Report - subhush.github.io/netflex-clone/

Report Overview

Submitted URL
subhush.github.io/netflex-clone/
IP
185.199.108.153
ASN
#54113 FASTLY
Submitted
2024-05-05 13:42:35
Access
public
Website Title
Netflix India – Watch TV Shows Online, Watch Movies Online
Final URL
subhush.github.io/netflex-clone/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
8
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
subhush.github.io	unknown	unknown	No data	No data	3.3 kB	25 kB	185.199.109.153
occ-0-6245-2186.1.nflxso.net	unknown	2016-03-25	2023-02-09	2024-04-17	6.2 kB	183 kB	49.44.142.130
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-05	468 B	309 kB	142.250.74.106
webseriesnews.com	unknown	2023-12-08	2020-05-15	2024-01-09	456 B	0 B	0.0.0.0
assets.nflxext.com	3871	2011-02-11	2015-07-22	2024-05-04	576 B	308 kB	45.57.91.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (1)

	URL	Size	First Seen	Last Seen
	subhush.github.io/netflex-clone/index.js	779 B	2024-04-19	2024-05-05
Pretty URL subhush.github.io/netflex-clone/index.js IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-19 06:44:33 Last Seen2024-05-05 15:42:41 Times Seen4 Hash 0b0c9f637b56299502e68dac06e802ed 5a14501cd8e14d23f5ef00667486b55d6819bf30 9584f40df3a3c806450fe4a453bcb275c018d99eca45123bdd2f0dae48d0e3f1 Loading...

HTTP Transactions (20)

URL IP Response Size

subhush.github.io/netflex-clone/

185.199.109.153

200 OK

14 kB

URL User Request GET HTTP/2
subhush.github.io/netflex-clone/
IP
185.199.109.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (5887), with CRLF line terminators
Size
14 kB (13886 bytes)
Hash
ed5b0786ad4526a8a8aff9a566a8cc22
ee7dae98d762217d0f3dcd3565544405395e32d0
cb0dddd2dca9968a47375b249aae4964ecd2ae0fd102728a4544520ebe0792d9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex-clone/ HTTP/1.1
Host: subhush.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 28 Mar 2024 09:38:15 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"66053a87-cc41"
expires: Sun, 05 May 2024 13:52:08 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 8EBE:3A4C90:411EA92:430B788:66378CB0
accept-ranges: bytes
age: 0
date: Sun, 05 May 2024 13:42:08 GMT
via: 1.1 varnish
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714916529.710017,VS0,VE119
vary: Accept-Encoding
x-fastly-request-id: bd96dd5eab184d2ecc6fc2e9700c03537e247852
content-length: 13886
X-Firefox-Spdy: h2

subhush.github.io/netflex-clone/CSS/general.css

185.199.109.153

200 OK

389 B

URL GET HTTP/2
subhush.github.io/netflex-clone/CSS/general.css
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
389 B (389 bytes)
Hash
0466d204f6f67e477b8e219b8813ff1d
d9cf411b133a7877208f3a2eeb863637cc852e74
6be3579a1dd21b542fc4e85f619407d04ca13bd556e4b671bc810350c298e41e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex-clone/CSS/general.css HTTP/1.1
Host: subhush.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/netflex-clone/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Thu, 28 Mar 2024 09:38:15 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"66053a87-43e"
expires: Sun, 05 May 2024 13:52:09 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: C6C0:ED6F4:F49325:FC2B14:66378CAF
accept-ranges: bytes
age: 0
date: Sun, 05 May 2024 13:42:09 GMT
via: 1.1 varnish
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714916529.251435,VS0,VE119
vary: Accept-Encoding
x-fastly-request-id: 002d66e92519c829372d7fef2014198014da7283
content-length: 389
X-Firefox-Spdy: h2

subhush.github.io/netflex-clone/CSS/root.css

185.199.109.153

200 OK

239 B

URL GET HTTP/2
subhush.github.io/netflex-clone/CSS/root.css
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
239 B (239 bytes)
Hash
4a315dd78c5ea358808831f33b489eb8
720a9a49f951439d467a4e324ed067912ae18c2c
11f8113be618e81557d47a29facc1d88553e83c263dbaa3a400627465b4a75e7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex-clone/CSS/root.css HTTP/1.1
Host: subhush.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/netflex-clone/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 28 Mar 2024 09:38:15 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"66053a87-27b"
expires: Sun, 05 May 2024 13:52:09 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: EFAC:32B785:44D25BE:46BEB60:66378CA3
accept-ranges: bytes
age: 0
date: Sun, 05 May 2024 13:42:09 GMT
via: 1.1 varnish
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714916529.246842,VS0,VE127
vary: Accept-Encoding
x-fastly-request-id: 1c131700c5010b84b8c761a6b815fa5aea05be4e
content-length: 239
X-Firefox-Spdy: h2

subhush.github.io/netflex-clone/CSS/style.css

185.199.109.153

200 OK

2.5 kB

URL GET HTTP/2
subhush.github.io/netflex-clone/CSS/style.css
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with very long lines (627), with CRLF line terminators
Size
2.5 kB (2482 bytes)
Hash
46340457df7bf41fe3fc7f88d5bbc5fa
0eb79e79059b0cd866b821193f82194d285948f1
c8de128432890c9e8ab8a9e5c44c962e21387cc745ba7d1123f1dcde97832827

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex-clone/CSS/style.css HTTP/1.1
Host: subhush.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/netflex-clone/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 28 Mar 2024 09:38:15 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"66053a87-2794"
expires: Sun, 05 May 2024 13:52:09 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 235E:2C7344:4421C44:460DC5D:66378CAF
accept-ranges: bytes
age: 0
date: Sun, 05 May 2024 13:42:09 GMT
via: 1.1 varnish
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714916529.245282,VS0,VE135
vary: Accept-Encoding
x-fastly-request-id: 5e7c0066b9d57211870ecf6c48cd4cf357f25b07
content-length: 2482
X-Firefox-Spdy: h2

subhush.github.io/netflex-clone/CSS/responsiveness.css

185.199.109.153

200 OK

1.1 kB

URL GET HTTP/2
subhush.github.io/netflex-clone/CSS/responsiveness.css
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.1 kB (1109 bytes)
Hash
ff8b984ffae075a1cd62e2973419042f
a3e29ef27b4c6d465a258ab9f3320f5bfb661b38
14b020887422340b73925259677f989834c54546782707066bd35a28f7d9cdb4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex-clone/CSS/responsiveness.css HTTP/1.1
Host: subhush.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/netflex-clone/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 28 Mar 2024 09:38:15 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"66053a87-1fe9"
expires: Sun, 05 May 2024 13:52:09 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 386C:26E33F:4371D6B:455F641:66378CB1
accept-ranges: bytes
age: 0
date: Sun, 05 May 2024 13:42:09 GMT
via: 1.1 varnish
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714916529.248853,VS0,VE138
vary: Accept-Encoding
x-fastly-request-id: 84f710205904e367efd17514b8fead16c3d1f317
content-length: 1109
X-Firefox-Spdy: h2

subhush.github.io/netflex-clone/index.js

185.199.109.153

200 OK

266 B

URL GET HTTP/2
subhush.github.io/netflex-clone/index.js
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
266 B (266 bytes)
Hash
0b0c9f637b56299502e68dac06e802ed
5a14501cd8e14d23f5ef00667486b55d6819bf30
9584f40df3a3c806450fe4a453bcb275c018d99eca45123bdd2f0dae48d0e3f1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex-clone/index.js HTTP/1.1
Host: subhush.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/netflex-clone/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Thu, 28 Mar 2024 09:38:15 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"66053a87-30b"
expires: Sun, 05 May 2024 13:52:09 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 975C:2C7344:4421C4B:460DC64:66378CB1
accept-ranges: bytes
date: Sun, 05 May 2024 13:42:09 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714916529.273332,VS0,VE128
vary: Accept-Encoding
x-fastly-request-id: a703b38c8d876ff48c5655d6ff8f22d4e45b56c9
content-length: 266
X-Firefox-Spdy: h2

occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABRSwwUxyTPYj67RWisqwKVekgpQZfXXB3YwcviyEmdIgV9YPNqG-byeCykYxluaHavTuH21b-83hgsBCx3Ag4h5VEkT4CxqYInQ.webp?r=f73

49.44.142.130

200 OK

12 kB

URL GET HTTP/1.1
occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABRSwwUxyTPYj67RWisqwKVekgpQZfXXB3YwcviyEmdIgV9YPNqG-byeCykYxluaHavTuH21b-83hgsBCx3Ag4h5VEkT4CxqYInQ.webp?r=f73
IP
49.44.142.130:443
ASN
#55836 Reliance Jio Infocomm Limited

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint24:38:E9:E2:97:D0:50:D8:C9:63:62:4C:C7:B2:54:E3:3F:89:73:6A
ValiditySat, 13 Apr 2024 00:00:00 GMT - Wed, 15 May 2024 21:53:01 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp
Size
12 kB (11918 bytes)
Hash
9503d8eec4b6e32d780906233715906b
f5ffea25e100807ecada0ebeb5b081f349aeb980
9da8810aa4376c979e685917151b13a97c6b2486fd43838d0edf609a7c02d31f

HTTP Headers

GET /dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABRSwwUxyTPYj67RWisqwKVekgpQZfXXB3YwcviyEmdIgV9YPNqG-byeCykYxluaHavTuH21b-83hgsBCx3Ag4h5VEkT4CxqYInQ.webp?r=f73 HTTP/1.1
Host: occ-0-6245-2186.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:09 GMT
Content-Type: image/webp
Content-Length: 11918
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "9503d8eec4b6e32d780906233715906b"
Last-Modified: Thu, 18 Jan 2024 20:24:01 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

fonts.googleapis.com/css2?family=Martel+Sans:wght@300;400;600;700&display=swap

142.250.74.106

200 OK

308 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Martel+Sans:wght@300;400;600;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
gzip compressed data, max compression
Size
308 kB (308063 bytes)
Hash
317ed390f22684d70dc9d2a44144ad8e
970e2b940930fa12f4457afba122fe0478dbb550
e501dd5d48034b00d0a4b9370a45ad77df943a4f231aa9425bd68b6ef6d70b9f

HTTP Headers

GET /css2?family=Martel+Sans:wght@300;400;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 05 May 2024 13:42:09 GMT
date: Sun, 05 May 2024 13:42:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABYQ6rfOvgLrWI3kYEJHShC6lakabAdn9AcCNeaQzU56X1_zWjqS8Lms3kDGVXd2kceRCtji09doxifAlLWRo49dXMcGuodptwZ_d493aEyRFHJ0gnb-xvUp7IMJbNgZOSkMsNNi7ZYBBFuXpUAC7pfFtFQ0n_YE7DGs.webp?r=0f6

49.44.142.130

200 OK

14 kB

URL GET HTTP/1.1
occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABYQ6rfOvgLrWI3kYEJHShC6lakabAdn9AcCNeaQzU56X1_zWjqS8Lms3kDGVXd2kceRCtji09doxifAlLWRo49dXMcGuodptwZ_d493aEyRFHJ0gnb-xvUp7IMJbNgZOSkMsNNi7ZYBBFuXpUAC7pfFtFQ0n_YE7DGs.webp?r=0f6
IP
49.44.142.130:443
ASN
#55836 Reliance Jio Infocomm Limited

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint24:38:E9:E2:97:D0:50:D8:C9:63:62:4C:C7:B2:54:E3:3F:89:73:6A
ValiditySat, 13 Apr 2024 00:00:00 GMT - Wed, 15 May 2024 21:53:01 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp
Size
14 kB (14514 bytes)
Hash
ad4ef69c6884122b920bdae0bfaf6d20
ad4860e1947655a8ea6ed758fad297958323210d
904c6f150b824d7928a22e89811ae12f99d494cc5947120a14f42ce9f8eda132

HTTP Headers

GET /dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABYQ6rfOvgLrWI3kYEJHShC6lakabAdn9AcCNeaQzU56X1_zWjqS8Lms3kDGVXd2kceRCtji09doxifAlLWRo49dXMcGuodptwZ_d493aEyRFHJ0gnb-xvUp7IMJbNgZOSkMsNNi7ZYBBFuXpUAC7pfFtFQ0n_YE7DGs.webp?r=0f6 HTTP/1.1
Host: occ-0-6245-2186.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:09 GMT
Content-Type: image/webp
Content-Length: 14514
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "ad4ef69c6884122b920bdae0bfaf6d20"
Last-Modified: Fri, 26 Jan 2024 13:03:49 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABa6NNJJ0BcNg9FrxjaBtaCc5Z5JpecOX2iQu6-Nmlw9fPxsms47A5xsTJLqX-HZ3zzSbXwB1R7avwaVc-gvslcxTC5Plfrh-c5s.webp?r=997

49.44.142.130

200 OK

22 kB

URL GET HTTP/1.1
occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABa6NNJJ0BcNg9FrxjaBtaCc5Z5JpecOX2iQu6-Nmlw9fPxsms47A5xsTJLqX-HZ3zzSbXwB1R7avwaVc-gvslcxTC5Plfrh-c5s.webp?r=997
IP
49.44.142.130:443
ASN
#55836 Reliance Jio Infocomm Limited

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint24:38:E9:E2:97:D0:50:D8:C9:63:62:4C:C7:B2:54:E3:3F:89:73:6A
ValiditySat, 13 Apr 2024 00:00:00 GMT - Wed, 15 May 2024 21:53:01 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp
Size
22 kB (21522 bytes)
Hash
bcd515376964250c064761a1707a62bc
5dd86eab2f0cf6dea953e758a1ff40757a7edd67
6e079aec2b2a7166db6fe623fdac687bb58b04e9c2d3adf3fc164754333e2a30

HTTP Headers

GET /dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABa6NNJJ0BcNg9FrxjaBtaCc5Z5JpecOX2iQu6-Nmlw9fPxsms47A5xsTJLqX-HZ3zzSbXwB1R7avwaVc-gvslcxTC5Plfrh-c5s.webp?r=997 HTTP/1.1
Host: occ-0-6245-2186.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:09 GMT
Content-Type: image/webp
Content-Length: 21522
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "bcd515376964250c064761a1707a62bc"
Last-Modified: Thu, 08 Feb 2024 18:30:11 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABf_6TG8vKsXqijRqDVJ9VCTIy0mHVi_7Af0SdPeekW1iUNaBxAUoqmdZ8ghMDQUfNzpbIir8cHbOk5OQVqbXdt_iI34_8WPPAsQ.webp?r=896

49.44.142.130

200 OK

17 kB

URL GET HTTP/1.1
occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABf_6TG8vKsXqijRqDVJ9VCTIy0mHVi_7Af0SdPeekW1iUNaBxAUoqmdZ8ghMDQUfNzpbIir8cHbOk5OQVqbXdt_iI34_8WPPAsQ.webp?r=896
IP
49.44.142.130:443
ASN
#55836 Reliance Jio Infocomm Limited

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint24:38:E9:E2:97:D0:50:D8:C9:63:62:4C:C7:B2:54:E3:3F:89:73:6A
ValiditySat, 13 Apr 2024 00:00:00 GMT - Wed, 15 May 2024 21:53:01 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp
Size
17 kB (16976 bytes)
Hash
6b15db01be5927f83db4eeeef32d9aa8
acad5bf7cb1ff744ed0ab38871b53deff0927daa
93b01eb029f6c5a200e3eefdea2b0faaf90c49dd1ee096fdebd3b2137b9dafe0

HTTP Headers

GET /dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABf_6TG8vKsXqijRqDVJ9VCTIy0mHVi_7Af0SdPeekW1iUNaBxAUoqmdZ8ghMDQUfNzpbIir8cHbOk5OQVqbXdt_iI34_8WPPAsQ.webp?r=896 HTTP/1.1
Host: occ-0-6245-2186.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:09 GMT
Content-Type: image/webp
Content-Length: 16976
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "6b15db01be5927f83db4eeeef32d9aa8"
Last-Modified: Wed, 01 Nov 2023 18:30:53 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABRHATTlCJM3dQk25TqjTHmG7Cfj4nv0ld9GbT0Rexso1MCkuuHgEw911XGn8l3g0fUDKthGNuNweSF4dhwwjz1hg2QRy-Y054y8cWCACS_Av5pGtukAtqk2Kq9I7McOw9MojfVKlzCkcybvMPvRm4VNdnJEOmzLUIlQ.webp?r=dc6

49.44.142.130

200 OK

20 kB

URL GET HTTP/1.1
occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABRHATTlCJM3dQk25TqjTHmG7Cfj4nv0ld9GbT0Rexso1MCkuuHgEw911XGn8l3g0fUDKthGNuNweSF4dhwwjz1hg2QRy-Y054y8cWCACS_Av5pGtukAtqk2Kq9I7McOw9MojfVKlzCkcybvMPvRm4VNdnJEOmzLUIlQ.webp?r=dc6
IP
49.44.142.130:443
ASN
#55836 Reliance Jio Infocomm Limited

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint24:38:E9:E2:97:D0:50:D8:C9:63:62:4C:C7:B2:54:E3:3F:89:73:6A
ValiditySat, 13 Apr 2024 00:00:00 GMT - Wed, 15 May 2024 21:53:01 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp
Size
20 kB (19692 bytes)
Hash
e1cbae8e1468f2ec24d68d9e34416be3
6e86e18abea962a633ad5e2ae18b476c1b7df162
6ea7d42ad7fc6b2f0cf81b4c1c32018c4fb3b2df2ce4f38e43db14f6af26f877

HTTP Headers

GET /dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABRHATTlCJM3dQk25TqjTHmG7Cfj4nv0ld9GbT0Rexso1MCkuuHgEw911XGn8l3g0fUDKthGNuNweSF4dhwwjz1hg2QRy-Y054y8cWCACS_Av5pGtukAtqk2Kq9I7McOw9MojfVKlzCkcybvMPvRm4VNdnJEOmzLUIlQ.webp?r=dc6 HTTP/1.1
Host: occ-0-6245-2186.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:09 GMT
Content-Type: image/webp
Content-Length: 19692
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "e1cbae8e1468f2ec24d68d9e34416be3"
Last-Modified: Fri, 16 Feb 2024 12:14:26 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABR5C2wLs9YB-kjnKGkqRmiy3Ht9dOz_tlU1iqKZ6ZKg9SSh5MrGoz1O-1-XUYnnJPXsKO66OEDoRtbgj7esBoC52rMjk5XMamIE.webp?r=bad

49.44.142.130

200 OK

21 kB

URL GET HTTP/1.1
occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABR5C2wLs9YB-kjnKGkqRmiy3Ht9dOz_tlU1iqKZ6ZKg9SSh5MrGoz1O-1-XUYnnJPXsKO66OEDoRtbgj7esBoC52rMjk5XMamIE.webp?r=bad
IP
49.44.142.130:443
ASN
#55836 Reliance Jio Infocomm Limited

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint24:38:E9:E2:97:D0:50:D8:C9:63:62:4C:C7:B2:54:E3:3F:89:73:6A
ValiditySat, 13 Apr 2024 00:00:00 GMT - Wed, 15 May 2024 21:53:01 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp
Size
21 kB (21100 bytes)
Hash
f52185128cda18f5093bb467264e66b8
5e5411d6ac3a85ba760fa68f1d8f08407654b5de
2ecfcb80c02cf977607e2d72e81684660680741053ce00a99e67c38c3b23275f

HTTP Headers

GET /dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABR5C2wLs9YB-kjnKGkqRmiy3Ht9dOz_tlU1iqKZ6ZKg9SSh5MrGoz1O-1-XUYnnJPXsKO66OEDoRtbgj7esBoC52rMjk5XMamIE.webp?r=bad HTTP/1.1
Host: occ-0-6245-2186.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:10 GMT
Content-Type: image/webp
Content-Length: 21100
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "f52185128cda18f5093bb467264e66b8"
Last-Modified: Thu, 08 Feb 2024 05:38:28 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABTSwdjikRQXWb5VxC2f1y1YMexQh0suc1q5ShtDC1L5COOqe4mykMmnr6E81KqVvJlYcRzDMVFwWaOYfUM1hu4g9DpdJl6UK4rw.webp?r=5fa

49.44.142.130

200 OK

14 kB

URL GET HTTP/1.1
occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABTSwdjikRQXWb5VxC2f1y1YMexQh0suc1q5ShtDC1L5COOqe4mykMmnr6E81KqVvJlYcRzDMVFwWaOYfUM1hu4g9DpdJl6UK4rw.webp?r=5fa
IP
49.44.142.130:443
ASN
#55836 Reliance Jio Infocomm Limited

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint24:38:E9:E2:97:D0:50:D8:C9:63:62:4C:C7:B2:54:E3:3F:89:73:6A
ValiditySat, 13 Apr 2024 00:00:00 GMT - Wed, 15 May 2024 21:53:01 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp
Size
14 kB (14244 bytes)
Hash
c8be304f14b26a483fe2d7cb29c2110f
173b765359658712b268fd2cd0673aa0ca4b271e
684ff654bb19ffa68bc47f377f413fb3a88a37698f39f3116fe9e6ce0e9c11a8

HTTP Headers

GET /dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABTSwdjikRQXWb5VxC2f1y1YMexQh0suc1q5ShtDC1L5COOqe4mykMmnr6E81KqVvJlYcRzDMVFwWaOYfUM1hu4g9DpdJl6UK4rw.webp?r=5fa HTTP/1.1
Host: occ-0-6245-2186.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:10 GMT
Content-Type: image/webp
Content-Length: 14244
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "c8be304f14b26a483fe2d7cb29c2110f"
Last-Modified: Wed, 01 Nov 2023 18:02:18 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABSCQUDRDJkX40qVgnXYU0C3C-Jb9hv2OlfsoT4s9eLDOtJ4_6YEQ7bz7gLttG_amRNA9d9CE6Z9TY84rEF_ZjFLN9Irqjt7gcSvbaqEZeMEPJkWbqBHRkdn27d6vTdlfLp9BOu3gK3oA-YZ6f-8ImfOxsQyr0aJMoI9qhL3rzMH8p1y7zimOTZSmPir11pmiuvxKZ_pNTUPQX186TxjP3Yr7Ubu-jAvdjvm9Zo8besQMiRHVEHk0h24jbKSauhpx2ocd2Kblc3LA7f-af5Htzhcg6bc8wjzuoi6PtR0fICLXkV9CQogh81SU.webp?r=7ab

49.44.142.130

200 OK

18 kB

URL GET HTTP/1.1
occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABSCQUDRDJkX40qVgnXYU0C3C-Jb9hv2OlfsoT4s9eLDOtJ4_6YEQ7bz7gLttG_amRNA9d9CE6Z9TY84rEF_ZjFLN9Irqjt7gcSvbaqEZeMEPJkWbqBHRkdn27d6vTdlfLp9BOu3gK3oA-YZ6f-8ImfOxsQyr0aJMoI9qhL3rzMH8p1y7zimOTZSmPir11pmiuvxKZ_pNTUPQX186TxjP3Yr7Ubu-jAvdjvm9Zo8besQMiRHVEHk0h24jbKSauhpx2ocd2Kblc3LA7f-af5Htzhcg6bc8wjzuoi6PtR0fICLXkV9CQogh81SU.webp?r=7ab
IP
49.44.142.130:443
ASN
#55836 Reliance Jio Infocomm Limited

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint24:38:E9:E2:97:D0:50:D8:C9:63:62:4C:C7:B2:54:E3:3F:89:73:6A
ValiditySat, 13 Apr 2024 00:00:00 GMT - Wed, 15 May 2024 21:53:01 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp
Size
18 kB (17664 bytes)
Hash
35347197492a01bb318479f65cd02b78
d253da014b623b2a92eb02da78b8445eb45e6810
8d303399d7b3217cfc4545c25bedce9c2ff40897584b48bbc53c403aa34f62df

HTTP Headers

GET /dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABSCQUDRDJkX40qVgnXYU0C3C-Jb9hv2OlfsoT4s9eLDOtJ4_6YEQ7bz7gLttG_amRNA9d9CE6Z9TY84rEF_ZjFLN9Irqjt7gcSvbaqEZeMEPJkWbqBHRkdn27d6vTdlfLp9BOu3gK3oA-YZ6f-8ImfOxsQyr0aJMoI9qhL3rzMH8p1y7zimOTZSmPir11pmiuvxKZ_pNTUPQX186TxjP3Yr7Ubu-jAvdjvm9Zo8besQMiRHVEHk0h24jbKSauhpx2ocd2Kblc3LA7f-af5Htzhcg6bc8wjzuoi6PtR0fICLXkV9CQogh81SU.webp?r=7ab HTTP/1.1
Host: occ-0-6245-2186.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:10 GMT
Content-Type: image/webp
Content-Length: 17664
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "35347197492a01bb318479f65cd02b78"
Last-Modified: Thu, 15 Feb 2024 15:03:12 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABe8Zg5UTD_G3CRF1axnBK3Y-MNd1WMt7okVWbeeC_ATYtFoScN51wK5I3PiIEscZ4rIDRb8u48buJntB0XKFXeogxFuwq86hEMA.webp?r=ce7

49.44.142.130

200 OK

21 kB

URL GET HTTP/1.1
occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABe8Zg5UTD_G3CRF1axnBK3Y-MNd1WMt7okVWbeeC_ATYtFoScN51wK5I3PiIEscZ4rIDRb8u48buJntB0XKFXeogxFuwq86hEMA.webp?r=ce7
IP
49.44.142.130:443
ASN
#55836 Reliance Jio Infocomm Limited

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint24:38:E9:E2:97:D0:50:D8:C9:63:62:4C:C7:B2:54:E3:3F:89:73:6A
ValiditySat, 13 Apr 2024 00:00:00 GMT - Wed, 15 May 2024 21:53:01 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp
Size
21 kB (21408 bytes)
Hash
b5e981e8420fc8031374bb08999e3f13
aa7c05bad56ff10b7ee029d7e643b36dfce1ff1c
3da02552591a515c5a67ed2dfb24826abf41040e3c06fff852bcc9d4e50213fb

HTTP Headers

GET /dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABe8Zg5UTD_G3CRF1axnBK3Y-MNd1WMt7okVWbeeC_ATYtFoScN51wK5I3PiIEscZ4rIDRb8u48buJntB0XKFXeogxFuwq86hEMA.webp?r=ce7 HTTP/1.1
Host: occ-0-6245-2186.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:10 GMT
Content-Type: image/webp
Content-Length: 21408
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "b5e981e8420fc8031374bb08999e3f13"
Last-Modified: Wed, 03 Jan 2024 18:30:11 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABVknrk7Upyc1OjL4Ghjm9mQW5I5lTjYhg6yolruBp4ptZ8lfbnE0Yti_s1LKnck9sOZZ7OVipb9rNLQHh5UkP3HzWAk_tnIM0ttZGEAdmG15si3mn6Iem7xv85xa4xpGcxqY.webp?r=e98

49.44.142.130

200 OK

19 kB

URL GET HTTP/1.1
occ-0-6245-2186.1.nflxso.net/dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABVknrk7Upyc1OjL4Ghjm9mQW5I5lTjYhg6yolruBp4ptZ8lfbnE0Yti_s1LKnck9sOZZ7OVipb9rNLQHh5UkP3HzWAk_tnIM0ttZGEAdmG15si3mn6Iem7xv85xa4xpGcxqY.webp?r=e98
IP
49.44.142.130:443
ASN
#55836 Reliance Jio Infocomm Limited

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint24:38:E9:E2:97:D0:50:D8:C9:63:62:4C:C7:B2:54:E3:3F:89:73:6A
ValiditySat, 13 Apr 2024 00:00:00 GMT - Wed, 15 May 2024 21:53:01 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 197x276, Scaling: [none]x[none], YUV color, decoders should clamp
Size
19 kB (19098 bytes)
Hash
ce89385d3f1ba98bd944359abfecef26
e0bdedfb014eabb9f01086593aabc5f3492e5c80
6aedd8acd30ef5738fc6e84655026b4847d5fe0404ead170db3f4827c3516d78

HTTP Headers

GET /dnm/api/v6/WNk1mr9x_Cd_2itp6pUM7-lXMJg/AAAABVknrk7Upyc1OjL4Ghjm9mQW5I5lTjYhg6yolruBp4ptZ8lfbnE0Yti_s1LKnck9sOZZ7OVipb9rNLQHh5UkP3HzWAk_tnIM0ttZGEAdmG15si3mn6Iem7xv85xa4xpGcxqY.webp?r=e98 HTTP/1.1
Host: occ-0-6245-2186.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:10 GMT
Content-Type: image/webp
Content-Length: 19098
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "ce89385d3f1ba98bd944359abfecef26"
Last-Modified: Tue, 16 Jan 2024 09:05:50 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

subhush.github.io/netflex-clone/img/netflix%20icon.svg

185.199.109.153

200 OK

1.3 kB

URL GET HTTP/2
subhush.github.io/netflex-clone/img/netflix%20icon.svg
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
1.3 kB (1337 bytes)
Hash
351cb4e2757b9a33b067f5c2848d670c
2ea69540c297ad643f729186492e4334d42411a6
81d4f0628d36659e2f9a88585c0a70f499b0286910ce9cd6d8aa00eadeaa093b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex-clone/img/netflix%20icon.svg HTTP/1.1
Host: subhush.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/netflex-clone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/svg+xml
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 28 Mar 2024 09:38:15 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"66053a87-13c1"
expires: Sun, 05 May 2024 13:52:10 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 8EBA:380C5D:431700E:4504615:66378CB0
accept-ranges: bytes
age: 0
date: Sun, 05 May 2024 13:42:10 GMT
via: 1.1 varnish
x-served-by: cache-hel1410029-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714916531.580538,VS0,VE138
vary: Accept-Encoding
x-fastly-request-id: bbd7f7c0b5a729da0105dc69650eca6b67746d0f
content-length: 1337
X-Firefox-Spdy: h2

webseriesnews.com/wp-content/uploads/2023/12/netflix.webp

0.0.0.0

0 B

URL GET
webseriesnews.com/wp-content/uploads/2023/12/netflix.webp
IP
0.0.0.0:0
ASN
#0

Requested by
https://subhush.github.io/netflex-clone/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /wp-content/uploads/2023/12/netflix.webp HTTP/1.1
Host: webseriesnews.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

assets.nflxext.com/ffe/siteui/vlv3/9d3533b2-0e2b-40b2-95e0-ecd7979cc88b/a3873901-5b7c-46eb-b9fa-12fea5197bd3/IN-en-20240311-popsignuptwoweeks-perspective_alpha_website_large.jpg

45.57.91.1

200 OK

308 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/vlv3/9d3533b2-0e2b-40b2-95e0-ecd7979cc88b/a3873901-5b7c-46eb-b9fa-12fea5197bd3/IN-en-20240311-popsignuptwoweeks-perspective_alpha_website_large.jpg
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://subhush.github.io/netflex-clone/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintB3:DD:59:59:62:94:75:B0:B2:30:D7:67:BA:F6:8E:D1:92:2C:16:31
ValidityMon, 29 Apr 2024 00:00:00 GMT - Sun, 02 Jun 2024 23:08:32 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
308 kB (307524 bytes)
Hash
bceb41a5e3d38079dc26538b3750ab73
9ef9a8f572e2b64e4952defd96d7673948c1fa7b
89e4578c8efca769d00632907c7930e82bacc9cfc11d48ec6a7e2291351ae217

HTTP Headers

GET /ffe/siteui/vlv3/9d3533b2-0e2b-40b2-95e0-ecd7979cc88b/a3873901-5b7c-46eb-b9fa-12fea5197bd3/IN-en-20240311-popsignuptwoweeks-perspective_alpha_website_large.jpg HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://subhush.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 13:42:09 GMT
Content-Type: image/jpeg
Content-Length: 307524
Connection: keep-alive
Accept-Ranges: bytes
Content-MD5: vOtBpePTgHncJlOLN1Crcw==
Last-Modified: Wed, 13 Mar 2024 13:45:36 GMT
Cache-Control: max-age=604801
Expires: Sun, 12 May 2024 13:42:10 GMT

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (1)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (20)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size