Report - shaphirkullas.github.io/

Report Overview

Submitted URL
shaphirkullas.github.io/
IP
185.199.110.153
ASN
#54113 FASTLY
Submitted
2024-04-19 05:59:20
Access
public
Website Title
Netflix
Final URL
shaphirkullas.github.io/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
10
Network Intrusion Detection
0
Threat Detection Systems
36

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-18	456 B	20 kB	104.17.25.14
shaphirkullas.github.io	unknown	2013-03-08	2024-02-03	2024-03-27	4.2 kB	821 kB	185.199.110.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-18	medium	shaphirkullas.github.io/	Netflix Inc.
2024-04-18	medium	shaphirkullas.github.io/	Netflix Inc.
2024-04-18	medium	shaphirkullas.github.io/	Netflix Inc.
2024-04-18	medium	shaphirkullas.github.io/	Netflix Inc.
2024-04-18	medium	shaphirkullas.github.io/	Netflix Inc.
2024-04-18	medium	shaphirkullas.github.io/	Netflix Inc.
2024-04-18	medium	shaphirkullas.github.io/	Netflix Inc.
2024-04-18	medium	shaphirkullas.github.io/	Netflix Inc.
2024-04-18	medium	shaphirkullas.github.io/	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	shaphirkullas.github.io	Sinkholed
2024-04-19	medium	shaphirkullas.github.io	Sinkholed
2024-04-19	medium	shaphirkullas.github.io	Sinkholed
2024-04-19	medium	shaphirkullas.github.io	Sinkholed
2024-04-19	medium	shaphirkullas.github.io	Sinkholed
2024-04-19	medium	shaphirkullas.github.io	Sinkholed
2024-04-19	medium	shaphirkullas.github.io	Sinkholed
2024-04-19	medium	shaphirkullas.github.io	Sinkholed
2024-04-19	medium	shaphirkullas.github.io	Sinkholed

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (10)

URL IP Response Size

shaphirkullas.github.io/

185.199.110.153

200 OK

1.5 kB

URL User Request GET HTTP/2
shaphirkullas.github.io/
IP
185.199.110.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
1.5 kB (1455 bytes)
Hash
69d083a6157914075ab82fbed582b83c
c2e834710d6456ed818a5f4bda55630f1bbbdc00
c8f3e7a29fd87a2c27aceb8d2229d0fe1753e116c3c28c4bf0a7b4ca5b6666eb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: shaphirkullas.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 05 Feb 2024 11:05:32 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"65c0c0fc-153d"
expires: Thu, 18 Apr 2024 20:56:04 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: F86C:2AF6FA:43DD11D:45504DD:6621868C
accept-ranges: bytes
age: 0
date: Fri, 19 Apr 2024 05:58:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713506334.235808,VS0,VE127
vary: Accept-Encoding
x-fastly-request-id: 0887aa1b996885f11f3eba6ce9f14903291878d4
content-length: 1455
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css

104.17.25.14

200 OK

19 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaphirkullas.github.io/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (52276)
Size
19 kB (18861 bytes)
Hash
9402848c3d4bbc710c764326f8b887c9
b6e555166eb1381392e00adcde9bf8863f16ff01
c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7

HTTP Headers

GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shaphirkullas.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 05:58:54 GMT
content-type: text/css; charset=utf-8
content-length: 18861
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65692999-49ad"
last-modified: Fri, 01 Dec 2023 00:32:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 306574
expires: Wed, 09 Apr 2025 05:58:54 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NXW%2FwzOf3EEL%2B7I9%2BQ5a8zF8MxLVrI37yHqp1CDCdbVZW8LlelXGeiUx2VW3W9Vc5xyVcmeNxU%2BTPHYc2o9yftBgoTFSSNqZiVcsLgCD4dPT%2FhH3KlAd0PqyNN8ODRdniUaIKLe1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 876aaa5ee849b529-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

shaphirkullas.github.io/enjoy-on-tv.png

185.199.110.153

200 OK

11 kB

URL GET HTTP/2
shaphirkullas.github.io/enjoy-on-tv.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://shaphirkullas.github.io/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Size
11 kB (11418 bytes)
Hash
77994a67327ba957dfd880e33a91f041
5ba507de8c9bc4a063beecb569e89bcf9e0a901c
b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /enjoy-on-tv.png HTTP/1.1
Host: shaphirkullas.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaphirkullas.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 05 Feb 2024 11:05:32 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65c0c0fc-2c9a"
expires: Fri, 19 Apr 2024 06:08:54 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: D594:303CF7:AF4534:B3647C:6622081E
accept-ranges: bytes
age: 0
date: Fri, 19 Apr 2024 05:58:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713506335.549721,VS0,VE116
vary: Accept-Encoding
x-fastly-request-id: 6d14eab9a55e53b01cc884ff56ec86498c251f73
content-length: 11418
X-Firefox-Spdy: h2

shaphirkullas.github.io/Netflix-clone-style.css

185.199.110.153

200 OK

1.3 kB

URL GET HTTP/2
shaphirkullas.github.io/Netflix-clone-style.css
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://shaphirkullas.github.io/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.3 kB (1294 bytes)
Hash
ab0137caf3079a14ab0fac293ffecd43
86c6d5939b248aedabcb10c3a1d0bbe63dd8e940
010f87260c0e2771cd7800f064a830f51505f8997742468fb67cc0ddafe7e56e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /Netflix-clone-style.css HTTP/1.1
Host: shaphirkullas.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaphirkullas.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 05 Feb 2024 11:05:32 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"65c0c0fc-1630"
expires: Fri, 19 Apr 2024 06:08:54 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 3D38:1C8AC3:13DB1A8:144AE79:6622081E
accept-ranges: bytes
age: 0
date: Fri, 19 Apr 2024 05:58:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713506335.547964,VS0,VE125
vary: Accept-Encoding
x-fastly-request-id: ca7354c597128a8e5ecf8b1e039b57f8ee94a815
content-length: 1294
X-Firefox-Spdy: h2

shaphirkullas.github.io/watch%20everywhere.png

185.199.110.153

200 OK

152 kB

URL GET HTTP/2
shaphirkullas.github.io/watch%20everywhere.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://shaphirkullas.github.io/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
152 kB (151687 bytes)
Hash
186a706493dd515e30f8ad682d068578
2d09cad7878e23f97cbac2784a58056c61e80f0d
4a3bfdf68de04166878c6bfa4c5b0f57a100cad45ab80939433e8f7aeef4b7a4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /watch%20everywhere.png HTTP/1.1
Host: shaphirkullas.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaphirkullas.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 05 Feb 2024 11:05:32 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65c0c0fc-25087"
expires: Fri, 19 Apr 2024 06:08:54 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: BBFA:21BD59:79EDB51:7CA1455:6622081D
accept-ranges: bytes
age: 0
date: Fri, 19 Apr 2024 05:58:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713506335.552700,VS0,VE135
vary: Accept-Encoding
x-fastly-request-id: 7811883d2d19d4a98c3646aac6e1d463093c9588
content-length: 151687
X-Firefox-Spdy: h2

shaphirkullas.github.io/download%20and%20watch.jpg

185.199.110.153

200 OK

50 kB

URL GET HTTP/2
shaphirkullas.github.io/download%20and%20watch.jpg
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://shaphirkullas.github.io/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3
Size
50 kB (49614 bytes)
Hash
a48333d43c19612ed61987fa5dbff3c5
8a8781250b96fee7830eb63ee8dda19e5c871881
492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /download%20and%20watch.jpg HTTP/1.1
Host: shaphirkullas.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaphirkullas.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Mon, 05 Feb 2024 11:05:32 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65c0c0fc-c1ce"
expires: Fri, 19 Apr 2024 06:08:54 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 33E4:22C6DD:1C684FE:1D0C9E0:6622081E
accept-ranges: bytes
age: 0
date: Fri, 19 Apr 2024 05:58:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713506335.552597,VS0,VE183
vary: Accept-Encoding
x-fastly-request-id: 526a897bede340fb4e176d2d19d6aa52bc9cf33d
content-length: 49614
X-Firefox-Spdy: h2

shaphirkullas.github.io/kids%20profile.png

185.199.110.153

200 OK

255 kB

URL GET HTTP/2
shaphirkullas.github.io/kids%20profile.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://shaphirkullas.github.io/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
255 kB (254586 bytes)
Hash
2995e70023477ef72300f24e45aba1d5
92c13cd17c41cb9580f59197a3008fd9cca432c7
1e5a6122c8e39862aa1c92eae0e83e92458232d930620e9ca0c68e9be425aa67

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /kids%20profile.png HTTP/1.1
Host: shaphirkullas.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaphirkullas.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 05 Feb 2024 11:05:32 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65c0c0fc-3e27a"
expires: Fri, 19 Apr 2024 06:08:54 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 5A2E:156FBE:3DFE61B:3F6AD3B:6622081E
accept-ranges: bytes
age: 0
date: Fri, 19 Apr 2024 05:58:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713506335.554005,VS0,VE158
vary: Accept-Encoding
x-fastly-request-id: 9576e8a161cceaba86d1254dceba39b5e9e15a2e
content-length: 254586
X-Firefox-Spdy: h2

shaphirkullas.github.io/log.png

185.199.110.153

200 OK

16 kB

URL GET HTTP/2
shaphirkullas.github.io/log.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://shaphirkullas.github.io/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 1435 x 390, 8-bit/color RGBA, non-interlaced
Size
16 kB (15961 bytes)
Hash
a9f6d8afedc3df461c2b1099e2dd12a0
308e2e45e730b0fbc2b970671bfeea1fa6d0957b
e1f81949beb97186ccfae240c8b5d413b84a65d624afe108ff02463bcbbac38b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /log.png HTTP/1.1
Host: shaphirkullas.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaphirkullas.github.io/Netflix-clone-style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 05 Feb 2024 11:05:32 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65c0c0fc-3e59"
expires: Fri, 19 Apr 2024 06:08:54 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 5BBE:28A741:35DC197:3709C74:6622081D
accept-ranges: bytes
age: 0
date: Fri, 19 Apr 2024 05:58:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713506335.715301,VS0,VE119
vary: Accept-Encoding
x-fastly-request-id: 7986f4e573eb2cab2c20de390b870419074ce437
content-length: 15961
X-Firefox-Spdy: h2

shaphirkullas.github.io/test-img-3.jpg

185.199.110.153

200 OK

323 kB

URL GET HTTP/2
shaphirkullas.github.io/test-img-3.jpg
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://shaphirkullas.github.io/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
323 kB (322983 bytes)
Hash
45673d952bec9f9f343b94a73de16821
fb09163d499a744dc7e4458054b566a91ebfcc6c
8a6fe37d0cafef5591c7a3214cfe7a5d2ebf87f42d7f0170f31f5eea4db9efe8

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /test-img-3.jpg HTTP/1.1
Host: shaphirkullas.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaphirkullas.github.io/Netflix-clone-style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Mon, 05 Feb 2024 11:05:32 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "65c0c0fc-4eda7"
expires: Fri, 19 Apr 2024 06:08:54 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: BBFA:21BD59:79EDB68:7CA1474:6622081E
accept-ranges: bytes
age: 0
date: Fri, 19 Apr 2024 05:58:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713506335.715021,VS0,VE143
vary: Accept-Encoding
x-fastly-request-id: b81e7277504f64b11ea080ce7bf0284bd49cf20f
content-length: 322983
X-Firefox-Spdy: h2

shaphirkullas.github.io/favicon.ico

185.199.110.153

404 Not Found

5.3 kB

URL GET HTTP/2
shaphirkullas.github.io/favicon.ico
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://shaphirkullas.github.io/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.3 kB (5254 bytes)
Hash
c1f9838a645648cb3b25359f7890a288
0cf12d25140e329bcb4c304feefce63f8f0ba7b3
b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: shaphirkullas.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaphirkullas.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64d39a40-24a3"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 8094:1B5FBD:452EE86:46BD94E:6621FA7F
accept-ranges: bytes
age: 3487
date: Fri, 19 Apr 2024 05:58:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410024-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713506335.903965,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 21c40ce8f4ef8c5eefdb5ecf3b9a717615311c28
content-length: 5254
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (10)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate