlix-clone/images/boxshot.png

185.199.108.153

200 OK

20 kB

URL GET HTTP/2
nimrahq.github.io/netlix-clone/images/boxshot.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 150 x 210, 8-bit colormap, non-interlaced
Size
20 kB (20506 bytes)
Hash
587e040f20259792094901ca9739669e
d48b9de536ecd248ab1d923bf837c6958a9e0cec
e1fa26cc34fda574edc01d09e374d6f10735a3fa621bdde87c104ee15453d4b6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netlix-clone/images/boxshot.png HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "637b695d-501a"
expires: Tue, 16 Apr 2024 09:47:22 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 0D24:2285C3:4169E4B:42E46A9:661E46D2
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261194.412830,VS0,VE143
vary: Accept-Encoding
x-fastly-request-id: 9d5f92662be171a0df791f1164999aeee452ec7a
content-length: 20506
X-Firefox-Spdy: h2

nimrahq.github.io/netlix-clone/images/AAAABfpnX3dbgjZ-Je8Ax3xn0kXehZm_5L6-xe6YSTq_ucht9TI5jwDMqusWZKNYT8DfGudD0_wWVVTFLiN2_kaQJumz2iivUWbIbAtF.png

185.199.108.153

200 OK

269 kB

URL GET HTTP/2
nimrahq.github.io/netlix-clone/images/AAAABfpnX3dbgjZ-Je8Ax3xn0kXehZm_5L6-xe6YSTq_ucht9TI5jwDMqusWZKNYT8DfGudD0_wWVVTFLiN2_kaQJumz2iivUWbIbAtF.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
269 kB (269111 bytes)
Hash
3da9bb52f0be925ec4f2d172af4ffe11
837d1a9be73f6568b1e09c6fea90d0b04d7c3040
50803a486b17eb4696683745a65ccbaa85392cb97c4f773ddee4dda8d694a42e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netlix-clone/images/AAAABfpnX3dbgjZ-Je8Ax3xn0kXehZm_5L6-xe6YSTq_ucht9TI5jwDMqusWZKNYT8DfGudD0_wWVVTFLiN2_kaQJumz2iivUWbIbAtF.png HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "637b695d-41b37"
expires: Tue, 16 Apr 2024 10:03:14 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: C768:285FD6:D3F99F:D8C143:661E4A8A
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713261194.413394,VS0,VE159
vary: Accept-Encoding
x-fastly-request-id: 90e19472da2d04ee98213d23f22396121348b036
content-length: 269111
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/webfonts/fa-regular-400.woff2

104.17.24.14

200 OK

25 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.2.0/webfonts/fa-regular-400.woff2
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 25096, version 770.256
Size
25 kB (25096 bytes)
Hash
83e2813a8fe0229d916c5b63fa9eab5e
56be4c28de7c67747b0fe3dd606be8b319f6d4f4
fe69d94841462d397faeff253ee09a6dc7941be931f942a55e6b9def8f3b048d

HTTP Headers

GET /ajax/libs/font-awesome/6.2.0/webfonts/fa-regular-400.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://nimrahq.github.io
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Tue, 16 Apr 2024 09:53:14 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 25096
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "630e6e62-6208"
last-modified: Tue, 30 Aug 2022 20:09:06 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 445183
expires: Sun, 06 Apr 2025 09:53:14 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jFGftqo6vQV6vnvGVPZQAHIviWs4V8b6Hy%2BDmT%2F4a9%2BouVvFqNzltqFnxXIHcEWWlWFUPBVv728X08JHjNSO9cis4TpIePaavkG%2BZlDRPo1GDWv2PuWBES78a90ueO1LDCPFcRWb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87534982bc69b4f7-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

nimrahq.github.io/netlix-clone/images/PK-en-20220829-popsignuptwoweeks-perspective_alpha_website_large.jpg

185.199.108.153

200 OK

331 kB

URL GET HTTP/2
nimrahq.github.io/netlix-clone/images/PK-en-20220829-popsignuptwoweeks-perspective_alpha_website_large.jpg
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
331 kB (331176 bytes)
Hash
6991c7e34f683e1a240b3eeda7978c4b
21994c61f76a5581410a19fa8409aa3a2e3b1ea4
a097de89cac02bb2594ebcc36f86e23cfdeb6369d2aefaebe2be0f8a2ee25a18

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netlix-clone/images/PK-en-20220829-popsignuptwoweeks-perspective_alpha_website_large.jpg HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "637b695d-50da8"
expires: Tue, 16 Apr 2024 10:03:14 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 1E08:28A741:128AE7:12E71C:661E4A8A
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713261195.679457,VS0,VE118
vary: Accept-Encoding
x-fastly-request-id: e82afddc9311f7a6b83300707b6ecedacdf79c3b
content-length: 331176
X-Firefox-Spdy: h2

nimrahq.github.io/netlix-clone/images/video-tv-0819.m4v

185.199.108.153

206 Partial Content

270 kB

URL GET HTTP/2
nimrahq.github.io/netlix-clone/images/video-tv-0819.m4v
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ISO Media, Apple iTunes Video (.M4V) Video
Size
270 kB (270046 bytes)
Hash
3cb12db7c672b33735006480a455ec72
d060e5996b3f7143755496cf2a06de5a59c283ce
4c7a552d219146985961bf78d9083b7e2c1a82c4ada5d959f48b3e53754c9049

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netlix-clone/images/video-tv-0819.m4v HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: GitHub.com
content-type: video/x-m4v
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 21 Nov 2022 12:04:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "637b695d-41ede"
expires: Tue, 16 Apr 2024 10:03:14 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: F7F0:29EF9F:1F4573A:1FF80FC:661E4A8A
accept-ranges: bytes
age: 0
content-range: bytes 0-270045/270046
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713261195.723783,VS0,VE160
vary: Accept-Encoding
x-fastly-request-id: 719e822c4fb2f59d9a21f141340510fe7d14ed00
content-length: 270046
X-Firefox-Spdy: h2

nimrahq.github.io/favicon.ico

185.199.108.153

404 Not Found

5.1 kB

URL GET HTTP/2
nimrahq.github.io/favicon.ico
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://nimrahq.github.io/netlix-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.1 kB (5142 bytes)
Hash
1eb970ce5a18bec7165f016df8238566
9efd1514af80fe14db4ed28e9bc53975b9ee089c
70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: nimrahq.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://nimrahq.github.io/netlix-clone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
etag: W/"661dd73f-239b"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-github-request-id: D7EC:2AF6FA:146FF38:14E071C:661E46D3
accept-ranges: bytes
age: 952
date: Tue, 16 Apr 2024 09:53:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261195.944062,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: e104201586f4aa1832c00ca8e8c8ea155ea2b03f
content-length: 5142
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (20)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size