Report - kunalbairwa.github.io/temp

Report Overview

Submitted URL
kunalbairwa.github.io/temp
IP
185.199.109.153
ASN
#54113 FASTLY
Submitted
2024-05-09 17:32:08
Access
public
Website Title
Netflix
Final URL
kunalbairwa.github.io/temp/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
5
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
kunalbairwa.github.io	unknown	unknown	No data	No data	1.9 kB	10 kB	185.199.108.153
assets.nflxext.com	3871	2011-02-11	2015-07-22	2024-05-08	578 B	319 kB	45.57.91.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-09	medium	kunalbairwa.github.io/temp	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

kunalbairwa.github.io/temp

185.199.108.153

301 Moved Permanently

162 B

URL User Request GET HTTP/2
kunalbairwa.github.io/temp
IP
185.199.108.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /temp HTTP/1.1
Host: kunalbairwa.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: GitHub.com
content-type: text/html
permissions-policy: interest-cohort=()
location: https://kunalbairwa.github.io/temp/
x-github-request-id: E606:208C77:1047069:10B3ED7:663D0251
accept-ranges: bytes
date: Thu, 09 May 2024 17:31:42 GMT
via: 1.1 varnish
age: 1580
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1715275902.302634,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: b0d742636c99adb695d4590120aa869c2fda2ed4
content-length: 162
X-Firefox-Spdy: h2

kunalbairwa.github.io/temp/

185.199.108.153

200 OK

1.8 kB

URL User Request GET HTTP/2
kunalbairwa.github.io/temp/
IP
185.199.108.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (2355), with CRLF line terminators
Size
1.8 kB (1805 bytes)
Hash
8109ad8f4aa165a354ca6d9a83d12c75
491f86aefcd35b6e3b59c8d99d3e49a9f663a51a
a630d400505fab7ac322381bc8773f923b6ede1b99a7baec6491e3b3a448f3ad

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /temp/ HTTP/1.1
Host: kunalbairwa.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Thu, 09 May 2024 07:11:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"663c7731-1230"
expires: Thu, 09 May 2024 12:13:13 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 0C42:3073C4:A60EE:AA2B0:663CBB81
accept-ranges: bytes
date: Thu, 09 May 2024 17:31:42 GMT
via: 1.1 varnish
age: 381
x-served-by: cache-hel1410025-HEL
x-cache: HIT
x-cache-hits: 2
x-timer: S1715275902.334351,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: b1e9fa43bf9859c219a7a117fbc99bbf1da49c15
content-length: 1805
X-Firefox-Spdy: h2

kunalbairwa.github.io/temp/style.css

185.199.108.153

200 OK

1.6 kB

URL GET HTTP/2
kunalbairwa.github.io/temp/style.css
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://kunalbairwa.github.io/temp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.6 kB (1600 bytes)
Hash
ddfed6e6dad66ef3539c1b0e7e1a08d6
acdb300ee5c542c4e143483303561c3511e4d507
ac2adc16d7308e6f78bf4da3fa79cd15e40942cb52ffb4e895c3eaaa3e09f50d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /temp/style.css HTTP/1.1
Host: kunalbairwa.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kunalbairwa.github.io/temp/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Thu, 09 May 2024 07:11:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"663c7731-17d3"
expires: Thu, 09 May 2024 17:41:42 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 2AA4:30D9D9:1250757:12C786A:663D087E
accept-ranges: bytes
age: 0
date: Thu, 09 May 2024 17:31:43 GMT
via: 1.1 varnish
x-served-by: cache-hel1410025-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715275903.917654,VS0,VE128
vary: Accept-Encoding
x-fastly-request-id: fad4eef5f5ee305ed4ca3c5405e26c5179863225
content-length: 1600
X-Firefox-Spdy: h2

kunalbairwa.github.io/temp/4375011_logo_netflix_icon.ico

185.199.108.153

200 OK

4.1 kB

URL GET HTTP/2
kunalbairwa.github.io/temp/4375011_logo_netflix_icon.ico
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://kunalbairwa.github.io/temp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Size
4.1 kB (4124 bytes)
Hash
fc135357757ad2da918500ab42f0a847
f7e359c4cbb444ee314f1dd61812884cf9bcfc87
cee824eadad326147cd018941f918900594d65a897da3abc710bc3e23096b624

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /temp/4375011_logo_netflix_icon.ico HTTP/1.1
Host: kunalbairwa.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kunalbairwa.github.io/temp/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/vnd.microsoft.icon
permissions-policy: interest-cohort=()
last-modified: Thu, 09 May 2024 07:11:45 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"663c7731-12bc"
expires: Thu, 09 May 2024 17:41:43 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 6BB6:2D639E:11FD6B0:12740C3:663D087E
accept-ranges: bytes
age: 0
date: Thu, 09 May 2024 17:31:43 GMT
via: 1.1 varnish
x-served-by: cache-hel1410025-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715275903.029012,VS0,VE127
vary: Accept-Encoding
x-fastly-request-id: c2d756661976bf40c4c1ee6ba8161b9dd144ad08
content-length: 4124
X-Firefox-Spdy: h2

assets.nflxext.com/ffe/siteui/vlv3/c7f07b68-7989-4ff7-a31e-11c17dcc2fea/fcf685b8-3f9f-42d8-9af3-4bb86fa5a3b8/IN-en-20240422-popsignuptwoweeks-perspective_alpha_website_large.jpg

45.57.91.1

200 OK

319 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/vlv3/c7f07b68-7989-4ff7-a31e-11c17dcc2fea/fcf685b8-3f9f-42d8-9af3-4bb86fa5a3b8/IN-en-20240422-popsignuptwoweeks-perspective_alpha_website_large.jpg
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://kunalbairwa.github.io/temp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintB2:B6:D0:9D:2A:F9:FC:83:60:8D:F0:43:1A:60:AC:3E:74:5D:13:EB
ValidityTue, 07 May 2024 00:00:00 GMT - Wed, 12 Jun 2024 22:08:56 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
319 kB (318677 bytes)
Hash
a452b88a3a8af74d9e3e28a7ff4610fd
8695b7e383797b6cd365c0ddf0fca8fc0a662c85
224ba556f7f054173df8a3f95ae4dd84492275b5a129626edb6c9494f8329d27

HTTP Headers

GET /ffe/siteui/vlv3/c7f07b68-7989-4ff7-a31e-11c17dcc2fea/fcf685b8-3f9f-42d8-9af3-4bb86fa5a3b8/IN-en-20240422-popsignuptwoweeks-perspective_alpha_website_large.jpg HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://kunalbairwa.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 May 2024 17:31:43 GMT
Content-Type: image/jpeg
Content-Length: 318677
Connection: keep-alive
Content-MD5: pFK4ijqK902ePiin/0YQ/Q==
Last-Modified: Wed, 24 Apr 2024 13:46:27 GMT
Cache-Control: max-age=604801
Expires: Thu, 16 May 2024 17:31:44 GMT
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers