| fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 |  142.250.74.3 | 200 OK | 40 kB |
URL GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 IP142.250.74.3:443
Requested byhttps://netfl.myfunnelish.com/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40128, version 1.0 Hash9a01b69183a9604ab3a439e388b30501 8ed1d59003d0dbe6360481017b44665153665fbe 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://netfl.myfunnelish.com
DNT: 1
Connection: keep-alive
Referer: https://netfl.myfunnelish.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Apr 2025 10:03:46 GMT
expires: Fri, 10 Apr 2026 10:03:46 GMT
cache-control: public, max-age=31536000
age: 396891
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 | 142.250.74.3 | 200 OK | 40 kB |
URL GET fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 IP142.250.74.3:443
Requested byhttps://netfl.myfunnelish.com/ CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint04:FF:92:E7:16:B0:49:91:8B:B7:8D:C6:93:B9:20:B4:2A:33:9F:A8 ValidityThu, 20 Mar 2025 11:19:45 GMT - Thu, 12 Jun 2025 11:19:44 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 40128, version 1.0 Hash9a01b69183a9604ab3a439e388b30501 8ed1d59003d0dbe6360481017b44665153665fbe 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://netfl.myfunnelish.com
DNT: 1
Connection: keep-alive
Referer: https://netfl.myfunnelish.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 40128
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Apr 2025 10:03:46 GMT
expires: Fri, 10 Apr 2026 10:03:46 GMT
cache-control: public, max-age=31536000
age: 396891
last-modified: Wed, 08 Jan 2025 18:23:10 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| analytics.app.funnelish.com/view | 34.111.146.89 | 204 No Content | 0 B |
URL OPTIONS analytics.app.funnelish.com/view IP34.111.146.89:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://netfl.myfunnelish.com/ CertificateIssuerGoogle Trust Services Subjectanalytics.app.funnelish.com Fingerprint89:99:DA:CC:76:CE:D5:86:BA:1B:06:73:75:58:50:E0:C6:F7:DD:64 ValidityMon, 24 Mar 2025 02:02:52 GMT - Sun, 22 Jun 2025 02:56:46 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /view HTTP/1.1
Host: analytics.app.funnelish.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://netfl.myfunnelish.com/
Origin: https://netfl.myfunnelish.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: *
allow: OPTIONS, POST
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
x-cloud-trace-context: e217f77a827cac71239568589e4f11e0
date: Tue, 15 Apr 2025 00:18:41 GMT
content-type: text/html
server: Google Frontend
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| analytics.app.funnelish.com/view | 34.111.146.89 | 200 OK | 69 B |
URL POST analytics.app.funnelish.com/view IP34.111.146.89:443 ASN#396982 GOOGLE-CLOUD-PLATFORM
Requested byhttps://netfl.myfunnelish.com/ CertificateIssuerGoogle Trust Services Subjectanalytics.app.funnelish.com Fingerprint89:99:DA:CC:76:CE:D5:86:BA:1B:06:73:75:58:50:E0:C6:F7:DD:64 ValidityMon, 24 Mar 2025 02:02:52 GMT - Sun, 22 Jun 2025 02:56:46 GMT
Hash82b7518a115c5eec141f4585d38ea002 9ee3e5480c5d9fc08e77c06f745b6e9ba7d55b27 0746dec72fa65071b20c0169dc38075038417efbc34a7908454fabe51599cbb2
POST /view HTTP/1.1
Host: analytics.app.funnelish.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netfl.myfunnelish.com/
Content-Type: application/json
Content-Length: 407
Origin: https://netfl.myfunnelish.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
vary: Origin
x-cloud-trace-context: a3bc5b83368468d7239568589e4f11f4
date: Tue, 15 Apr 2025 00:18:42 GMT
server: Google Frontend
content-length: 69
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 151.101.2.132 | 200 OK | 25 kB |
IP151.101.2.132:443
CertificateIssuerCertainly Subject*.myfunnelish.com Fingerprint6A:59:EE:69:E3:9B:9B:A9:03:6F:F3:AD:EA:23:D6:AD:08:1B:BE:37 ValidityWed, 02 Apr 2025 02:08:16 GMT - Fri, 02 May 2025 02:08:15 GMT
File typeHTML document, ASCII text, with very long lines (9748) Hashcd4f082de7d3ea8c2b38f402adcea4a1 9473747aac0b351db6b5cee6ae071ef37c6d9121 b403b35959e4054c05105851213a23eff85c5520a8ae024c3ffb765239f119cf
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix | | OpenPhish | phishing | Netflix Inc. |
GET / HTTP/1.1
Host: netfl.myfunnelish.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin, <https://images.funnelish.com>; rel=preconnect; crossorigin, <https://img.youtube.com>; rel=preconnect; crossorigin
x-step-type: 1
x-page: F_72113_708423_2292708_2617537
x-index: 7
content-type: text/html; charset=UTF-8
via: 1.1 varnish, 1.1 varnish
x-country: fi
content-encoding: gzip
accept-ranges: bytes
date: Tue, 15 Apr 2025 00:18:36 GMT
age: 1511345
x-served-by: cache-hel1410021-HEL, cache-hel1410023-HEL
x-cache: MISS, HIT
x-cache-hits: 0, 1366
x-timer: S1744676317.880721,VS0,VE0
vary: X-Country, Accept-Encoding
set-cookie: x-country_code=NO;
x-geo-city=oslo;
x-geo-latitude=59.930;
x-geo-longitude=10.730;
X-ResourcesToken=1744683516_0x710025b8a25f0847784828847b3e98ece74ee168; Path=/; SameSite=None; Secure
X-Page=F_72113_708423_2292708_2617537; Path=/; SameSite=None; Secure
content-length: 7340
X-Firefox-Spdy: h2
|
|
| netfl.myfunnelish.com/core.min.css | 151.101.2.132 | 200 OK | 51 kB |
URL GET netfl.myfunnelish.com/core.min.css IP151.101.2.132:443
Requested byhttps://netfl.myfunnelish.com/ CertificateIssuerCertainly Subject*.myfunnelish.com Fingerprint6A:59:EE:69:E3:9B:9B:A9:03:6F:F3:AD:EA:23:D6:AD:08:1B:BE:37 ValidityWed, 02 Apr 2025 02:08:16 GMT - Fri, 02 May 2025 02:08:15 GMT
File typeUnicode text, UTF-8 text, with very long lines (50856), with no line terminators Hash19cdc4a8cbcffebcc6e49a29445f29e9 8ad19d27e2df2ae07b26fbc0d34d1b4887adf9e9 c89c058ad70b8c60c39360c12e4b033fee413d53b4b90acafab51d9b8e5ab4e7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix | | OpenPhish | phishing | Netflix Inc. |
GET /core.min.css HTTP/1.1
Host: netfl.myfunnelish.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netfl.myfunnelish.com/
Cookie: x-country_code=NO; x-geo-city=oslo; x-geo-latitude=59.930; x-geo-longitude=10.730; X-ResourcesToken=1744683516_0x710025b8a25f0847784828847b3e98ece74ee168; X-Page=F_72113_708423_2292708_2617537
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
cache-control: no-store
via: 1.1 varnish, 1.1 varnish
last-modified: Sat, 04 Jan 2025 11:48:51 GMT
content-encoding: gzip
accept-ranges: bytes
age: 0
date: Tue, 15 Apr 2025 00:18:37 GMT
x-served-by: cache-hel1410021-HEL, cache-hel1410023-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1744676317.233720,VS0,VE341
vary: Accept-Encoding
set-cookie: x-country_code=NO;
x-geo-city=oslo;
x-geo-latitude=59.930;
x-geo-longitude=10.730;
content-length: 9962
X-Firefox-Spdy: h2
|
|
| netfl.myfunnelish.com/core.min.js | 151.101.2.132 | 200 OK | 79 kB |
URL GET netfl.myfunnelish.com/core.min.js IP151.101.2.132:443
Requested byhttps://netfl.myfunnelish.com/ CertificateIssuerCertainly Subject*.myfunnelish.com Fingerprint6A:59:EE:69:E3:9B:9B:A9:03:6F:F3:AD:EA:23:D6:AD:08:1B:BE:37 ValidityWed, 02 Apr 2025 02:08:16 GMT - Fri, 02 May 2025 02:08:15 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65485), with no line terminators Hashf512ccec4a56de76f3bb9f7f799a9d91 d4a7aaf61d1b4c69df3480b95a879fe15bca40e2 6a3a940f138366798b5e1970737016be82cefadea5136747d3db619a548536d1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix | | OpenPhish | phishing | Netflix Inc. |
GET /core.min.js HTTP/1.1
Host: netfl.myfunnelish.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netfl.myfunnelish.com/
Cookie: x-country_code=NO; x-geo-city=oslo; x-geo-latitude=59.930; x-geo-longitude=10.730; X-ResourcesToken=1744683516_0x710025b8a25f0847784828847b3e98ece74ee168; X-Page=F_72113_708423_2292708_2617537
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-store
via: 1.1 varnish, 1.1 varnish
last-modified: Sat, 04 Jan 2025 06:08:01 GMT
content-encoding: gzip
accept-ranges: bytes
age: 0
date: Tue, 15 Apr 2025 00:18:37 GMT
x-served-by: cache-hel1410022-HEL, cache-hel1410023-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1744676317.221531,VS0,VE347
vary: Accept-Encoding
set-cookie: x-country_code=NO;
x-geo-city=oslo;
x-geo-latitude=59.930;
x-geo-longitude=10.730;
content-length: 22765
X-Firefox-Spdy: h2
|
|
| img.funnelish.com/72113/708423/1738163984-Logonetflix.png | 151.101.2.132 | 200 OK | 6.3 kB |
URL GET img.funnelish.com/72113/708423/1738163984-Logonetflix.png IP151.101.2.132:443
Requested byhttps://netfl.myfunnelish.com/ CertificateIssuerLet's Encrypt Subjectimg.funnelish.com FingerprintCD:F0:2E:BA:0A:54:F0:D0:B1:5C:94:30:50:3E:4A:74:6A:2D:BA:CC ValidityFri, 21 Feb 2025 18:52:43 GMT - Thu, 22 May 2025 18:52:42 GMT
File typeRIFF (little-endian) data, Web/P image Hashf657b68ab6d68727a4796c46fd9ad42b 59febdc567b430fb5d6a2e81e4800bbe5a6074f3 fd37d08a7c962560dd2ef618b8657cef774e8fb4aa83ad06248d5ed018800f0c
GET /72113/708423/1738163984-Logonetflix.png HTTP/1.1
Host: img.funnelish.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://netfl.myfunnelish.com
DNT: 1
Connection: keep-alive
Referer: https://netfl.myfunnelish.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: max-age=31536000
content-type: image/webp
etag: "DLPgipJQ3gRdXxPRA/3PZ/1mGRZSTad7yyZq1cmw/y0"
fastly-io-info: ifsz=32265 idim=2226x678 ifmt=png ofsz=6276 odim=2226x678 ofmt=webp
fastly-io-served-by: vpop-ehle2110032
fastly-stats: io=1
server: UploadServer
x-goog-generation: 1738163985059271
x-goog-hash: crc32c=YZbzdQ==, md5=MdqPdSB74oqrUbuEsNeEjA==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 32265
x-guploader-uploadid: AKDAyIuI_b1dQghO8XHdZjtHOH5jUwh59lanJ82nU_1YWpZEcEA7XtsgA6Cw4z6j8e6ufp5U0fH49Jc
accept-ranges: bytes
age: 0
date: Tue, 15 Apr 2025 00:18:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410021-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1744676318.860011,VS0,VE394
vary: Accept
content-length: 6276
X-Firefox-Spdy: h2
|
|
| netfl.myfunnelish.com/favicon.ico | 151.101.2.132 | 200 OK | 4.3 kB |
URL GET netfl.myfunnelish.com/favicon.ico IP151.101.2.132:443
Requested byhttps://netfl.myfunnelish.com/ CertificateIssuerCertainly Subject*.myfunnelish.com Fingerprint6A:59:EE:69:E3:9B:9B:A9:03:6F:F3:AD:EA:23:D6:AD:08:1B:BE:37 ValidityWed, 02 Apr 2025 02:08:16 GMT - Fri, 02 May 2025 02:08:15 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hash2b936184641010e321acc5e5ca03003d 8e9490b66d5716f6c2e05b719a66924dd1746965 29597fc227664aeed48067d1bf49eeee45e4a048d62aa91d366e6cfb680189a1
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Netflix | | OpenPhish | phishing | Netflix Inc. |
GET /favicon.ico HTTP/1.1
Host: netfl.myfunnelish.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://netfl.myfunnelish.com/
Cookie: x-country_code=NO; x-geo-city=oslo; x-geo-latitude=59.930; x-geo-longitude=10.730; X-ResourcesToken=1744683516_0x710025b8a25f0847784828847b3e98ece74ee168; X-Page=F_72113_708423_2292708_2617537
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/vnd.microsoft.icon
cache-control: public, max-age=10000
via: 1.1 varnish, 1.1 varnish
last-modified: Sat, 16 Jan 2021 00:36:37 GMT
content-encoding: gzip
accept-ranges: bytes
date: Tue, 15 Apr 2025 00:18:38 GMT
age: 0
x-served-by: cache-hel1410032-HEL, cache-hel1410023-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1744676318.027130,VS0,VE138
vary: Accept-Encoding
set-cookie: x-country_code=NO;
x-geo-city=oslo;
x-geo-latitude=59.930;
x-geo-longitude=10.730;
content-length: 1080
X-Firefox-Spdy: h2
|
|