Report - netflix-clone-umber-theta.vercel.app/

Report Overview

Visited public
2025-01-24 13:34:16
Tags
netflix phishing
URL
netflix-clone-umber-theta.vercel.app/
Finishing URL
movie-app-umber-theta.vercel.app/login
IP / ASN
64.29.17.1
#16509 AMAZON-02
Title
Netflix
Phishing - Netflix

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-04-02	2025-01-22	1.7 kB	26 kB	142.250.74.35
api.themoviedb.org	34794	2008-09-15	2019-12-15	2025-01-22	5.3 kB	48 kB	54.240.174.110
netflix-clone-umber-theta.vercel.app	unknown	2020-01-28	2025-01-24	2025-01-24	493 B	884 B	216.198.79.1
fonts.googleapis.com	8877	2005-01-25	2012-05-23	2025-01-22	578 B	16 kB	142.250.74.10
movie-app-umber-theta.vercel.app	unknown	2020-01-28	2024-12-23	2024-12-23	3.9 kB	686 kB	216.198.79.65

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-01-23	medium	movie-app-umber-theta.vercel.app/	Netflix Inc.
2025-01-23	medium	movie-app-umber-theta.vercel.app/	Netflix Inc.
2025-01-23	medium	movie-app-umber-theta.vercel.app/	Netflix Inc.
2025-01-23	medium	movie-app-umber-theta.vercel.app/	Netflix Inc.
2025-01-23	medium	movie-app-umber-theta.vercel.app/	Netflix Inc.
2025-01-23	medium	movie-app-umber-theta.vercel.app/	Netflix Inc.
2025-01-23	medium	movie-app-umber-theta.vercel.app/	Netflix Inc.
2025-01-23	medium	movie-app-umber-theta.vercel.app/	Netflix Inc.
2025-01-23	medium	netflix-clone-umber-theta.vercel.app/	Netflix Inc.

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	movie-app-umber-theta.vercel.app/assets/index-C4DKAhzg.js	ScriptElement	599 kB	2024-12-23	2025-01-24
Pretty URL movie-app-umber-theta.vercel.app/assets/index-C4DKAhzg.js IP 216.198.79.65 ASN #11696 NBS11696 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-12-23 01:41 Last Seen2025-01-24 13:34 Times Seen2 Hash ed7ec217ceaf39fada9ccd5b1053ceb4 09365500e6fb49527d0e068a57698837c096b80f 21b20de4632d21dea7856b5c75ca4153cc8a3654012f55a97758add9ce6108a3 Loading...

HTTP Transactions (21)

URL IP Response Size

movie-app-umber-theta.vercel.app/

216.198.79.65

200 OK

465 B

URL User Request GET HTTP/2
movie-app-umber-theta.vercel.app/
IP
216.198.79.65:443
ASN
#11696 NBS11696

Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4
ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT

File type
HTML document, ASCII text
Size
465 B (465 bytes)
Hash
505d462feba22c3f2335886b80199be1
96fae2d6f5de15453d9756ebf37822c85c6e6b52
22177fa76ab08167dc805a8bbe688ce38a540e463a114f330731cad33621ba93

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET / HTTP/1.1
Host: movie-app-umber-theta.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1171862
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-type: text/html; charset=utf-8
date: Fri, 24 Jan 2025 13:33:49 GMT
etag: "505d462feba22c3f2335886b80199be1"
last-modified: Sat, 11 Jan 2025 00:02:47 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::s6nb4-1737725629863-9b18cf66783e
content-length: 465
X-Firefox-Spdy: h2

movie-app-umber-theta.vercel.app/assets/index-C4DKAhzg.js

216.198.79.65

200 OK

169 kB

URL GET HTTP/2
movie-app-umber-theta.vercel.app/assets/index-C4DKAhzg.js
IP
216.198.79.65:443
ASN
#11696 NBS11696

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4
ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT

File type
JavaScript source, ASCII text, with very long lines (37534)
Size
169 kB (168923 bytes)
Hash
ed7ec217ceaf39fada9ccd5b1053ceb4
09365500e6fb49527d0e068a57698837c096b80f
21b20de4632d21dea7856b5c75ca4153cc8a3654012f55a97758add9ce6108a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /assets/index-C4DKAhzg.js HTTP/1.1
Host: movie-app-umber-theta.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://movie-app-umber-theta.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1081706
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="index-C4DKAhzg.js"
content-encoding: br
content-type: application/javascript; charset=utf-8
date: Fri, 24 Jan 2025 13:33:50 GMT
etag: "ed7ec217ceaf39fada9ccd5b1053ceb4"
last-modified: Sun, 12 Jan 2025 01:05:23 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::s6nb4-1737725630213-42f4c36185f8
content-length: 168923
X-Firefox-Spdy: h2

movie-app-umber-theta.vercel.app/assets/index-CLvXtP56.css

216.198.79.65

200 OK

4.3 kB

URL GET HTTP/2
movie-app-umber-theta.vercel.app/assets/index-CLvXtP56.css
IP
216.198.79.65:443
ASN
#11696 NBS11696

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4
ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT

File type
ASCII text, with very long lines (19410)
Size
4.3 kB (4302 bytes)
Hash
2991db9ac35f6e43c729612a05b7c84a
dfee09a0e6f24ff56bdfa7f6c0ceebd6f5720b29
ff13577798c26ec066bcbdfe0a39ef02b6e3a90d3733b5953676876b9bc723bb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /assets/index-CLvXtP56.css HTTP/1.1
Host: movie-app-umber-theta.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://movie-app-umber-theta.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1081706
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="index-CLvXtP56.css"
content-encoding: br
content-type: text/css; charset=utf-8
date: Fri, 24 Jan 2025 13:33:50 GMT
etag: "2991db9ac35f6e43c729612a05b7c84a"
last-modified: Sun, 12 Jan 2025 01:05:23 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::m9th7-1737725630214-3dde7d814f09
content-length: 4302
X-Firefox-Spdy: h2

movie-app-umber-theta.vercel.app/assets/logo-COGC8jhl.png

216.198.79.65

200 OK

12 kB

URL GET HTTP/2
movie-app-umber-theta.vercel.app/assets/logo-COGC8jhl.png
IP
216.198.79.65:443
ASN
#11696 NBS11696

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4
ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT

File type
PNG image data, 300 x 81, 8-bit/color RGBA, non-interlaced
Size
12 kB (11791 bytes)
Hash
228c2f58cd562b7e10865e4a04bb2c0f
cc6b026ce979663e73841e0a51d9a909751fc525
697ade7fdeaaebbc1c9244c8dc210c35d1d72f5e1c4578979be040fcf1194d63

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /assets/logo-COGC8jhl.png HTTP/1.1
Host: movie-app-umber-theta.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://movie-app-umber-theta.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1081706
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="logo-COGC8jhl.png"
content-type: image/png
date: Fri, 24 Jan 2025 13:33:50 GMT
etag: "228c2f58cd562b7e10865e4a04bb2c0f"
last-modified: Sun, 12 Jan 2025 01:05:24 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::m9th7-1737725630560-8e1eea5ad365
content-length: 11791
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2

142.250.74.35

200 OK

7.9 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint0A:7E:C7:68:03:0C:7D:D9:EA:D1:64:B5:09:F0:73:23:7E:07:0A:F2
ValidityMon, 09 Dec 2024 08:37:20 GMT - Mon, 03 Mar 2025 08:37:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Size
7.9 kB (7884 bytes)
Hash
9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f

HTTP Headers

GET /s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Jan 2025 10:24:56 GMT
expires: Fri, 23 Jan 2026 10:24:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2024 06:53:08 GMT
content-type: font/woff2
age: 97734
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2

142.250.74.35

200 OK

7.8 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint0A:7E:C7:68:03:0C:7D:D9:EA:D1:64:B5:09:F0:73:23:7E:07:0A:F2
ValidityMon, 09 Dec 2024 08:37:20 GMT - Mon, 03 Mar 2025 08:37:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Size
7.8 kB (7816 bytes)
Hash
25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526

HTTP Headers

GET /s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Jan 2025 10:12:59 GMT
expires: Fri, 23 Jan 2026 10:12:59 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2024 06:53:03 GMT
content-type: font/woff2
age: 98451
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

movie-app-umber-theta.vercel.app/assets/hero_banner-DUu77aK2.jpg

216.198.79.65

200 OK

55 kB

URL GET HTTP/2
movie-app-umber-theta.vercel.app/assets/hero_banner-DUu77aK2.jpg
IP
216.198.79.65:443
ASN
#11696 NBS11696

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4
ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT

File type
JPEG image data, baseline, precision 8, 640x333, components 3
Size
55 kB (54843 bytes)
Hash
bf2a9aa09e537c5aec17539a2c1f355e
c2808b5fbc827d67b643abbd9d68aa617771af1c
63120180c64ba15d59fed10039c24088bb6d2ad45f8e1b9c2eb3c761dcea5be1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /assets/hero_banner-DUu77aK2.jpg HTTP/1.1
Host: movie-app-umber-theta.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://movie-app-umber-theta.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1081706
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="hero_banner-DUu77aK2.jpg"
content-type: image/jpeg
date: Fri, 24 Jan 2025 13:33:50 GMT
etag: "bf2a9aa09e537c5aec17539a2c1f355e"
last-modified: Sun, 12 Jan 2025 01:05:24 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::s6nb4-1737725630561-9176b707f9f1
content-length: 54843
X-Firefox-Spdy: h2

movie-app-umber-theta.vercel.app/assets/hero_title-CeCXMd-8.png

216.198.79.65

200 OK

104 kB

URL GET
movie-app-umber-theta.vercel.app/assets/hero_title-CeCXMd-8.png
IP
216.198.79.65:0
ASN
#11696 NBS11696

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4
ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT

File type
PNG image data, 650 x 260, 8-bit/color RGBA, non-interlaced
Size
104 kB (103905 bytes)
Hash
f21c0c782e96920e46cb629ea5e2884c
bf7d5c9189aee10aed7bcac9fe5a63bf87b991d3
8fa659e8debe904ad4f1942cb834cf7415798381348a427070a79c0baf24c8ae

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /assets/hero_title-CeCXMd-8.png HTTP/1.1
Host: movie-app-umber-theta.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://movie-app-umber-theta.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1081706
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="hero_title-CeCXMd-8.png"
content-type: image/png
date: Fri, 24 Jan 2025 13:33:50 GMT
etag: "f21c0c782e96920e46cb629ea5e2884c"
last-modified: Sun, 12 Jan 2025 01:05:24 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::s6nb4-1737725630564-0a5d243f43a4
content-length: 103905
X-Firefox-Spdy: h2

fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2

142.250.74.35

200 OK

7.7 kB

URL GET HTTP/2
fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint0A:7E:C7:68:03:0C:7D:D9:EA:D1:64:B5:09:F0:73:23:7E:07:0A:F2
ValidityMon, 09 Dec 2024 08:37:20 GMT - Mon, 03 Mar 2025 08:37:19 GMT

File type
Web Open Font Format (Version 2), TrueType, length 7748, version 1.0
Size
7.7 kB (7748 bytes)
Hash
a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446

HTTP Headers

GET /s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Jan 2025 10:24:38 GMT
expires: Fri, 23 Jan 2026 10:24:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 04 Dec 2024 06:54:05 GMT
content-type: font/woff2
age: 97752
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

movie-app-umber-theta.vercel.app/assets/background_banner-Did3CoXI.jpg

216.198.79.65

200 OK

333 kB

URL GET HTTP/2
movie-app-umber-theta.vercel.app/assets/background_banner-Did3CoXI.jpg
IP
216.198.79.65:443
ASN
#11696 NBS11696

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4
ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
333 kB (333350 bytes)
Hash
30c93e677881facfc27d1ef973fef5d9
8b6878e0493e0bba031f8e9e44c8f510a9955f40
40ad65e02e710a4e86b8a95c8c638998d7c6472c908a647d30ede555d4b8dea8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /assets/background_banner-Did3CoXI.jpg HTTP/1.1
Host: movie-app-umber-theta.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://movie-app-umber-theta.vercel.app/assets/index-CLvXtP56.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1081706
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="background_banner-Did3CoXI.jpg"
content-type: image/jpeg
date: Fri, 24 Jan 2025 13:33:50 GMT
etag: "30c93e677881facfc27d1ef973fef5d9"
last-modified: Sun, 12 Jan 2025 01:05:24 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::s6nb4-1737725630739-b47d5ec35448
content-length: 333350
X-Firefox-Spdy: h2

api.themoviedb.org/3/movie/now_playing?language=en-US&page=1

54.240.174.110

200 OK

0 B

URL GET HTTP/2
api.themoviedb.org/3/movie/now_playing?language=en-US&page=1
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /3/movie/now_playing?language=en-US&page=1 HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Referer: https://movie-app-umber-theta.vercel.app/
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 0
date: Fri, 24 Jan 2025 13:33:50 GMT
server: openresty
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: FCpaGQm3MbFl_T1cihyyQJmTMJzE3fzjaZ2iFyxtgNS6GakebNlM1w==
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE,OPTIONS
vary: Access-Control-Request-Method, Access-Control-Request-Headers
access-control-max-age: 600
access-control-allow-headers: Authorization,Content-Type,X-Requested-With,Accept,Origin,If-Modified-Since,Cache-Control,Range,User-Agent,DNT
X-Firefox-Spdy: h2

api.themoviedb.org/3/movie/top_rated?language=en-US&page=1

54.240.174.110

200 OK

0 B

URL OPTIONS HTTP/2
api.themoviedb.org/3/movie/top_rated?language=en-US&page=1
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /3/movie/top_rated?language=en-US&page=1 HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Referer: https://movie-app-umber-theta.vercel.app/
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 0
date: Fri, 24 Jan 2025 13:33:50 GMT
server: openresty
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: P-tSqdHPgNQS6FSo7UlgqsS9VpEvHvxcvzR6xyqh-z0TCdIY1VZwZA==
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE,OPTIONS
vary: Access-Control-Request-Method, Access-Control-Request-Headers
access-control-max-age: 600
access-control-allow-headers: Authorization,Content-Type,X-Requested-With,Accept,Origin,If-Modified-Since,Cache-Control,Range,User-Agent,DNT
X-Firefox-Spdy: h2

api.themoviedb.org/3/movie/popular?language=en-US&page=1

54.240.174.110

200 OK

0 B

URL GET HTTP/2
api.themoviedb.org/3/movie/popular?language=en-US&page=1
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /3/movie/popular?language=en-US&page=1 HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Referer: https://movie-app-umber-theta.vercel.app/
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 0
date: Fri, 24 Jan 2025 13:33:50 GMT
server: openresty
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 2kU6iKNfZSFvLlhuJc_uOvdtLJo_8iWCaqFcDnFtAFnzMqNkE-BdhA==
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE,OPTIONS
vary: Access-Control-Request-Method, Access-Control-Request-Headers
access-control-max-age: 600
access-control-allow-headers: Authorization,Content-Type,X-Requested-With,Accept,Origin,If-Modified-Since,Cache-Control,Range,User-Agent,DNT
X-Firefox-Spdy: h2

api.themoviedb.org/3/movie/upcoming?language=en-US&page=1

54.240.174.110

200 OK

0 B

URL OPTIONS HTTP/2
api.themoviedb.org/3/movie/upcoming?language=en-US&page=1
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /3/movie/upcoming?language=en-US&page=1 HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Referer: https://movie-app-umber-theta.vercel.app/
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 0
date: Fri, 24 Jan 2025 13:33:50 GMT
server: openresty
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: B02Jn04JQDES3khobMjQ1iiWAcUNgi6ftFdS2KO-EJazioaSPYXvKA==
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE,OPTIONS
vary: Access-Control-Request-Method, Access-Control-Request-Headers
access-control-max-age: 600
access-control-allow-headers: Authorization,Content-Type,X-Requested-With,Accept,Origin,If-Modified-Since,Cache-Control,Range,User-Agent,DNT
X-Firefox-Spdy: h2

api.themoviedb.org/3/movie/now_playing?language=en-US&page=1

54.240.174.110

200 OK

0 B

URL GET HTTP/2
api.themoviedb.org/3/movie/now_playing?language=en-US&page=1
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /3/movie/now_playing?language=en-US&page=1 HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: authorization
Referer: https://movie-app-umber-theta.vercel.app/
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/plain; charset=utf-8
content-length: 0
date: Fri, 24 Jan 2025 13:33:50 GMT
server: openresty
x-cache: Miss from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: OAvHfEpCYxrMnnzhad6r5RRGinGA7BBE1sACFp1NTD5NmuflsGByVg==
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE,OPTIONS
vary: Access-Control-Request-Method, Access-Control-Request-Headers
access-control-max-age: 600
access-control-allow-headers: Authorization,Content-Type,X-Requested-With,Accept,Origin,If-Modified-Since,Cache-Control,Range,User-Agent,DNT
X-Firefox-Spdy: h2

movie-app-umber-theta.vercel.app/netflix_favicon.ico

216.198.79.65

200 OK

3.7 kB

URL GET HTTP/2
movie-app-umber-theta.vercel.app/netflix_favicon.ico
IP
216.198.79.65:443
ASN
#11696 NBS11696

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4
ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT

File type
MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel
Size
3.7 kB (3711 bytes)
Hash
950570926405d389cf2013c98bba8af4
0c39c285c64e58c6c54b98641dde45fb0672deb6
5e23041d2cefca25935def8f07b260e0674c72666c80d40916afc91c1912fdf3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /netflix_favicon.ico HTTP/1.1
Host: movie-app-umber-theta.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://movie-app-umber-theta.vercel.app/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
age: 1081706
cache-control: public, max-age=0, must-revalidate
content-disposition: inline; filename="netflix_favicon.ico"
content-encoding: br
content-type: image/vnd.microsoft.icon
date: Fri, 24 Jan 2025 13:33:51 GMT
etag: "950570926405d389cf2013c98bba8af4"
last-modified: Sun, 12 Jan 2025 01:05:24 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-cache: HIT
x-vercel-id: arn1::m9th7-1737725631116-1204e189daad
content-length: 3711
X-Firefox-Spdy: h2

api.themoviedb.org/3/movie/popular?language=en-US&page=1

54.240.174.110

200 OK

10 kB

URL GET HTTP/2
api.themoviedb.org/3/movie/popular?language=en-US&page=1
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
10 kB (10392 bytes)
Hash
d5ccedd2930d279d016462ba9efe6e5f
b9a104324b30bb933dd9a33e2febb47a39cc1db6
59099897e37f97746b22dc38cde2b67fae585ae4ba4ab8e730d8ff08371b0953

HTTP Headers

GET /3/movie/popular?language=en-US&page=1 HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://movie-app-umber-theta.vercel.app/
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiI3ZWNiNzdiNDdiZGZkODliZjhjZTk1YmJiODFlMWI0YiIsIm5iZiI6MTcyNjcwOTIwMS42NjkzMDUsInN1YiI6IjY2ZDM2OGViOWIyNjExNGZlMTAxZGE4ZCIsInNjb3BlcyI6WyJhcGlfcmVhZCJdLCJ2ZXJzaW9uIjoxfQ.v8gTmIjHQNUK4DB8Z2mcqzZavqCQE5Txo0GkPB971UI
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/json;charset=utf-8
date: Fri, 24 Jan 2025 08:22:23 GMT
server: openresty
cache-control: public, max-age=23389
x-memc: HIT
x-memc-key: f147f269b881c1ffcda165f76b7c7e51
x-memc-age: 4745
x-memc-expires: 23389
etag: W/"091602689932b46b0fa8bc48fdf8e970"
content-encoding: gzip
vary: Accept-Encoding,accept-encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: aA6OscgCDKja7H54x3mRHL0cnvXYfyC08go26Mq-He7WMNWNVFrMxA==
age: 18687
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2

api.themoviedb.org/3/movie/now_playing?language=en-US&page=1

54.240.174.110

200 OK

20 kB

URL GET HTTP/2
api.themoviedb.org/3/movie/now_playing?language=en-US&page=1
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
20 kB (19790 bytes)
Hash
d3f65863d25cd96ca78e51cf02fd2291
8edeaa79e4bef6bb82031cc8f8bbaceb2a58c1e4
2f4c366e75a6fd01d6c2fb062ba5f05c9b8c9a20d958ea229adafe44a897a710

HTTP Headers

GET /3/movie/now_playing?language=en-US&page=1 HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://movie-app-umber-theta.vercel.app/
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiI3ZWNiNzdiNDdiZGZkODliZjhjZTk1YmJiODFlMWI0YiIsIm5iZiI6MTcyNjcwOTIwMS42NjkzMDUsInN1YiI6IjY2ZDM2OGViOWIyNjExNGZlMTAxZGE4ZCIsInNjb3BlcyI6WyJhcGlfcmVhZCJdLCJ2ZXJzaW9uIjoxfQ.v8gTmIjHQNUK4DB8Z2mcqzZavqCQE5Txo0GkPB971UI
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/json;charset=utf-8
date: Fri, 24 Jan 2025 10:02:58 GMT
server: openresty
cache-control: public, max-age=22709
x-memc: HIT
x-memc-key: 6804ac2963faf18883efa2932266ec34
x-memc-age: 1337
x-memc-expires: 22709
etag: W/"b0d97544b741ad43ac8af7f7b7bb0185"
content-encoding: gzip
vary: Accept-Encoding,accept-encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: nq64vB9illGgCmEjFgjbO56b0VNZvetghQY7Y1ZbJXAG6XIxnexhJQ==
age: 12652
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2

api.themoviedb.org/3/movie/top_rated?language=en-US&page=1

54.240.174.110

200 OK

12 kB

URL OPTIONS HTTP/2
api.themoviedb.org/3/movie/top_rated?language=en-US&page=1
IP
54.240.174.110:443
ASN
#16509 AMAZON-02

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerAmazon
Subject*.themoviedb.org
FingerprintB6:79:19:ED:B7:C3:79:B2:93:6A:69:22:FE:79:87:2C:C8:A6:85:32
ValiditySat, 20 Jul 2024 00:00:00 GMT - Sun, 17 Aug 2025 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
12 kB (12155 bytes)
Hash
9d50ba6a60db4346bb02f412cf556f18
656a85de84e3e62059101e3c5812c51ce33230e1
cf988388e62ba2260418276437a79f2a1cbeeefdf40e4d851d10494bf93daaf9

HTTP Headers

GET /3/movie/top_rated?language=en-US&page=1 HTTP/1.1
Host: api.themoviedb.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://movie-app-umber-theta.vercel.app/
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiI3ZWNiNzdiNDdiZGZkODliZjhjZTk1YmJiODFlMWI0YiIsIm5iZiI6MTcyNjcwOTIwMS42NjkzMDUsInN1YiI6IjY2ZDM2OGViOWIyNjExNGZlMTAxZGE4ZCIsInNjb3BlcyI6WyJhcGlfcmVhZCJdLCJ2ZXJzaW9uIjoxfQ.v8gTmIjHQNUK4DB8Z2mcqzZavqCQE5Txo0GkPB971UI
Origin: https://movie-app-umber-theta.vercel.app
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/json;charset=utf-8
date: Fri, 24 Jan 2025 08:22:23 GMT
server: openresty
cache-control: public, max-age=23426
x-memc: HIT
x-memc-key: da14c0526e9ed3fa5ab3c5adbcd369c1
x-memc-age: 3578
x-memc-expires: 23426
etag: W/"7a882d60cd95877e9756866db9b39919"
content-encoding: gzip
vary: Accept-Encoding,accept-encoding
x-cache: Hit from cloudfront
via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: _uUI7gAicgC2cGWzjCIiUpb8Btio1D5uwz9U1sSBtNjrGex8wHPpnA==
age: 18687
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2

netflix-clone-umber-theta.vercel.app/

216.198.79.1

308 Permanent Redirect

465 B

URL User Request GET HTTP/2
netflix-clone-umber-theta.vercel.app/
IP
216.198.79.1:443
ASN
#11696 NBS11696

Certificate
IssuerLet's Encrypt
Subject*.vercel.app
Fingerprint70:EE:3A:24:01:BC:80:E5:65:94:AB:0F:2E:31:E0:AC:29:F7:BC:D4
ValidityWed, 18 Dec 2024 17:16:16 GMT - Tue, 18 Mar 2025 17:16:15 GMT

File type
HTML document, ASCII text, with very long lines (503), with no line terminators
Size
465 B (465 bytes)
Hash
b5df2b25c7e51a3a20c3b0846be10f02
345732e7a9734b79e73a6eb4cc46d4854352f83c
aaeeae69075e1278142b0232d2df5a5bedf4d445c76f2f650e7fdcde30e95fbc

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET / HTTP/1.1
Host: netflix-clone-umber-theta.vercel.app
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 308 Permanent Redirect
cache-control: public, max-age=0, must-revalidate
content-type: text/html
date: Fri, 24 Jan 2025 13:33:49 GMT
location: https://movie-app-umber-theta.vercel.app/
refresh: 0;url=https://movie-app-umber-theta.vercel.app/
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-id: arn1::522d4-1737725629734-6dcd097a97da
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap

142.250.74.10

200 OK

15 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap
IP
142.250.74.10:443
ASN
#15169 GOOGLE

Requested by
https://movie-app-umber-theta.vercel.app/
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint40:E7:4C:FA:6D:23:B6:A9:19:0C:67:77:3A:43:22:D0:A4:CE:49:24
ValidityMon, 09 Dec 2024 08:37:20 GMT - Mon, 03 Mar 2025 08:37:19 GMT

File type
ASCII text
Size
15 kB (15252 bytes)
Hash
861a8bad9f67530f5d8ccd2b67f5a8a1
ea7db9fa47648a74f99ecd8528c51a05e32f5eb4
22c3e32be01d8accada02d536093064df81aa7f0a922dde057e3e5fb8ea240ff

HTTP Headers

GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://movie-app-umber-theta.vercel.app/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 24 Jan 2025 13:33:50 GMT
date: Fri, 24 Jan 2025 13:33:50 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (21)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN