Report - daniel-cybis.github.io/netflix-impostor/

Report Overview

Submitted URL
daniel-cybis.github.io/netflix-impostor/
IP
185.199.110.153
ASN
#54113 FASTLY
Submitted
2024-04-20 05:42:22
Access
public
Website Title
Netflix
Final URL
daniel-cybis.github.io/netflix-impostor/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
7
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
daniel-cybis.github.io	unknown	2013-03-08	2022-11-07	2024-03-18	3.0 kB	435 kB	185.199.110.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	daniel-cybis.github.io/netflix-impostor/	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (6)

URL IP Response Size

daniel-cybis.github.io/netflix-impostor/

185.199.110.153

200 OK

827 B

URL User Request GET HTTP/2
daniel-cybis.github.io/netflix-impostor/
IP
185.199.110.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
827 B (827 bytes)
Hash
cf79e0ee0da3e98c5481a713e95b0d9e
6bf6234c28a15e20715e94e64e057105b5dfaca1
3ea4fed59776ab81623ae82c3c82f40ff6cd6bae381e9f24a89cd94949e17571

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /netflix-impostor/ HTTP/1.1
Host: daniel-cybis.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Fri, 04 Nov 2022 03:03:33 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"63648105-931"
expires: Sat, 20 Apr 2024 00:10:37 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: EAD0:1C8AC3:227FA5D:2339FF0:662305A5
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 05:41:55 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713591715.988195,VS0,VE121
vary: Accept-Encoding
x-fastly-request-id: b1d89876a5f26863c6d9a36033fbb663f3211d07
content-length: 827
X-Firefox-Spdy: h2

daniel-cybis.github.io/netflix-impostor/assets/css/style.css

185.199.110.153

200 OK

770 B

URL GET HTTP/2
daniel-cybis.github.io/netflix-impostor/assets/css/style.css
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://daniel-cybis.github.io/netflix-impostor/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
770 B (770 bytes)
Hash
dd6705c665d5dd943eac9a38aa9eb2e7
c0f7b93b37bad668dc85c39eb1d4c1d013441bcb
d2bc9f0cfcd415b45e8cf3354d61c95c1ae16502b629ae2d1730e47fe46ad88f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix-impostor/assets/css/style.css HTTP/1.1
Host: daniel-cybis.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daniel-cybis.github.io/netflix-impostor/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Fri, 04 Nov 2022 03:03:33 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"63648105-aa7"
expires: Sat, 20 Apr 2024 05:51:55 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 2180:2AF6FA:5BBCB99:5DB9304:662355A2
accept-ranges: bytes
date: Sat, 20 Apr 2024 05:41:55 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713591715.303208,VS0,VE131
vary: Accept-Encoding
x-fastly-request-id: 5e78a25bd0d760c3fdf5674c6cdd97f24da9b32e
content-length: 770
X-Firefox-Spdy: h2

daniel-cybis.github.io/netflix-impostor/assets/img/netflixlogo.png

185.199.110.153

200 OK

23 kB

URL GET HTTP/2
daniel-cybis.github.io/netflix-impostor/assets/img/netflixlogo.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://daniel-cybis.github.io/netflix-impostor/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 2265 x 755, 8-bit/color RGBA, non-interlaced
Size
23 kB (23013 bytes)
Hash
ed88059ce4bcc9b07f97ad1f21bc7aed
4cb8e4b13617f5a65cc31a084be1d76e13a81c9a
c336a88447070bf5848b5d59128413bc537ce8af31d91b1872e5173f01cc0d46

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix-impostor/assets/img/netflixlogo.png HTTP/1.1
Host: daniel-cybis.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daniel-cybis.github.io/netflix-impostor/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Fri, 04 Nov 2022 03:03:33 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "63648105-59e5"
expires: Sat, 20 Apr 2024 05:51:55 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: B326:29EF9F:660B687:6848A98:662355A3
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 05:41:55 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713591715.303819,VS0,VE134
vary: Accept-Encoding
x-fastly-request-id: 5c1d0475e6ba54408170d95da1cd5cc6b3b4de88
content-length: 23013
X-Firefox-Spdy: h2

daniel-cybis.github.io/netflix-impostor/assets/img/Facebook_logo.png

185.199.110.153

200 OK

21 kB

URL GET HTTP/2
daniel-cybis.github.io/netflix-impostor/assets/img/Facebook_logo.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://daniel-cybis.github.io/netflix-impostor/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 900 x 900, 8-bit/color RGBA, non-interlaced
Size
21 kB (20702 bytes)
Hash
bcedbd6f2160ce610ed0f515075aa2ad
4d8e6110f89f6ce54751bc83bfdfa402b682cca8
822cfb43f2b859633a2fbd61cceb6f4c925cb3c2966b3a3bc412daf5ae4ad389

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix-impostor/assets/img/Facebook_logo.png HTTP/1.1
Host: daniel-cybis.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daniel-cybis.github.io/netflix-impostor/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Fri, 04 Nov 2022 03:03:33 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "63648105-50de"
expires: Sat, 20 Apr 2024 05:51:55 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 0C4C:1B1E45:3F9D408:410094C:662355A3
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 05:41:55 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713591715.304393,VS0,VE139
vary: Accept-Encoding
x-fastly-request-id: 34b5e6727fb64bdad59a3ab7a7b6cebb06339e5e
content-length: 20702
X-Firefox-Spdy: h2

daniel-cybis.github.io/netflix-impostor/assets/img/background.jpg

185.199.110.153

200 OK

371 kB

URL GET HTTP/2
daniel-cybis.github.io/netflix-impostor/assets/img/background.jpg
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://daniel-cybis.github.io/netflix-impostor/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
371 kB (370946 bytes)
Hash
4bcffe9e43c56c5f4245da3729577beb
c91b4f421093da97adf392637a69d8717cbf313a
88cb83643463dfdd2484f6a7b8bc6b58e9b8459c967e103f6c607da7df2c8cd3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix-impostor/assets/img/background.jpg HTTP/1.1
Host: daniel-cybis.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daniel-cybis.github.io/netflix-impostor/assets/css/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Fri, 04 Nov 2022 03:03:33 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "63648105-5a902"
expires: Sat, 20 Apr 2024 05:51:55 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 8A0A:2B2A1B:47FED54:4984339:662355A2
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 05:41:55 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713591715.459941,VS0,VE167
vary: Accept-Encoding
x-fastly-request-id: bdc59fa2689811437e9084e05f15a3e7a838d3b0
content-length: 370946
X-Firefox-Spdy: h2

daniel-cybis.github.io/netflix-impostor/assets/img/netflix-impostor.png

185.199.110.153

200 OK

14 kB

URL GET HTTP/2
daniel-cybis.github.io/netflix-impostor/assets/img/netflix-impostor.png
IP
185.199.110.153:443
ASN
#54113 FASTLY

Requested by
https://daniel-cybis.github.io/netflix-impostor/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 196 x 256, 8-bit/color RGBA, non-interlaced
Size
14 kB (14069 bytes)
Hash
ab288416325363a8ed74c0798d773b2b
876747b5bc6c7e26e7af29ff91c6e491c1198afd
4f66fb545544b262e1fc817dfacfb2e3366dbab0aa50c999f8a13ea785f5085b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix-impostor/assets/img/netflix-impostor.png HTTP/1.1
Host: daniel-cybis.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://daniel-cybis.github.io/netflix-impostor/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Fri, 04 Nov 2022 03:03:33 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "63648105-36f5"
expires: Sat, 20 Apr 2024 05:51:55 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: A8E8:260522:1B7F59F:1C1B49A:662355A2
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 05:41:55 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713591716.566638,VS0,VE128
vary: Accept-Encoding
x-fastly-request-id: 16ca0a8a6b59601ae15398d7f582a1f0d5f74c3e
content-length: 14069
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (6)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by