Report - notdeep7.github.io/netflix/

Report Overview

Submitted URL
notdeep7.github.io/netflix/
IP
185.199.111.153
ASN
#54113 FASTLY
Submitted
2024-04-16 09:53:19
Access
public
Website Title
Netflix India – Watch TV Shows Online, Watch Movies Online
Final URL
notdeep7.github.io/netflix/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
14
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
notdeep7.github.io	unknown	2013-03-08	2023-09-24	2024-03-26	6.3 kB	1.2 MB	185.199.108.153
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-16	1.1 kB	15 kB	142.250.74.163
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-16	495 B	3.5 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-15	medium	notdeep7.github.io/netflix/	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (16)

URL IP Response Size

notdeep7.github.io/netflix/

185.199.108.153

200 OK

2.6 kB

URL User Request GET HTTP/2
notdeep7.github.io/netflix/
IP
185.199.108.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (310)
Size
2.6 kB (2611 bytes)
Hash
d32af15bd1e8956c924627b5b6948a5d
a9c45ee4038145f599f90196157e075c9e39f215
df5ab3b93bee453df4e9301cd9669df4819eff28c8a1d32f19601e31764f467d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /netflix/ HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"65103048-24a0"
expires: Sat, 13 Apr 2024 05:57:16 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: C498:353B0D:22A35FD:23561D5:661A1C64
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
age: 469
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 3
x-timer: S1713261172.328405,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 5403e73bb7b821c658dfabfe188fd3903f2a64da
content-length: 2611
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/style.css

185.199.108.153

200 OK

1.9 kB

URL GET HTTP/2
notdeep7.github.io/netflix/style.css
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text
Size
1.9 kB (1944 bytes)
Hash
baf9e2d7dd23ce07b6c891d20c39030d
b540db0eafc60ea44b5bca27fc0248bdd44e054e
c2d9f55b1f0a226ecc8d11806788647ea8b06d93531a9a8a8ec6758d3d76cb88

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/style.css HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"65103048-2800"
expires: Tue, 16 Apr 2024 09:47:30 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: FD90:28A741:EB077:EF96A:661E46D9
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1713261173.501824,VS0,VE122
vary: Accept-Encoding
x-fastly-request-id: dfb2063746c5af03923c1c9ef46ffce2fc47f80a
content-length: 1944
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/assets/boxshot.png

185.199.108.153

200 OK

20 kB

URL GET HTTP/2
notdeep7.github.io/netflix/assets/boxshot.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 150 x 210, 8-bit colormap, non-interlaced
Size
20 kB (20506 bytes)
Hash
587e040f20259792094901ca9739669e
d48b9de536ecd248ab1d923bf837c6958a9e0cec
e1fa26cc34fda574edc01d09e374d6f10735a3fa621bdde87c104ee15453d4b6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/assets/boxshot.png HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65103048-501a"
expires: Tue, 16 Apr 2024 09:47:30 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: FD9C:26872B:3680278:37B4D8E:661E46D7
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261173.514447,VS0,VE120
vary: Accept-Encoding
x-fastly-request-id: f5a9525479e770f7b146370596ce41de6c4bbd16
content-length: 20506
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/assets/tv.png

185.199.108.153

200 OK

11 kB

URL GET HTTP/2
notdeep7.github.io/netflix/assets/tv.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Size
11 kB (11418 bytes)
Hash
77994a67327ba957dfd880e33a91f041
5ba507de8c9bc4a063beecb569e89bcf9e0a901c
b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/assets/tv.png HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65103048-2c9a"
expires: Tue, 16 Apr 2024 09:47:30 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2832:29EF9F:1F06A79:1FB80F8:661E46D9
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261173.510807,VS0,VE125
vary: Accept-Encoding
x-fastly-request-id: 22778b466e494e847b830509261809b4177ce464
content-length: 11418
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/assets/download-icon.gif

185.199.108.153

200 OK

22 kB

URL GET HTTP/2
notdeep7.github.io/netflix/assets/download-icon.gif
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
GIF image data, version 89a, 100 x 100
Size
22 kB (22171 bytes)
Hash
dd3cb78db78c3e0a13c9b77ee19deee6
9de1915d6543939218ff991b39ee5f9a11aad6f5
4f99e4c2ed1c2b7de72f47102c64d601567f8efaad5944a08c86786cad4050e6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/assets/download-icon.gif HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/gif
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65103048-569b"
expires: Tue, 16 Apr 2024 09:47:30 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 697E:28FCD1:5D33223:5F381EF:661E46DA
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261173.514978,VS0,VE126
vary: Accept-Encoding
x-fastly-request-id: 4f35726a4b4347ae0fca7a1c0b7d8c61e848f66a
content-length: 22171
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/assets/mobile-0819.jpg

185.199.108.153

200 OK

50 kB

URL GET HTTP/2
notdeep7.github.io/netflix/assets/mobile-0819.jpg
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3
Size
50 kB (49614 bytes)
Hash
a48333d43c19612ed61987fa5dbff3c5
8a8781250b96fee7830eb63ee8dda19e5c871881
492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/assets/mobile-0819.jpg HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65103048-c1ce"
expires: Tue, 16 Apr 2024 09:47:30 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: FD80:2F55C5:61A2601:63BCB7D:661E46D9
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261173.510647,VS0,VE138
vary: Accept-Encoding
x-fastly-request-id: 1fa7d5fac62b0be92434800c28a8559a7a26c183
content-length: 49614
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/assets/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png

185.199.108.153

200 OK

255 kB

URL GET HTTP/2
notdeep7.github.io/netflix/assets/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
255 kB (254586 bytes)
Hash
2995e70023477ef72300f24e45aba1d5
92c13cd17c41cb9580f59197a3008fd9cca432c7
1e5a6122c8e39862aa1c92eae0e83e92458232d930620e9ca0c68e9be425aa67

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/assets/AAAABVr8nYuAg0xDpXDv0VI9HUoH7r2aGp4TKRCsKNQrMwxzTtr-NlwOHeS8bCI2oeZddmu3nMYr3j9MjYhHyjBASb1FaOGYZNYvPBCL.png HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65103048-3e27a"
expires: Tue, 16 Apr 2024 10:02:52 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: C766:26872B:36BE43D:37F4216:661E4A70
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713261173.518360,VS0,VE141
vary: Accept-Encoding
x-fastly-request-id: 9adf303748679fac50b683388790cdba07c6bee6
content-length: 254586
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/assets/logo.png

185.199.108.153

200 OK

23 kB

URL GET HTTP/2
notdeep7.github.io/netflix/assets/logo.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 2265 x 755, 8-bit/color RGBA, non-interlaced
Size
23 kB (23013 bytes)
Hash
ed88059ce4bcc9b07f97ad1f21bc7aed
4cb8e4b13617f5a65cc31a084be1d76e13a81c9a
c336a88447070bf5848b5d59128413bc537ce8af31d91b1872e5173f01cc0d46

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/assets/logo.png HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65103048-59e5"
expires: Tue, 16 Apr 2024 09:47:30 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 8586:28A741:EB077:EF96B:661E46D9
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1713261173.508381,VS0,VE217
vary: Accept-Encoding
x-fastly-request-id: 1773a76b60574033b723fcb133b982197c72575c
content-length: 23013
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/video/video-devices-in.m4v

185.199.108.153

206 Partial Content

74 kB

URL GET HTTP/2
notdeep7.github.io/netflix/video/video-devices-in.m4v
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ISO Media, Apple iTunes Video (.M4V) Video
Size
74 kB (74303 bytes)
Hash
73e25d1dae3deac964df43111c04c973
6301d10955803c58b803d04f6e4830f0aee5d01d
92259a1c73354bce2540a94397feed47d41bde07f23359decea3187799e5c19d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/video/video-devices-in.m4v HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: GitHub.com
content-type: video/x-m4v
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65103048-1223f"
expires: Tue, 16 Apr 2024 09:47:30 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: FD94:1B5FBD:12616B8:12CB283:661E46D6
accept-ranges: bytes
age: 0
content-range: bytes 0-74302/74303
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261173.543932,VS0,VE216
vary: Accept-Encoding
x-fastly-request-id: fac6d93d2b997b20d4c064cc70829088cc1d8322
content-length: 74303
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/video/video-tv-in-0819.m4v

185.199.108.153

206 Partial Content

268 kB

URL GET HTTP/2
notdeep7.github.io/netflix/video/video-tv-in-0819.m4v
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ISO Media, Apple iTunes Video (.M4V) Video
Size
268 kB (267712 bytes)
Hash
a585f6f325641f820e3272f3ec0086ed
faea17ded67d6df03c0bf8d08b2a3dcf1d5b340a
b71753769da84bf6bda2349bd9fa2f4a0af54f87923f6b3a20d5836117be68f4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/video/video-tv-in-0819.m4v HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: GitHub.com
content-type: video/x-m4v
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65103048-415c0"
expires: Tue, 16 Apr 2024 10:02:52 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: FD16:2AF6FA:14AD7AB:151F287:661E4A6D
accept-ranges: bytes
age: 0
content-range: bytes 0-267711/267712
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713261173.543181,VS0,VE234
vary: Accept-Encoding
x-fastly-request-id: 473baf603455e8d8a7bcd4237ca52c397d63af37
content-length: 267712
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2

142.250.74.163

200 OK

7.7 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Size
7.7 kB (7748 bytes)
Hash
a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://notdeep7.github.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:54:11 GMT
expires: Fri, 11 Apr 2025 17:54:11 GMT
cache-control: public, max-age=31536000
age: 403121
last-modified: Fri, 22 Mar 2024 00:01:14 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/assets/device-pile-in.png

185.199.108.153

200 OK

152 kB

URL GET HTTP/2
notdeep7.github.io/netflix/assets/device-pile-in.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
152 kB (151687 bytes)
Hash
186a706493dd515e30f8ad682d068578
2d09cad7878e23f97cbac2784a58056c61e80f0d
4a3bfdf68de04166878c6bfa4c5b0f57a100cad45ab80939433e8f7aeef4b7a4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/assets/device-pile-in.png HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65103048-25087"
expires: Tue, 16 Apr 2024 10:02:52 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 0CDA:28A741:12754E:12D100:661E4A74
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713261173.517040,VS0,VE317
vary: Accept-Encoding
x-fastly-request-id: 3f6e22ef0e6290dbf2049a99b6f368c3a6914d4d
content-length: 151687
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2

142.250.74.163

200 OK

5.4 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2
IP
142.250.74.163:443
ASN
#15169 GOOGLE

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 5416, version 1.0
Size
5.4 kB (5416 bytes)
Hash
89f0a93e3f008df326f17851c3678b24
346dde41c9643798b94cf0a16ab54278cd71cdfe
75cd1c2bbd47db72c1a7a720e764c7672a95bdae7033c570d549ac88c9add234

HTTP Headers

GET /s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://notdeep7.github.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 5416
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 17:24:13 GMT
expires: Fri, 11 Apr 2025 17:24:13 GMT
cache-control: public, max-age=31536000
age: 404919
last-modified: Fri, 22 Mar 2024 00:01:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/assets/background.jpg

185.199.108.153

200 OK

306 kB

URL GET HTTP/2
notdeep7.github.io/netflix/assets/background.jpg
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
306 kB (305758 bytes)
Hash
227292e5a157e55438a5d9b284c738ee
74d1483d5df1e68d0c707df5ea9f6ed00efc3e39
bb00533db02a18ba21dbaec7b2eaa8c6c6adb826092e2ec85057222d76dd1413

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/assets/background.jpg HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65103048-4aa5e"
expires: Tue, 16 Apr 2024 09:47:30 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 20C2:29EF9F:1F06AA1:1FB8130:661E46DA
accept-ranges: bytes
age: 0
date: Tue, 16 Apr 2024 09:52:52 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713261173.730215,VS0,VE123
vary: Accept-Encoding
x-fastly-request-id: 15e0e297fee24934b8dd863d5fdf4b6660077397
content-length: 305758
X-Firefox-Spdy: h2

notdeep7.github.io/netflix/assets/netflix-icon-8300.ico

185.199.108.153

200 OK

10 kB

URL GET HTTP/2
notdeep7.github.io/netflix/assets/netflix-icon-8300.ico
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Size
10 kB (10416 bytes)
Hash
08243bf774488ebb713162fb3a9b8b16
b76e2bc10f53e3ac9ee677ea5d503e10355da6db
9fa6c8f794fcbfdde1de5c4c9b14e5159b84ce0e1705315d575db3d894751afd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/assets/netflix-icon-8300.ico HTTP/1.1
Host: notdeep7.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/vnd.microsoft.icon
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sun, 24 Sep 2023 12:49:12 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"65103048-66c2"
expires: Tue, 16 Apr 2024 09:47:30 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: FDC4:2C0AE3:2DDB73E:2EE6C1F:661E46DA
accept-ranges: bytes
date: Tue, 16 Apr 2024 09:52:53 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1713261173.898163,VS0,VE121
vary: Accept-Encoding
x-fastly-request-id: 72747a4b6c356faab3b6e3eb6d6b353c547354c9
content-length: 10416
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Bebas+Neue&family=Cabin:wght@600&family=Poppins:wght@500&display=swap

142.250.74.106

200 OK

2.9 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Bebas+Neue&family=Cabin:wght@600&family=Poppins:wght@500&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://notdeep7.github.io/netflix/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
ASCII text, with very long lines (2978), with no line terminators
Size
2.9 kB (2912 bytes)
Hash
b8e8cda89c6d834639a0d74233c00989
50e6179b5ed57e83733e1e615999b98e85e972c5
5774a38f6d3d1466e21a5d4ac4809b57b6533f50eaeda36d7ac77ab00d754e8b

HTTP Headers

GET /css2?family=Bebas+Neue&family=Cabin:wght@600&family=Poppins:wght@500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://notdeep7.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 16 Apr 2024 09:52:52 GMT
date: Tue, 16 Apr 2024 09:52:52 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (16)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by