Report - mohdshemi.github.io/netflix

Report Overview

Submitted URL
mohdshemi.github.io/netflix
IP
185.199.109.153
ASN
#54113 FASTLY
Submitted
2024-05-04 15:54:23
Access
public
Website Title
Netflix
Final URL
mohdshemi.github.io/netflix/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
11
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mohdshemi.github.io	unknown	2013-03-08	2023-08-22	2024-01-10	4.8 kB	1.4 MB	185.199.110.153
ka-f.fontawesome.com	3598	2012-10-18	2019-12-17	2024-05-03	2.0 kB	138 kB	172.67.139.119
kit.fontawesome.com	1868	2012-10-18	2019-12-16	2024-05-03	447 B	12 kB	172.64.147.188

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	mohdshemi.github.io/netflix	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	kit.fontawesome.com/ac60a6d602.js	12 kB	2024-05-04	2024-05-04
Pretty URL kit.fontawesome.com/ac60a6d602.js IP 172.64.147.188 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-04 17:54:24 Last Seen2024-05-04 17:54:24 Times Seen2 Hash 3ec2ba6ad961c95165f9a07c88378d5d a3d936d17bac3e4724eb68a7d717d0d847cc5819 ab74fabed4a41720f4e96ee2b6b4ab30a17030fc5401e5ed953943a2c2829b5a Loading...

HTTP Transactions (15)

URL IP Response Size

mohdshemi.github.io/netflix

185.199.110.153

301 Moved Permanently

162 B

URL User Request GET HTTP/2
mohdshemi.github.io/netflix
IP
185.199.110.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /netflix HTTP/1.1
Host: mohdshemi.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: GitHub.com
content-type: text/html
permissions-policy: interest-cohort=()
location: https://mohdshemi.github.io/netflix/
x-github-request-id: FFA8:358315:22597B1:2352E77:66364E9E
accept-ranges: bytes
date: Sat, 04 May 2024 15:53:57 GMT
via: 1.1 varnish
age: 2935
x-served-by: cache-hel1410026-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1714838038.579435,VS0,VE2
vary: Accept-Encoding
x-fastly-request-id: e004a48608edcdf938be8ef725580d654aabd64d
content-length: 162
X-Firefox-Spdy: h2

mohdshemi.github.io/netflix/

185.199.110.153

200 OK

2.4 kB

URL User Request GET HTTP/2
mohdshemi.github.io/netflix/
IP
185.199.110.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
2.4 kB (2352 bytes)
Hash
f148654ece7bfdfe0d4acced1ebf6429
e07675cf6345c77e9f2a8172dcd7e6275e8c1c3f
bedb719f5b23cc119bbb039361c8446af3403bba92748362c5a6f891b842b60c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/ HTTP/1.1
Host: mohdshemi.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Wed, 06 Sep 2023 17:24:10 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64f8b5ba-1f4d"
expires: Sat, 04 May 2024 12:11:19 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: FE74:27F398:2858BA7:2978187:6636238F
accept-ranges: bytes
date: Sat, 04 May 2024 15:53:57 GMT
via: 1.1 varnish
age: 209
x-served-by: cache-hel1410026-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1714838038.632907,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: f24469f79ab9ca2e8ed6f90343e90240da900662
content-length: 2352
X-Firefox-Spdy: h2

mohdshemi.github.io/netflix/images/pngimg.com%20-%20netflix_PNG32.png

185.199.110.153

200 OK

2.8 kB

URL GET HTTP/2
mohdshemi.github.io/netflix/images/pngimg.com%20-%20netflix_PNG32.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 512 x 288, 8-bit colormap, non-interlaced
Size
2.8 kB (2767 bytes)
Hash
be50a80c343f1fff4f0440d0ecaf781e
85e345e37ee78210b89c54c626b212f63c378245
296f2e73d3cd53c59a9029938840ee60477c10ed731d2607704337f66592e04c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/images/pngimg.com%20-%20netflix_PNG32.png HTTP/1.1
Host: mohdshemi.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mohdshemi.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Wed, 06 Sep 2023 17:24:10 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64f8b5ba-acf"
expires: Sat, 04 May 2024 16:03:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: D1BA:3781B3:1A81133:1B47CFB:66365A16
accept-ranges: bytes
age: 0
date: Sat, 04 May 2024 15:53:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714838038.216438,VS0,VE126
vary: Accept-Encoding
x-fastly-request-id: 53d23f95d87249a6a9a5dafbefd2b7c5488cc4a6
content-length: 2767
X-Firefox-Spdy: h2

mohdshemi.github.io/netflix/style.css

185.199.110.153

200 OK

1.4 kB

URL GET HTTP/2
mohdshemi.github.io/netflix/style.css
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
assembler source, ASCII text
Size
1.4 kB (1377 bytes)
Hash
199c0186268da5d08d17e75404c1fed6
bf6698465df83ec29909c3a2e8e035362e324972
5cd38f8d84e98b4a359c3ef236a9fa8b4f1c1255ecbaa4cee1d1bf3ccb2adbff

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/style.css HTTP/1.1
Host: mohdshemi.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mohdshemi.github.io/netflix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Wed, 06 Sep 2023 17:24:10 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64f8b5ba-1360"
expires: Sat, 04 May 2024 16:03:58 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 7A26:38D071:3A1CC85:3BAFB50:66365A14
accept-ranges: bytes
age: 0
date: Sat, 04 May 2024 15:53:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714838038.215377,VS0,VE130
vary: Accept-Encoding
x-fastly-request-id: 56d69d284ceda9bcb6945f9d513d7c780746883e
content-length: 1377
X-Firefox-Spdy: h2

mohdshemi.github.io/netflix/images/feature-1.png

185.199.110.153

200 OK

298 kB

URL GET HTTP/2
mohdshemi.github.io/netflix/images/feature-1.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 762 x 572, 8-bit/color RGBA, non-interlaced
Size
298 kB (297551 bytes)
Hash
f779e24d99b9c9780f2fcd8365e3aa4b
b534d90ee9675ab3d4a7708e8ae7d77c3099754c
e44d7e3083e469b1e2dfac2cc18ac6c86abc8bb75c0d9d3903a328b2ff5fbafc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/images/feature-1.png HTTP/1.1
Host: mohdshemi.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mohdshemi.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Wed, 06 Sep 2023 17:24:10 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64f8b5ba-48a4f"
expires: Sat, 04 May 2024 16:03:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: E05A:30741:3AB7028:3C48E70:66365A16
accept-ranges: bytes
date: Sat, 04 May 2024 15:53:58 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714838038.218481,VS0,VE164
vary: Accept-Encoding
x-fastly-request-id: d43504bb6983416fdad7bffb4def4b6ea0e8c841
content-length: 297551
X-Firefox-Spdy: h2

mohdshemi.github.io/netflix/images/feature-2.png

185.199.110.153

200 OK

165 kB

URL GET HTTP/2
mohdshemi.github.io/netflix/images/feature-2.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
165 kB (164843 bytes)
Hash
ff9ad058e3106aec0dc44d8ab541f024
604c44c8046aa73e0b7d012865329df4cd48e52b
7d015612c87d7fb6a41265dd64743ae47b7b9ce3e2451a094d58256e2049c70f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/images/feature-2.png HTTP/1.1
Host: mohdshemi.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mohdshemi.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Wed, 06 Sep 2023 17:24:10 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64f8b5ba-283eb"
expires: Sat, 04 May 2024 16:03:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: B8E6:29D1C9:37EB802:397DD55:66365A16
accept-ranges: bytes
age: 0
date: Sat, 04 May 2024 15:53:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714838038.220012,VS0,VE173
vary: Accept-Encoding
x-fastly-request-id: 78c644620ab66c1139d513d5444cd8dcf89bedaa
content-length: 164843
X-Firefox-Spdy: h2

mohdshemi.github.io/netflix/images/feature-3.png

185.199.110.153

200 OK

268 kB

URL GET HTTP/2
mohdshemi.github.io/netflix/images/feature-3.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 771 x 565, 8-bit/color RGBA, non-interlaced
Size
268 kB (268071 bytes)
Hash
b5595ffda0feb7b278bf2de38f2059bc
a8d6443a4688925b5a46d859f8cd1760e76ee74b
9851e3644c993f21ad8fea4e5b7d0f14129c6ff6d310fe3eda82a306d4fb1b2a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/images/feature-3.png HTTP/1.1
Host: mohdshemi.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mohdshemi.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Wed, 06 Sep 2023 17:24:10 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64f8b5ba-41727"
expires: Sat, 04 May 2024 16:03:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: B528:ED6F4:4009ED:41F0B7:66365A14
accept-ranges: bytes
age: 0
date: Sat, 04 May 2024 15:53:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714838038.223120,VS0,VE160
vary: Accept-Encoding
x-fastly-request-id: 0512a1971ec94fdbf0404fcae090e635043ff9d7
content-length: 268071
X-Firefox-Spdy: h2

mohdshemi.github.io/netflix/images/feature-4.png

185.199.110.153

200 OK

378 kB

URL GET HTTP/2
mohdshemi.github.io/netflix/images/feature-4.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 737 x 553, 8-bit/color RGBA, non-interlaced
Size
378 kB (377854 bytes)
Hash
819eb84388433c40129d44a5e02803d4
3966adbd1555e1a7425c8b3e592a34d2ed8e3ddd
07618374a57aad9ec237c8a75f8604b731b29893d683348a8425514a430e7b28

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/images/feature-4.png HTTP/1.1
Host: mohdshemi.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mohdshemi.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Wed, 06 Sep 2023 17:24:10 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64f8b5ba-5c3fe"
expires: Sat, 04 May 2024 16:03:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 3B30:358315:22D3F88:23D0C20:66365A16
accept-ranges: bytes
date: Sat, 04 May 2024 15:53:58 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714838038.223326,VS0,VE182
vary: Accept-Encoding
x-fastly-request-id: bfcab6fa684252af1d7f55e7f5a81632c2d94c5f
content-length: 377854
X-Firefox-Spdy: h2

mohdshemi.github.io/netflix/images/IN-en-20230814-popsignuptwoweeks-perspective_alpha_website_large.jpg

185.199.110.153

200 OK

302 kB

URL GET HTTP/2
mohdshemi.github.io/netflix/images/IN-en-20230814-popsignuptwoweeks-perspective_alpha_website_large.jpg
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
302 kB (301570 bytes)
Hash
eccdb232f3838cba2ebbcc84181d9ed4
9abf5538c1b7da825a77196b99f29c2d2a8fe9b6
672ffd23a28759667d0b1710cae12a36587dace86680c842457abb49a9a2b0b5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/images/IN-en-20230814-popsignuptwoweeks-perspective_alpha_website_large.jpg HTTP/1.1
Host: mohdshemi.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mohdshemi.github.io/netflix/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Wed, 06 Sep 2023 17:24:10 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64f8b5ba-49a02"
expires: Sat, 04 May 2024 16:03:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: F172:17F4B9:24D2B3:25E6AB:66365A16
accept-ranges: bytes
age: 0
date: Sat, 04 May 2024 15:53:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714838039.716071,VS0,VE186
vary: Accept-Encoding
x-fastly-request-id: 2b65b9706fff28953ac337170d5a6cf17ac48c19
content-length: 301570
X-Firefox-Spdy: h2

mohdshemi.github.io/favicon.ico

185.199.110.153

404 Not Found

5.1 kB

URL GET HTTP/2
mohdshemi.github.io/favicon.ico
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.1 kB (5142 bytes)
Hash
1eb970ce5a18bec7165f016df8238566
9efd1514af80fe14db4ed28e9bc53975b9ee089c
70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: mohdshemi.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mohdshemi.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
etag: W/"663527bc-239b"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-github-request-id: 3B54:3AEDCF:1BF753F:1CC64EB:66365A16
accept-ranges: bytes
age: 0
date: Sat, 04 May 2024 15:53:59 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714838039.964677,VS0,VE121
vary: Accept-Encoding
x-fastly-request-id: 4d99351fad4625e3a894eed12243549791d07bbd
content-length: 5142
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=ac60a6d602

172.67.139.119

200 OK

823 B

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v5-font-face.min.css?token=ac60a6d602
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
ASCII text, with very long lines (845), with no line terminators
Size
823 B (823 bytes)
Hash
d8a0274a5097af25642c9310d6d4bb3e
61512d739400e60d9360863446eaf008395859fb
84f5ae05668bcfe4bd7447d5035e909686423e998d8dfc2c96789875ef78cdd3

HTTP Headers

GET /releases/v6.5.2/css/free-v5-font-face.min.css?token=ac60a6d602 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mohdshemi.github.io/
Origin: https://mohdshemi.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 15:53:58 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"a3d53e21a02e37af6cbc00ac63b3cc1e"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
x-cache: Hit from cloudfront
via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qF7FUzbsI3vJgdq3QnuYtk6pG_yNUtOgthwK7uAOhxwnAl6_WL8tCg==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tg3QLKHU5oBUlzKf8gdokl9vFLhw7BAGUn4d0bz4zdjzkeaV2vL52HLWM%2F8W%2BtHbAtOvnEpXe462pWBQ%2B59TtaFi3YilwxrMlsSpkHxVb4PGms8iNLPqTtkMlA0r6llx4nhfN%2FUFxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87e9aaae2e2b1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=ac60a6d602

172.67.139.119

200 OK

104 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free.min.css?token=ac60a6d602
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
ASCII text, with very long lines (65321)
Size
104 kB (103541 bytes)
Hash
7f29cd8c97789aa298af8c61623ca28b
af8109e0e5c8bb2c1c3ab44ba7b5d25900ca454a
3e9c73fa687cd4110688668977a7caa87f5a1dee0d11f03687bd4871deedf1c1

HTTP Headers

GET /releases/v6.5.2/css/free.min.css?token=ac60a6d602 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mohdshemi.github.io/
Origin: https://mohdshemi.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 15:53:58 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"7f29cd8c97789aa298af8c61623ca28b"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ypgo-6qO18Esu1b0H6GQpIcu-5qYDKbVz-B2b9oS37jE8znPXRX3hQ==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ot90930fLY%2BfbKJSQqgaeZWa9mznA3yeqTv3hSb1ch1umFEGfihiElwquu%2BkLrmQkW3lY%2Bw0N%2B%2F2KnmJwqHyHoSvnHOVo9%2FaOR531dU0IWmP6vpI6iaI2kdQCN6GxmhCzTHkCSOAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9aaae2e361c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=ac60a6d602

172.67.139.119

200 OK

1.8 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-font-face.min.css?token=ac60a6d602
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
ASCII text, with very long lines (1803), with no line terminators
Size
1.8 kB (1775 bytes)
Hash
36f549800bc029aaadd0d7ac3d1d0f54
45bfcbb57c0155a2f22a47117deae6dc87706d4a
4048a832df1b9ac88058b1964ab9c45300daf6c10b0a02d697a29d729a81ea30

HTTP Headers

GET /releases/v6.5.2/css/free-v4-font-face.min.css?token=ac60a6d602 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mohdshemi.github.io/
Origin: https://mohdshemi.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 15:53:58 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"9c9f596493867f0e7ef5f9fe99103fce"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6NbAOEP2GR4lb-_G5439vzuY2ihmA0zltH3J711_aoTzPAhyCv7Z3w==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b3vzATmSHlGsNc5NCPBBQYaOJMzdMXDkC4ytslvEXdW0bkbOrZFvXUOOEaDKzCOep07YJXic68GYasnWn3qR6sN2wiIiqMI8w%2Bm1E4ds3Ld0saepQT9mv1r%2BeWOs94%2BXhTn%2BIi91LA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9aaae2e371c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

kit.fontawesome.com/ac60a6d602.js

172.64.147.188

200 OK

12 kB

URL GET HTTP/2
kit.fontawesome.com/ac60a6d602.js
IP
172.64.147.188:443
ASN
#13335 CLOUDFLARENET

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.fontawesome.com
Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D
ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (11461)
Size
12 kB (11890 bytes)
Hash
3ec2ba6ad961c95165f9a07c88378d5d
a3d936d17bac3e4724eb68a7d717d0d847cc5819
ab74fabed4a41720f4e96ee2b6b4ab30a17030fc5401e5ed953943a2c2829b5a

HTTP Headers

GET /ac60a6d602.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mohdshemi.github.io
DNT: 1
Connection: keep-alive
Referer: https://mohdshemi.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 15:53:58 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F8xJletJDA02octbnqai
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 87e9aaaae83156a2-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=ac60a6d602

172.67.139.119

200 OK

28 kB

URL GET HTTP/2
ka-f.fontawesome.com/releases/v6.5.2/css/free-v4-shims.min.css?token=ac60a6d602
IP
172.67.139.119:443
ASN
#13335 CLOUDFLARENET

Requested by
https://mohdshemi.github.io/netflix/
Certificate
IssuerGoogle Trust Services LLC
Subjectka-f.fontawesome.com
FingerprintB7:87:04:20:5C:0E:FA:B1:92:D1:3B:91:3F:39:7C:48:5C:CB:01:EA
ValidityFri, 03 May 2024 11:08:04 GMT - Thu, 01 Aug 2024 11:08:03 GMT

File type
ASCII text, with very long lines (27377)
Size
28 kB (27592 bytes)
Hash
940b066040a876fa1dc7b2ee2d222a58
64b2aea0b4d60d879d4ff7540192a906ffc0fd92
f4e953827930889e844103c3a6771bd2e9de17d091b36378c40362271858e075

HTTP Headers

GET /releases/v6.5.2/css/free-v4-shims.min.css?token=ac60a6d602 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mohdshemi.github.io/
Origin: https://mohdshemi.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 15:53:58 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Tue, 02 Apr 2024 15:26:25 GMT
etag: W/"940b066040a876fa1dc7b2ee2d222a58"
x-amz-server-side-encryption: AES256
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: rPxx6PMqyt_FdVHEFss6n_ioTVF3GB2DyGdCwt7Izwu3XJn89uqdpg==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kF6buw%2B%2F9JQKDIo7XXYZ3BMh2xHeHqoKuB%2BP0XAppvz9OMXsvtgGPrkfhGJEiKWfdoF4Jrk8B%2B245WZK%2Bk8ftsSs6RX6QV2CJo2RVopeenIo5dTGReTj3UUPXs9zsi%2FoX1YG4A6AcA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87e9aaae3e3e1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (15)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash