Report - yousseflbrahim.github.io/netflix

Report Overview

Submitted URL
yousseflbrahim.github.io/netflix
IP
185.199.108.153
ASN
#54113 FASTLY
Submitted
2024-04-26 18:14:58
Access
public
Website Title
Netflix
Final URL
yousseflbrahim.github.io/netflix/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
11
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
yousseflbrahim.github.io	unknown	2013-03-08	2023-07-25	2024-01-26	4.9 kB	790 kB	185.199.109.153
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-25	1.0 kB	171 kB	104.17.25.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	yousseflbrahim.github.io/netflix	Netflix Inc.
2024-03-23	medium	yousseflbrahim.github.io/netflix/	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (12)

URL IP Response Size

yousseflbrahim.github.io/netflix

185.199.109.153

301 Moved Permanently

162 B

URL User Request GET HTTP/2
yousseflbrahim.github.io/netflix
IP
185.199.109.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /netflix HTTP/1.1
Host: yousseflbrahim.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: GitHub.com
content-type: text/html
permissions-policy: interest-cohort=()
x-origin-cache: HIT
location: https://yousseflbrahim.github.io/netflix/
x-github-request-id: 8450:0E52:C9A3B5:CEB4BF:662BEDBC
accept-ranges: bytes
age: 332
date: Fri, 26 Apr 2024 18:14:32 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714155272.267775,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: c8c7ab3defaf09dc5977e484f758bad91df6cf48
content-length: 162
X-Firefox-Spdy: h2

yousseflbrahim.github.io/netflix/

185.199.109.153

200 OK

1.4 kB

URL User Request GET HTTP/2
yousseflbrahim.github.io/netflix/
IP
185.199.109.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
1.4 kB (1434 bytes)
Hash
0de83fbf84457e5cfa769b82d11e4d32
131b357986d258c8382c4188bbf699ca9849eaae
489ca85a8a7642840ce4171882fbe78c333123cb9c55c60cf1693bc6143e3677

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /netflix/ HTTP/1.1
Host: yousseflbrahim.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Tue, 25 Jul 2023 16:18:47 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64bff5e7-105d"
expires: Fri, 26 Apr 2024 12:12:50 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: C952:17E625:1372876:13D8FD5:662B97EA
accept-ranges: bytes
age: 132
date: Fri, 26 Apr 2024 18:14:32 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714155272.288971,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: fdc49e162ed254df11ef3f2ec16309fac96e4683
content-length: 1434
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css

104.17.25.14

200 OK

19 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://yousseflbrahim.github.io/netflix/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (52276)
Size
19 kB (18752 bytes)
Hash
ded1c367363e8b20bdc6a19b8350a737
8c06d82739d14b094ff6d9036021a252bd1d985d
1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf

HTTP Headers

GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yousseflbrahim.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:14:32 GMT
content-type: text/css; charset=utf-8
content-length: 18752
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6421d693-4940"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 50465
expires: Wed, 16 Apr 2025 18:14:32 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8DgXu14yRCato17Gr%2BfMKeMcrBsucL%2Fc6yGAN6KrIEuge8Hb%2BzrC2YI0cG%2Fzltq4c%2F8hA86cDofi%2FpN56PjZ1lvRoS6HPPsPVHvFMG%2BkWRYTMxSTyaMqKL8duRjcSGVUj9sWXfj9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a88d95ee6956ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

yousseflbrahim.github.io/netflix/tv.png

185.199.109.153

200 OK

11 kB

URL GET HTTP/2
yousseflbrahim.github.io/netflix/tv.png
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://yousseflbrahim.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Size
11 kB (11418 bytes)
Hash
77994a67327ba957dfd880e33a91f041
5ba507de8c9bc4a063beecb569e89bcf9e0a901c
b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/tv.png HTTP/1.1
Host: yousseflbrahim.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yousseflbrahim.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Tue, 25 Jul 2023 16:18:47 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64bff5e7-2c9a"
expires: Fri, 26 Apr 2024 18:24:32 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 6A06:17D890:15DE4FD:165EB7D:662BEF08
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 18:14:32 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155273.619668,VS0,VE120
vary: Accept-Encoding
x-fastly-request-id: 45a4c81fa0eb2e584d54adc8b3b52afed0e7c9e9
content-length: 11418
X-Firefox-Spdy: h2

yousseflbrahim.github.io/netflix/styl.css

185.199.109.153

200 OK

1.9 kB

URL GET HTTP/2
yousseflbrahim.github.io/netflix/styl.css
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://yousseflbrahim.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.9 kB (1939 bytes)
Hash
c63d8eea7cdd2ca5664a8954b0ce8599
aaae8a1e8a14bc7acfba12a2e9010a91e4944097
500afc96cc134f4f0224b350e356df209aafa08cb362f0e6ca63f4871f85e284

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/styl.css HTTP/1.1
Host: yousseflbrahim.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yousseflbrahim.github.io/netflix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Tue, 25 Jul 2023 16:18:47 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64bff5e7-2a38"
expires: Fri, 26 Apr 2024 18:24:32 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 21C4:26348:166CC83:16ECCC3:662BEF08
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 18:14:32 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155273.617692,VS0,VE124
vary: Accept-Encoding
x-fastly-request-id: 855c9b70d330bdbda1de56de07c57e10e68c65b4
content-length: 1939
X-Firefox-Spdy: h2

yousseflbrahim.github.io/netflix/mobile-0819.jpg

185.199.109.153

200 OK

50 kB

URL GET HTTP/2
yousseflbrahim.github.io/netflix/mobile-0819.jpg
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://yousseflbrahim.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3
Size
50 kB (49614 bytes)
Hash
a48333d43c19612ed61987fa5dbff3c5
8a8781250b96fee7830eb63ee8dda19e5c871881
492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/mobile-0819.jpg HTTP/1.1
Host: yousseflbrahim.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yousseflbrahim.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Tue, 25 Jul 2023 16:18:47 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64bff5e7-c1ce"
expires: Fri, 26 Apr 2024 18:24:32 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: E0B6:66896:165D49C:16DD4CC:662BEF08
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 18:14:32 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155273.622726,VS0,VE133
vary: Accept-Encoding
x-fastly-request-id: d75aa0aed5beaac7f86bf03d32b8840cc6559148
content-length: 49614
X-Firefox-Spdy: h2

yousseflbrahim.github.io/netflix//device-pile.png

185.199.109.153

200 OK

137 kB

URL GET HTTP/2
yousseflbrahim.github.io/netflix//device-pile.png
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://yousseflbrahim.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
137 kB (137040 bytes)
Hash
0b3d821493d5748d829c852bbd6d292d
2b83523c3e0731a1aebace26ecbebf02a63a6b19
81cf64888a7b3f6848b09695b034026d9ad685665b91d54597ecbb6197c6acbb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix//device-pile.png HTTP/1.1
Host: yousseflbrahim.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yousseflbrahim.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Tue, 25 Jul 2023 16:18:47 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64bff5e7-21750"
expires: Fri, 26 Apr 2024 18:24:32 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 86A8:83CEC:164C838:16CC509:662BEF08
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 18:14:32 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155273.623052,VS0,VE133
vary: Accept-Encoding
x-fastly-request-id: c5e0d762ecca89f5eeb3e7568eb2014df25c1012
content-length: 137040
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2

104.17.25.14

200 OK

150 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://yousseflbrahim.github.io/netflix/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 150124, version 772.256
Size
150 kB (150124 bytes)
Hash
c64278386c2bbb5e293e11b94ca2f6d1
6b99aa650bd12a36caa14e0127435d8f4cd3ba73
7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880

HTTP Headers

GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yousseflbrahim.github.io
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 26 Apr 2024 18:14:32 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 150124
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "6421d693-24a6c"
last-modified: Mon, 27 Mar 2023 17:46:59 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 190269
expires: Wed, 16 Apr 2025 18:14:32 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9CTxS5h04Tw6S08s7CGwp%2B25pD4tnPPDzI3BSv4MweLPjMzw0ipGCycghORVz6aaUQRZJuko2uJuj0Li8NdQ6lcm9sCVu4OK%2Fj%2F4r2AFNqRb9fVHG3b1agMJlh7MdCFY9BX6FlFF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 87a88d96ffdc56ca-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

yousseflbrahim.github.io/netflix/AAAABejKYujIIDQciqmGJJ8BtXkYKKTi5jiqexltvN1YmvXYIfX8B9CYwooUSIzOKneblRFthZAFsYLMgKMyNfeHwk16DmEkpIIcb6A3.png

185.199.109.153

200 OK

253 kB

URL GET HTTP/2
yousseflbrahim.github.io/netflix/AAAABejKYujIIDQciqmGJJ8BtXkYKKTi5jiqexltvN1YmvXYIfX8B9CYwooUSIzOKneblRFthZAFsYLMgKMyNfeHwk16DmEkpIIcb6A3.png
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://yousseflbrahim.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
253 kB (253151 bytes)
Hash
bac31463a9cffbfeed00e05c47a46595
e4618c8bc554902a28d120bc60500d8726470579
eea9de1cdc682d9ea1d1e395e35baa6e35a6d685664bd636e8bf2900158134d1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/AAAABejKYujIIDQciqmGJJ8BtXkYKKTi5jiqexltvN1YmvXYIfX8B9CYwooUSIzOKneblRFthZAFsYLMgKMyNfeHwk16DmEkpIIcb6A3.png HTTP/1.1
Host: yousseflbrahim.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yousseflbrahim.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Tue, 25 Jul 2023 16:18:47 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64bff5e7-3dcdf"
expires: Fri, 26 Apr 2024 18:24:32 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: C1D2:D3D1:1694B40:1714B6B:662BEF08
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 18:14:32 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155273.623266,VS0,VE145
vary: Accept-Encoding
x-fastly-request-id: 519b9296da53268bd74fd3020bcc5d812fe2d238
content-length: 253151
X-Firefox-Spdy: h2

yousseflbrahim.github.io/netflix/bac.jpg

185.199.109.153

200 OK

139 kB

URL GET HTTP/2
yousseflbrahim.github.io/netflix/bac.jpg
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://yousseflbrahim.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1024x542, components 3
Size
139 kB (138665 bytes)
Hash
dcc964343525e25a300b4d3246ca1082
72be5d22984c3aa0d2250a8a08c59743642dc371
aae7aac2bf474ce9d0c3f0c9154af9695ea97592ce29f7f764d9347cb967f5ee

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/bac.jpg HTTP/1.1
Host: yousseflbrahim.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yousseflbrahim.github.io/netflix/styl.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Tue, 25 Jul 2023 16:18:47 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64bff5e7-21da9"
expires: Fri, 26 Apr 2024 18:24:32 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 4714:3DF35:15A285F:1622E81:662BEF08
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 18:14:32 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155273.782100,VS0,VE112
vary: Accept-Encoding
x-fastly-request-id: 7228cc2cf5e53f66237be251f75ea2edc9e19b9d
content-length: 138665
X-Firefox-Spdy: h2

yousseflbrahim.github.io/netflix/Oppenheimer-2023.jpg

185.199.109.153

200 OK

184 kB

URL GET HTTP/2
yousseflbrahim.github.io/netflix/Oppenheimer-2023.jpg
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://yousseflbrahim.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 1200x628, components 3
Size
184 kB (183987 bytes)
Hash
b119f6c4680516baaf65e017cf5fc1d1
b5697c8e0b51ae1d0f2a2dbf795bf191add4e1d3
973b7d2a888468824f7b76ea01d51515bd1af6d2f6ec59a15aee6aebb15e59da

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/Oppenheimer-2023.jpg HTTP/1.1
Host: yousseflbrahim.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yousseflbrahim.github.io/netflix/styl.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Tue, 25 Jul 2023 16:18:47 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64bff5e7-2ceb3"
expires: Fri, 26 Apr 2024 18:24:32 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 8282:50EF5:1669607:16E940E:662BEF08
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 18:14:32 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155273.782784,VS0,VE154
vary: Accept-Encoding
x-fastly-request-id: 5196ba52dac49f1e823ba5ca3b40e339badce75c
content-length: 183987
X-Firefox-Spdy: h2

yousseflbrahim.github.io/favicon.ico

185.199.109.153

404 Not Found

5.1 kB

URL GET HTTP/2
yousseflbrahim.github.io/favicon.ico
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://yousseflbrahim.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.1 kB (5142 bytes)
Hash
1eb970ce5a18bec7165f016df8238566
9efd1514af80fe14db4ed28e9bc53975b9ee089c
70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: yousseflbrahim.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://yousseflbrahim.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
etag: W/"661dd73f-239b"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-github-request-id: 3502:17E625:175B493:17DB6DE:662BEF08
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 18:14:33 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155273.960686,VS0,VE123
vary: Accept-Encoding
x-fastly-request-id: 32685e46b2ca39bb69a97a860b93dd2c054025e3
content-length: 5142
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (12)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type