Report - joeuni-ex.github.io/Netflix/

Report Overview

Submitted URL
joeuni-ex.github.io/Netflix/
IP
185.199.111.153
ASN
#54113 FASTLY
Submitted
2024-04-24 17:07:01
Access
public
Website Title
Netflix
Final URL
joeuni-ex.github.io/Netflix/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
5
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
joeuni-ex.github.io	unknown	2013-03-08	2023-08-07	2023-08-07	1.9 kB	332 kB	185.199.108.153
assets.nflxext.com	3871	2011-02-11	2015-07-22	2024-04-24	459 B	17 kB	45.57.90.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	joeuni-ex.github.io/Netflix/	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

joeuni-ex.github.io/Netflix/

185.199.108.153

200 OK

862 B

URL User Request GET HTTP/2
joeuni-ex.github.io/Netflix/
IP
185.199.108.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text
Size
862 B (862 bytes)
Hash
b4616ba27a406e8daf3b72a7a76889d0
b46b199812970263a0e20ba4e2a87bc96dda27c0
87937904e0a1e036dc9b68a9734aea92ff32b6516e03517ac0b88739c44cd47d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /Netflix/ HTTP/1.1
Host: joeuni-ex.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 07 Aug 2023 07:37:04 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64d09f20-66f"
expires: Wed, 24 Apr 2024 10:35:15 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 10F0:22A952:229F485:234CB3F:6628DE0B
accept-ranges: bytes
date: Wed, 24 Apr 2024 17:06:35 GMT
via: 1.1 varnish
age: 184
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 253
x-timer: S1713978395.086394,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 9b46d5d85516810af801adab9a1a4128d4c0b3bd
content-length: 862
X-Firefox-Spdy: h2

joeuni-ex.github.io/Netflix/images/netfl.svg

185.199.108.153

200 OK

558 B

URL GET HTTP/2
joeuni-ex.github.io/Netflix/images/netfl.svg
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://joeuni-ex.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
558 B (558 bytes)
Hash
91ce4582f5f0593f49fc1e716ec41971
c319ee8338113c313dce411c34813b88e42acc91
a74579c765537639b8d656ba6c5ebba49a0dc8bf155104ea85913cc047e9577f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/images/netfl.svg HTTP/1.1
Host: joeuni-ex.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joeuni-ex.github.io/Netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/svg+xml
permissions-policy: interest-cohort=()
last-modified: Mon, 07 Aug 2023 07:37:04 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64d09f20-390"
expires: Wed, 24 Apr 2024 17:16:35 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: CECC:0E88:247F9BD:2540F24:66293C1A
accept-ranges: bytes
age: 0
date: Wed, 24 Apr 2024 17:06:35 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713978396.508176,VS0,VE122
vary: Accept-Encoding
x-fastly-request-id: 57f0b5eff94344d0581ce900dae75ae7ecac52cb
content-length: 558
X-Firefox-Spdy: h2

joeuni-ex.github.io/Netflix/style.css

185.199.108.153

200 OK

948 B

URL GET HTTP/2
joeuni-ex.github.io/Netflix/style.css
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://joeuni-ex.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text
Size
948 B (948 bytes)
Hash
e42f5022ee279cc3760de27cdb2396c5
8ff33f177da2ebaf884751764435c9079ab337e8
87580c02f9dc4f9eaf6cddb015838a0d272207b235330b7e117341ebf0cad36d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/style.css HTTP/1.1
Host: joeuni-ex.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joeuni-ex.github.io/Netflix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 07 Aug 2023 07:37:04 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64d09f20-a71"
expires: Wed, 24 Apr 2024 17:16:35 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: A6D0:1C3ED8:556EE6D:574924C:66293C1B
accept-ranges: bytes
age: 0
date: Wed, 24 Apr 2024 17:06:35 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713978396.507323,VS0,VE132
vary: Accept-Encoding
x-fastly-request-id: d916738718d1c2e2856b8c845fd2463c19f01494
content-length: 948
X-Firefox-Spdy: h2

assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.ico

45.57.90.1

200 OK

17 kB

URL GET HTTP/1.1
assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.ico
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://joeuni-ex.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintA7:40:41:40:83:0A:D4:E9:8F:C6:B3:9A:E6:40:52:3D:E3:C7:7D:C5
ValiditySun, 07 Apr 2024 00:00:00 GMT - Sun, 12 May 2024 22:59:22 GMT

File type
MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel
Size
17 kB (16958 bytes)
Hash
41b45fdce09bd6acd07c7a8949da675e
931e18dfc6e7d950dc2f2bbdfe31e1ea720acf7c
abe8012eb65c0dc0ac3e87dcc1e60e1908ebd8f12b7c47a5df1856f7a7bb1edd

HTTP Headers

GET /us/ffe/siteui/common/icons/nficon2016.ico HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joeuni-ex.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 24 Apr 2024 17:06:35 GMT
Content-Type: image/x-icon
Content-Length: 16958
Connection: keep-alive
Content-MD5: QbRf3OCb1qzQfHqJSdpnXg==
Last-Modified: Tue, 21 Jun 2016 21:54:27 GMT
Cache-Control: max-age=604801
Expires: Wed, 01 May 2024 17:06:36 GMT
Accept-Ranges: bytes

joeuni-ex.github.io/Netflix/images/hero.jpg

185.199.108.153

200 OK

326 kB

URL GET HTTP/2
joeuni-ex.github.io/Netflix/images/hero.jpg
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://joeuni-ex.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
326 kB (326173 bytes)
Hash
48f247fd94c9406f356dc134096ae876
00f9440a6cee96aaaea164f5d8e5a51dc2840d5b
6a5570d8dc6860beaa355989c99d4f6fdd1188a7fcfd0156fc08415c5871d121

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/images/hero.jpg HTTP/1.1
Host: joeuni-ex.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://joeuni-ex.github.io/Netflix/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Mon, 07 Aug 2023 07:37:04 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64d09f20-4fa1d"
expires: Wed, 24 Apr 2024 17:16:35 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2E1A:2A5CED:52B26E4:5465A99:66293C1B
accept-ranges: bytes
age: 0
date: Wed, 24 Apr 2024 17:06:35 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713978396.760915,VS0,VE146
vary: Accept-Encoding
x-fastly-request-id: 12b20c05b14f33145456ec15ff87d6e3aec855a5
content-length: 326173
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers