Report - ry2002.github.io/Netflix/

Report Overview

Submitted URL
ry2002.github.io/Netflix/
IP
185.199.109.153
ASN
#54113 FASTLY
Submitted
2024-04-27 05:23:05
Access
public
Website Title
Netflix
Final URL
ry2002.github.io/Netflix/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
12
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ry2002.github.io	unknown	2013-03-08	2023-10-12	2023-12-23	5.2 kB	811 kB	185.199.108.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	ry2002.github.io/Netflix/	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (11)

URL IP Response Size

ry2002.github.io/Netflix/

185.199.108.153

200 OK

1.5 kB

URL User Request GET HTTP/2
ry2002.github.io/Netflix/
IP
185.199.108.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
1.5 kB (1473 bytes)
Hash
998c2d54ed3ec231c1000a61f0b85d79
a17d42a4af0c678d9a34158408890adaee4a52ab
ce5b4b3ad91a8afd035be466612f2215834b77d62b12bf7c2d3aec87858f1ad7

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /Netflix/ HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Thu, 12 Oct 2023 06:46:36 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"6527964c-1356"
expires: Sat, 27 Apr 2024 00:12:10 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 0FA6:0E96:E6B31E:ECB91E:662C4079
accept-ranges: bytes
age: 472
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714195358.016648,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: b336ae62717eb3460932aab171a1d11c8d008cf9
content-length: 1473
X-Firefox-Spdy: h2

ry2002.github.io/Netflix/style.css

185.199.108.153

200 OK

1.6 kB

URL GET HTTP/2
ry2002.github.io/Netflix/style.css
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://ry2002.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
1.6 kB (1565 bytes)
Hash
0433bb7f99e362ef4ed12f9541aed23c
01ebdbf6f324f8c6366db78744e69d5943b88731
264c8102b2818464a8d1fdacda7593a1bd30ee339e764fc252911b84a543408d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/style.css HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ry2002.github.io/Netflix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Thu, 12 Oct 2023 06:46:36 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"6527964c-1855"
expires: Sat, 27 Apr 2024 05:32:38 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 9D04:1017EE:49004F:4BBCEA:662C8B9E
accept-ranges: bytes
age: 0
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714195358.202570,VS0,VE118
vary: Accept-Encoding
x-fastly-request-id: 22bf75c79893a21550508c29b3d1fbeb790780fe
content-length: 1565
X-Firefox-Spdy: h2

ry2002.github.io/Netflix/mobile.jpg

185.199.108.153

200 OK

50 kB

URL GET HTTP/2
ry2002.github.io/Netflix/mobile.jpg
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://ry2002.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3
Size
50 kB (49614 bytes)
Hash
a48333d43c19612ed61987fa5dbff3c5
8a8781250b96fee7830eb63ee8dda19e5c871881
492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/mobile.jpg HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ry2002.github.io/Netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Thu, 12 Oct 2023 06:46:36 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6527964c-c1ce"
expires: Sat, 27 Apr 2024 05:32:38 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 5C54:1017EE:49004F:4BBCEB:662C8B9E
accept-ranges: bytes
age: 0
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714195358.209325,VS0,VE112
vary: Accept-Encoding
x-fastly-request-id: 4ce850dc0e41cadabe3d41e9d8364fdc06d7ada9
content-length: 49614
X-Firefox-Spdy: h2

ry2002.github.io/Netflix/netflix.png

185.199.108.153

200 OK

9.0 kB

URL GET HTTP/2
ry2002.github.io/Netflix/netflix.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://ry2002.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
9.0 kB (9045 bytes)
Hash
f3cdee345ac6db41559f848fc9a28ed8
ee5c1297c2d0299fbfa840eebaa55402934260d9
df8d41d099c12c5d7765b23464e8083a1cb9f7c2d47563a9ec67ead3969a991b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/netflix.png HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ry2002.github.io/Netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 12 Oct 2023 06:46:36 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6527964c-2355"
expires: Sat, 27 Apr 2024 05:32:38 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: B878:0DBA:170FEED:17AAD01:662C8B9D
accept-ranges: bytes
age: 0
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714195358.207444,VS0,VE134
vary: Accept-Encoding
x-fastly-request-id: beb3fe257121da006687420580ca19963f691c2a
content-length: 9045
X-Firefox-Spdy: h2

ry2002.github.io/Netflix/2image.png

185.199.108.153

200 OK

11 kB

URL GET HTTP/2
ry2002.github.io/Netflix/2image.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://ry2002.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Size
11 kB (11418 bytes)
Hash
77994a67327ba957dfd880e33a91f041
5ba507de8c9bc4a063beecb569e89bcf9e0a901c
b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/2image.png HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ry2002.github.io/Netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Thu, 12 Oct 2023 06:46:36 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6527964c-2c9a"
expires: Sat, 27 Apr 2024 05:32:38 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 11C6:0E96:1035F79:10ACB47:662C8B9D
accept-ranges: bytes
age: 0
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714195358.208356,VS0,VE141
vary: Accept-Encoding
x-fastly-request-id: 78f2234c73be3bddb33d60f20247d3b92748b79a
content-length: 11418
X-Firefox-Spdy: h2

ry2002.github.io/Netflix/child%202.png

185.199.108.153

200 OK

269 kB

URL GET HTTP/2
ry2002.github.io/Netflix/child%202.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://ry2002.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
269 kB (269111 bytes)
Hash
3da9bb52f0be925ec4f2d172af4ffe11
837d1a9be73f6568b1e09c6fea90d0b04d7c3040
50803a486b17eb4696683745a65ccbaa85392cb97c4f773ddee4dda8d694a42e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/child%202.png HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ry2002.github.io/Netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Thu, 12 Oct 2023 06:46:36 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6527964c-41b37"
expires: Sat, 27 Apr 2024 05:32:38 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2BC2:0E9A:14E7BD1:157A0FE:662C8B9D
accept-ranges: bytes
age: 0
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714195358.212654,VS0,VE147
vary: Accept-Encoding
x-fastly-request-id: c28de8e1b13545654570c3197539503e23f1690c
content-length: 269111
X-Firefox-Spdy: h2

ry2002.github.io/Netflix/last.png

185.199.108.153

200 OK

152 kB

URL GET HTTP/2
ry2002.github.io/Netflix/last.png
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://ry2002.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
152 kB (151687 bytes)
Hash
186a706493dd515e30f8ad682d068578
2d09cad7878e23f97cbac2784a58056c61e80f0d
4a3bfdf68de04166878c6bfa4c5b0f57a100cad45ab80939433e8f7aeef4b7a4

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/last.png HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ry2002.github.io/Netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Thu, 12 Oct 2023 06:46:36 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6527964c-25087"
expires: Sat, 27 Apr 2024 05:32:38 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: C894:18F3B:1BE02DD:1C8F607:662C8B9E
accept-ranges: bytes
age: 0
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714195358.210241,VS0,VE204
vary: Accept-Encoding
x-fastly-request-id: c34fe4139b1b6a4ecd9aebf0dc9c183c5e50a932
content-length: 151687
X-Firefox-Spdy: h2

ry2002.github.io/Netflix/netflix52.jpg

185.199.108.153

200 OK

194 kB

URL GET HTTP/2
ry2002.github.io/Netflix/netflix52.jpg
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://ry2002.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
194 kB (193638 bytes)
Hash
e0f5861fad2c718f52743939553881d0
a55530e67f37f32ac1a8ebb75c5beca69a8f5322
e4afc5537b566d724a9c8ebb03d22f62750ea9e88213206f700c7b5b712d38dc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/netflix52.jpg HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ry2002.github.io/Netflix/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Thu, 12 Oct 2023 06:46:36 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6527964c-2f466"
expires: Sat, 27 Apr 2024 05:32:38 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 11C6:0E96:1035F86:10ACB55:662C8B9E
accept-ranges: bytes
age: 0
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714195358.364504,VS0,VE191
vary: Accept-Encoding
x-fastly-request-id: 3f280a1b2c16ab382c9a1b92d214f0e3a677975d
content-length: 193638
X-Firefox-Spdy: h2

ry2002.github.io/Netflix/Hans_Zimmer_(Netflix_Theme)(720p).mp4

185.199.108.153

206 Partial Content

17 kB

URL GET HTTP/2
ry2002.github.io/Netflix/Hans_Zimmer_(Netflix_Theme)(720p).mp4
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://ry2002.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
data
Size
17 kB (17176 bytes)
Hash
8adaf0e3d51c70811057e7b4f475066c
4143ad34e92746858273618b4337a48802bc062c
e5aa8d23873af3074025427f2b6c4928a9a7824fbbb9e8764dabd929e57a9750

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/Hans_Zimmer_(Netflix_Theme)(720p).mp4 HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=3178496-
DNT: 1
Connection: keep-alive
Referer: https://ry2002.github.io/Netflix/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: GitHub.com
content-type: video/mp4
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Thu, 12 Oct 2023 06:46:36 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6527964c-30c318"
expires: Sat, 27 Apr 2024 05:32:38 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: B86C:18F3B:1BE02E0:1C8F60E:662C8B9D
accept-ranges: bytes
age: 0
content-range: bytes 3178496-3195671/3195672
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714195359.589007,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 7aef6305574e5901e32615db9e35ad3f71d5640c
content-length: 17176
X-Firefox-Spdy: h2

ry2002.github.io/Netflix/STRANGER_THINGS_Season_5_-_First_Look_Trailer___Netflix__2024_(480p).mp4

185.199.108.153

206 Partial Content

93 kB

URL GET HTTP/2
ry2002.github.io/Netflix/STRANGER_THINGS_Season_5_-_First_Look_Trailer___Netflix__2024_(480p).mp4
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://ry2002.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
data
Size
93 kB (93387 bytes)
Hash
9a3b2e676f4d1ccf53ba707d8f7cf04d
dd926b7ed882f135befdac075a7bf18377f1a0c2
e9d5f6acfe56d2f2215a64cb8bda555d0910929d12c3fe44da9b4f77fa39d323

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix/STRANGER_THINGS_Season_5_-_First_Look_Trailer___Netflix__2024_(480p).mp4 HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=7045120-
DNT: 1
Connection: keep-alive
Referer: https://ry2002.github.io/Netflix/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: GitHub.com
content-type: video/mp4
permissions-policy: interest-cohort=()
last-modified: Thu, 12 Oct 2023 06:46:36 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6527964c-6ceccb"
expires: Sat, 27 Apr 2024 05:32:38 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 60DA:17E625:1C8736C:1D35E5D:662C8B9E
accept-ranges: bytes
age: 0
content-range: bytes 7045120-7138506/7138507
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714195359.736491,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: be4d2dfceef556bf1879459d4372730e46781cbc
content-length: 93387
X-Firefox-Spdy: h2

ry2002.github.io/favicon.ico

185.199.108.153

404 Not Found

5.1 kB

URL GET HTTP/2
ry2002.github.io/favicon.ico
IP
185.199.108.153:443
ASN
#54113 FASTLY

Requested by
https://ry2002.github.io/Netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.1 kB (5142 bytes)
Hash
1eb970ce5a18bec7165f016df8238566
9efd1514af80fe14db4ed28e9bc53975b9ee089c
70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ry2002.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ry2002.github.io/Netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
etag: W/"662c2f27-239b"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-github-request-id: 9D14:9F178:1BD4259:1C83791:662C8B9E
accept-ranges: bytes
age: 0
date: Sat, 27 Apr 2024 05:22:38 GMT
via: 1.1 varnish
x-served-by: cache-hel1410026-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714195359.772606,VS0,VE125
vary: Accept-Encoding
x-fastly-request-id: f838316183d8d09383be8c68295a83231c8210b7
content-length: 5142
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (11)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by