Report - abayomi-web.github.io/Netflix_sign-in

Report Overview

Submitted URL
abayomi-web.github.io/Netflix_sign-in_page
IP
185.199.111.153
ASN
#54113 FASTLY
Submitted
2024-04-26 18:15:20
Access
public
Website Title
Netflix
Final URL
abayomi-web.github.io/Netflix_sign-in_page/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
6
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
abayomi-web.github.io	unknown	2013-03-08	2023-10-23	2024-02-18	2.6 kB	210 kB	185.199.111.153
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	501 B	16 kB	142.250.74.106
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	535 B	15 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	abayomi-web.github.io/Netflix_sign-in_page	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (7)

URL IP Response Size

abayomi-web.github.io/Netflix_sign-in_page

185.199.111.153

301 Moved Permanently

162 B

URL User Request GET HTTP/2
abayomi-web.github.io/Netflix_sign-in_page
IP
185.199.111.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /Netflix_sign-in_page HTTP/1.1
Host: abayomi-web.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: GitHub.com
content-type: text/html
permissions-policy: interest-cohort=()
location: https://abayomi-web.github.io/Netflix_sign-in_page/
x-github-request-id: 8440:D3D1:16871AF:1706BBC:662BEDBC
accept-ranges: bytes
age: 354
date: Fri, 26 Apr 2024 18:14:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714155294.371518,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: fe02d53f183b06aa6b5d1ed26467bae801d296de
content-length: 162
X-Firefox-Spdy: h2

abayomi-web.github.io/Netflix_sign-in_page/

185.199.111.153

200 OK

893 B

URL User Request GET HTTP/2
abayomi-web.github.io/Netflix_sign-in_page/
IP
185.199.111.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
893 B (893 bytes)
Hash
0d2d1f2c7e451be1b209bdc1b05cea9e
8538179d0e7cb8b211ce5098a543f9f376f22df2
c207e42aaeca4f9c8e13043e01ee02cabdb84b371e099560d000459e012ab548

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix_sign-in_page/ HTTP/1.1
Host: abayomi-web.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 23 Oct 2023 01:17:08 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"6535c994-bca"
expires: Fri, 26 Apr 2024 12:12:50 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: C952:17E625:1372816:13D8F71:662B97E9
accept-ranges: bytes
date: Fri, 26 Apr 2024 18:14:54 GMT
via: 1.1 varnish
age: 154
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1714155294.395482,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 627be8d706bf8204e2648f970db62873cae839d7
content-length: 893
X-Firefox-Spdy: h2

abayomi-web.github.io/Netflix_sign-in_page/style.css

185.199.111.153

200 OK

1.9 kB

URL GET HTTP/2
abayomi-web.github.io/Netflix_sign-in_page/style.css
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://abayomi-web.github.io/Netflix_sign-in_page/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.9 kB (1943 bytes)
Hash
774a023480ceba5a9f3019eee78297fe
5fa730880c9bd0b9a98cab439db4afc7fd0c415f
4eca723bc9e0db8c27eac9ab3af6fb91d4ba8d24ad598b4e404ea9cb4d56290f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix_sign-in_page/style.css HTTP/1.1
Host: abayomi-web.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abayomi-web.github.io/Netflix_sign-in_page/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 23 Oct 2023 01:17:08 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"6535c994-20b2"
expires: Fri, 26 Apr 2024 18:24:54 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 1D0C:B3F19:164A5C3:16CADBF:662BEF1E
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 18:14:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410030-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155295.719350,VS0,VE132
vary: Accept-Encoding
x-fastly-request-id: d714dc9bcf6cc1431a2da03635fcc4c832fc53f7
content-length: 1943
X-Firefox-Spdy: h2

abayomi-web.github.io/Netflix_sign-in_page/images/icons8-netflix-32.png

185.199.111.153

200 OK

698 B

URL GET HTTP/2
abayomi-web.github.io/Netflix_sign-in_page/images/icons8-netflix-32.png
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://abayomi-web.github.io/Netflix_sign-in_page/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
698 B (698 bytes)
Hash
1595cfc30c4ea4a01c7a581f9f9638e8
8bdbda869c3ae54e8e60956f6b06fd10f4b44bf5
1c5d6714f616bc6dca9130ff1908a2941d69106601da5d70722d305504306e49

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix_sign-in_page/images/icons8-netflix-32.png HTTP/1.1
Host: abayomi-web.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abayomi-web.github.io/Netflix_sign-in_page/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 23 Oct 2023 01:17:08 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6535c994-2ba"
expires: Fri, 26 Apr 2024 18:24:54 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 21C6:B3F19:164A5D9:16CADD2:662BEF1E
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 18:14:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410030-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155295.828974,VS0,VE121
vary: Accept-Encoding
x-fastly-request-id: 2ef7cfc738bb809bfc2477dabb084ab4826e9a45
content-length: 698
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Bebas+Neue&family=Lora&family=Ubuntu:wght@300;400;500;600;700&display=swap

142.250.74.106

200 OK

16 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Bebas+Neue&family=Lora&family=Ubuntu:wght@300;400;500;600;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://abayomi-web.github.io/Netflix_sign-in_page/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
16 kB (15570 bytes)
Hash
0c42acc04b5e24a87bb53ca5a1c0d963
fedc9f55f358582ee98b2ab06a7b838a758af074
d85411a080d0387bc57d3c0455e8f8231196e19b438c8347c56aa32d04ea272d

HTTP Headers

GET /css2?family=Bebas+Neue&family=Lora&family=Ubuntu:wght@300;400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abayomi-web.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 18:14:54 GMT
date: Fri, 26 Apr 2024 18:14:54 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

abayomi-web.github.io/Netflix_sign-in_page/images/NG-en-20231016-popsignuptwoweeks-perspective_alpha_website_medium.jpg

185.199.111.153

200 OK

203 kB

URL GET HTTP/2
abayomi-web.github.io/Netflix_sign-in_page/images/NG-en-20231016-popsignuptwoweeks-perspective_alpha_website_medium.jpg
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://abayomi-web.github.io/Netflix_sign-in_page/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
203 kB (202878 bytes)
Hash
17b377993a158a0782a22e31ca6ad666
7b5d0a58d23deae106576397316e978ba23e7617
bfae1e03b97815457b6b618fc561766309791aab23553c8f582821f78649f780

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix_sign-in_page/images/NG-en-20231016-popsignuptwoweeks-perspective_alpha_website_medium.jpg HTTP/1.1
Host: abayomi-web.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://abayomi-web.github.io/Netflix_sign-in_page/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 23 Oct 2023 01:17:08 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6535c994-3187e"
expires: Fri, 26 Apr 2024 18:24:55 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 21EA:0DE5:E3A0A0:E94366:662BEF1E
accept-ranges: bytes
date: Fri, 26 Apr 2024 18:14:55 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410030-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714155295.012501,VS0,VE135
vary: Accept-Encoding
x-fastly-request-id: 7172c80dd07d9001106a80f31f79474562560ff1
content-length: 202878
X-Firefox-Spdy: h2

fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2

216.58.207.227

200 OK

14 kB

URL GET HTTP/2
fonts.gstatic.com/s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://abayomi-web.github.io/Netflix_sign-in_page/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 13820, version 1.0
Size
14 kB (13820 bytes)
Hash
2dd698f2699a5ef991625825011bff90
523ff9357131751e57dd78cb92b218a49a130d1d
02f5dfc0c21e92f3c724260f035833e627513a1b91230cc490a1ea756c95e5e5

HTTP Headers

GET /s/bebasneue/v14/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://abayomi-web.github.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:34:37 GMT
expires: Fri, 25 Apr 2025 02:34:37 GMT
cache-control: public, max-age=31536000
age: 142818
last-modified: Thu, 24 Aug 2023 21:28:06 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (7)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type