Report - signi89.github.io/netflix/

Report Overview

Submitted URL
signi89.github.io/netflix/
IP
185.199.108.153
ASN
#54113 FASTLY
Submitted
2024-05-10 17:22:16
Access
public
Website Title
Netflix
Final URL
signi89.github.io/netflix/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
8
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
signi89.github.io	unknown	2013-03-08	2023-11-10	2024-02-27	3.2 kB	286 kB	185.199.111.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	signi89.github.io/netflix/index.js	338 B	2023-12-11	2024-05-10
Pretty URL signi89.github.io/netflix/index.js IP 185.199.111.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-11 04:06:25 Last Seen2024-05-10 19:22:17 Times Seen10 Hash 84efe67abb74fecdf63ef940b09cb7c4 20ee62d5339944b0ba41cc46ad31da576a420cb2 b7ea9858f95e8aae908b7531f53ae6dc39885335fb25b891fb9241325b18ef1f Loading...

HTTP Transactions (7)

URL IP Response Size

signi89.github.io/netflix/

185.199.111.153

818 B

URL
signi89.github.io/netflix/
IP
185.199.111.153:0
ASN
#54113 FASTLY

File type
HTML document, ASCII text
Size
818 B (818 bytes)
Hash
53c7419feca862ae2a0c45fe0a7a8341
0b96868d6df9ed8fe1eb4586df8e107ed7c3a7c1
a1035215a450c27e502745d6af2ca2a7f912961d75cb68649a421fcbca4653e1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/ HTTP/1.1
Host: signi89.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Fri, 10 Nov 2023 12:19:46 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"654e1fe2-852"
expires: Fri, 10 May 2024 17:31:50 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: C0C0:3AE3E8:21F69D1:22D107E:663E57AE
accept-ranges: bytes
age: 0
date: Fri, 10 May 2024 17:21:50 GMT
via: 1.1 varnish
x-served-by: cache-hel1410023-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715361711.617856,VS0,VE139
vary: Accept-Encoding
x-fastly-request-id: 6cade66713664c7478c0c4b585f26058e5ad1ce9
content-length: 818
X-Firefox-Spdy: h2

signi89.github.io/netflix/tv.png

185.199.111.153

11 kB

URL
signi89.github.io/netflix/tv.png
IP
185.199.111.153:0
ASN
#54113 FASTLY

File type
PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Size
11 kB (11418 bytes)
Hash
77994a67327ba957dfd880e33a91f041
5ba507de8c9bc4a063beecb569e89bcf9e0a901c
b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/tv.png HTTP/1.1
Host: signi89.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://signi89.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Fri, 10 Nov 2023 12:19:46 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "654e1fe2-2c9a"
expires: Fri, 10 May 2024 17:31:51 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 7E1E:208C77:1FBDAB8:208F467:663E57AE
accept-ranges: bytes
age: 0
date: Fri, 10 May 2024 17:21:51 GMT
via: 1.1 varnish
x-served-by: cache-hel1410023-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715361711.084892,VS0,VE121
vary: Accept-Encoding
x-fastly-request-id: 01c16fe258e248f0d71485a2e86e2c82b10c3294
content-length: 11418
X-Firefox-Spdy: h2

signi89.github.io/netflix/index.js

185.199.111.153

200 OK

213 B

URL GET HTTP/2
signi89.github.io/netflix/index.js
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://signi89.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text
Size
213 B (213 bytes)
Hash
84efe67abb74fecdf63ef940b09cb7c4
20ee62d5339944b0ba41cc46ad31da576a420cb2
b7ea9858f95e8aae908b7531f53ae6dc39885335fb25b891fb9241325b18ef1f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/index.js HTTP/1.1
Host: signi89.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://signi89.github.io/netflix/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Fri, 10 Nov 2023 12:19:46 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"654e1fe2-152"
expires: Fri, 10 May 2024 17:31:51 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 08AC:2BE5F2:20B4C85:218EE71:663E57AE
accept-ranges: bytes
age: 0
date: Fri, 10 May 2024 17:21:51 GMT
via: 1.1 varnish
x-served-by: cache-hel1410023-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715361711.089010,VS0,VE124
vary: Accept-Encoding
x-fastly-request-id: 2dbc96b64ac79a2ffe40b28973bf61c3b6fafbf0
content-length: 213
X-Firefox-Spdy: h2

signi89.github.io/netflix/mobile-0819.jpg

185.199.111.153

200 OK

50 kB

URL GET HTTP/2
signi89.github.io/netflix/mobile-0819.jpg
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://signi89.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3
Size
50 kB (49614 bytes)
Hash
a48333d43c19612ed61987fa5dbff3c5
8a8781250b96fee7830eb63ee8dda19e5c871881
492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/mobile-0819.jpg HTTP/1.1
Host: signi89.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://signi89.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Fri, 10 Nov 2023 12:19:46 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "654e1fe2-c1ce"
expires: Fri, 10 May 2024 17:31:51 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: ABB2:3AE3E8:21F6A1C:22D10C3:663E57AE
accept-ranges: bytes
date: Fri, 10 May 2024 17:21:51 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410023-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715361711.086317,VS0,VE129
vary: Accept-Encoding
x-fastly-request-id: bbfb090514fc87df9821167552051f24964b8422
content-length: 49614
X-Firefox-Spdy: h2

signi89.github.io/netflix/index.css

185.199.111.153

587 B

URL
signi89.github.io/netflix/index.css
IP
185.199.111.153:0
ASN
#54113 FASTLY

File type
ASCII text
Size
587 B (587 bytes)
Hash
a4508724bfb0fc824b65fc465282a2be
a92f55d688296ea7445f9fee1976f319e86a5ecc
839405baf8880f61a2d9fcea294800dd9533e5e3bc97da47e02123b4e472002f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/index.css HTTP/1.1
Host: signi89.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://signi89.github.io/netflix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Fri, 10 Nov 2023 12:19:46 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"654e1fe2-780"
expires: Fri, 10 May 2024 17:31:51 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 2F56:328201:20D3AA1:21ACF1A:663E57AE
accept-ranges: bytes
age: 0
date: Fri, 10 May 2024 17:21:51 GMT
via: 1.1 varnish
x-served-by: cache-hel1410023-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715361711.083696,VS0,VE133
vary: Accept-Encoding
x-fastly-request-id: 8b4e6c13ed9e7ae0ca3e1ca8b73fc0a5798dc2a3
content-length: 587
X-Firefox-Spdy: h2

signi89.github.io/netflix/NG-en-20230925-popsignuptwoweeks-perspective_alpha_website_medium.jpg

185.199.111.153

200 OK

213 kB

URL GET HTTP/2
signi89.github.io/netflix/NG-en-20230925-popsignuptwoweeks-perspective_alpha_website_medium.jpg
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://signi89.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
213 kB (213124 bytes)
Hash
405ed124c4ddc1fd6c7e4afc5a4d8ef4
33533ff430982cb44239faa29fbbf7348728a560
6bdf58b233ff58895fd13fe4c1955dbe8b727cdcf0ab813c8b5f06aa8a6b2194

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/NG-en-20230925-popsignuptwoweeks-perspective_alpha_website_medium.jpg HTTP/1.1
Host: signi89.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://signi89.github.io/netflix/index.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Fri, 10 Nov 2023 12:19:46 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "654e1fe2-34084"
expires: Fri, 10 May 2024 17:31:51 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2D76:31B68F:FFDC4A:106632C:663E57AE
accept-ranges: bytes
age: 0
date: Fri, 10 May 2024 17:21:51 GMT
via: 1.1 varnish
x-served-by: cache-hel1410023-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715361711.289545,VS0,VE157
vary: Accept-Encoding
x-fastly-request-id: a006582539544787f3e8bfad4e504f89d2529e8c
content-length: 213124
X-Firefox-Spdy: h2

signi89.github.io/favicon.ico

185.199.111.153

404 Not Found

5.1 kB

URL GET HTTP/2
signi89.github.io/favicon.ico
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://signi89.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.1 kB (5142 bytes)
Hash
1eb970ce5a18bec7165f016df8238566
9efd1514af80fe14db4ed28e9bc53975b9ee089c
70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: signi89.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://signi89.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
etag: W/"663be566-239b"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-github-request-id: C0C0:3AE3E8:21F6A55:22D110E:663E57AF
accept-ranges: bytes
age: 0
date: Fri, 10 May 2024 17:21:51 GMT
via: 1.1 varnish
x-served-by: cache-hel1410023-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1715361711.418527,VS0,VE127
vary: Accept-Encoding
x-fastly-request-id: b45ad82db15c76b541c9c7dbec9cc99aaca594ec
content-length: 5142
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP