Report - chikun2004.github.io/Netflix-Clone

Report Overview

Submitted URL
chikun2004.github.io/Netflix-Clone
IP
185.199.109.153
ASN
#54113 FASTLY
Submitted
2024-04-26 17:20:01
Access
public
Website Title
Netflix India – Watch TV Shows Online, Watch Movies Online
Final URL
chikun2004.github.io/Netflix-Clone/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
7
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
chikun2004.github.io	unknown	unknown	No data	No data	2.9 kB	327 kB	185.199.108.153
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	531 B	30 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	533 B	10 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	chikun2004.github.io/Netflix-Clone	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (8)

URL IP Response Size

chikun2004.github.io/Netflix-Clone

185.199.108.153

162 B

URL
chikun2004.github.io/Netflix-Clone
IP
185.199.108.153:0
ASN
#54113 FASTLY

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /Netflix-Clone HTTP/1.1
Host: chikun2004.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: GitHub.com
content-type: text/html
permissions-policy: interest-cohort=()
location: https://chikun2004.github.io/Netflix-Clone/
x-github-request-id: C0EC:0E7D:96EDD8:9A911F:662BDEF9
accept-ranges: bytes
date: Fri, 26 Apr 2024 17:19:35 GMT
via: 1.1 varnish
age: 806
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1714151976.660939,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 8e948a68024b5be9751b3352444ab75aa1153783
content-length: 162
X-Firefox-Spdy: h2

chikun2004.github.io/Netflix-Clone/

185.199.108.153

200 OK

632 B

URL User Request GET HTTP/2
chikun2004.github.io/Netflix-Clone/
IP
185.199.108.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
632 B (632 bytes)
Hash
95254d57a945f9226b5a9e231982a806
c1a0a5b06c1ab485bd5598970437cf3dc67c0e02
2e130f7d75a610adcabd41394e55b1a438685f7f93a974a778a3bef35e4df196

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix-Clone/ HTTP/1.1
Host: chikun2004.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Fri, 27 Oct 2023 13:41:13 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"653bbdf9-622"
expires: Fri, 26 Apr 2024 10:27:46 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 374E:25D6E7:7CE7A5:7FEB25:662B7F49
accept-ranges: bytes
date: Fri, 26 Apr 2024 17:19:35 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410030-HEL
x-cache: HIT
x-cache-hits: 86
x-timer: S1714151976.695872,VS0,VE122
vary: Accept-Encoding
x-fastly-request-id: e51f8768c9bb989839cc4b7310532e14fd95e146
content-length: 632
X-Firefox-Spdy: h2

chikun2004.github.io/Netflix-Clone/logoo3.png

185.199.108.153

17 kB

URL
chikun2004.github.io/Netflix-Clone/logoo3.png
IP
185.199.108.153:0
ASN
#54113 FASTLY

File type
PNG image data, 2560 x 1440, 8-bit colormap, non-interlaced
Size
17 kB (17322 bytes)
Hash
a1f673e7df715f16dae49f4874009082
ad7270ec9b46d561edba8d94686751b2b77ce426
218bc2b47bb718e6c65206f46f0c9791edcfdf5ccff6e6abcecb7637be7cf33b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix-Clone/logoo3.png HTTP/1.1
Host: chikun2004.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chikun2004.github.io/Netflix-Clone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Fri, 27 Oct 2023 13:41:13 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "653bbdf9-43aa"
expires: Fri, 26 Apr 2024 17:29:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 1F98:B3F19:15D8D2B:16557B3:662BE227
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 17:19:36 GMT
via: 1.1 varnish
x-served-by: cache-hel1410030-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714151976.040949,VS0,VE124
vary: Accept-Encoding
x-fastly-request-id: a58d49305240332cf0d43a06a25d8083257cb56e
content-length: 17322
X-Firefox-Spdy: h2

chikun2004.github.io/Netflix-Clone/style.css

185.199.108.153

818 B

URL
chikun2004.github.io/Netflix-Clone/style.css
IP
185.199.108.153:0
ASN
#54113 FASTLY

File type
ASCII text, with CRLF line terminators
Size
818 B (818 bytes)
Hash
ca2748d5c1f16049fee8a6d67940c63d
dc5fc86c3a00a51812d474084c9de6833b4590cd
2b2780cf1a0323c7180e29cc0a72b131ee7fec962753e15e8564fa08c01f0700

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix-Clone/style.css HTTP/1.1
Host: chikun2004.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chikun2004.github.io/Netflix-Clone/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Fri, 27 Oct 2023 13:41:13 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"653bbdf9-927"
expires: Fri, 26 Apr 2024 17:29:36 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 6A58:17D890:156F318:15EBCD6:662BE227
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 17:19:36 GMT
via: 1.1 varnish
x-served-by: cache-hel1410030-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714151976.038430,VS0,VE129
vary: Accept-Encoding
x-fastly-request-id: f330d551106e87678d95398f16af8bd21bf33455
content-length: 818
X-Firefox-Spdy: h2

chikun2004.github.io/Netflix-Clone/logo.png

185.199.108.153

1.9 kB

URL
chikun2004.github.io/Netflix-Clone/logo.png
IP
185.199.108.153:0
ASN
#54113 FASTLY

File type
PNG image data, 360 x 360, 4-bit colormap, non-interlaced
Size
1.9 kB (1852 bytes)
Hash
4a4e9f9d13733d741a61ab1928aa77b2
15259c34575a551292c88a930d2f7999b5cf948a
4b8b20e386fd0bf19778bc3524979c628f0d7375dd860d8bcb5a927471e2fdba

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix-Clone/logo.png HTTP/1.1
Host: chikun2004.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chikun2004.github.io/Netflix-Clone/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Fri, 27 Oct 2023 13:41:13 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "653bbdf9-73c"
expires: Fri, 26 Apr 2024 17:29:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 7510:17D890:156F336:15EBCF9:662BE227
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 17:19:36 GMT
via: 1.1 varnish
x-served-by: cache-hel1410030-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714151976.210678,VS0,VE132
vary: Accept-Encoding
x-fastly-request-id: da090d9a191abaccac88a0946abd65cd1d13fb75
content-length: 1852
X-Firefox-Spdy: h2

fonts.gstatic.com/s/ptserif/v18/EJRSQgYoZZY2vCFuvAnt66qSVys.woff2

216.58.207.227

30 kB

URL
fonts.gstatic.com/s/ptserif/v18/EJRSQgYoZZY2vCFuvAnt66qSVys.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 29588, version 1.0
Size
30 kB (29588 bytes)
Hash
cd87c62c9c9c1728e4ce6069e20b1104
0480db0094dec698acf12620a246bd9134766119
bf23a7a4eebedbb87d4084a69496b29815914a18e339a00f5dc73a03c9c9328f

HTTP Headers

GET /s/ptserif/v18/EJRSQgYoZZY2vCFuvAnt66qSVys.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://chikun2004.github.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:32:52 GMT
expires: Fri, 25 Apr 2025 02:32:52 GMT
cache-control: public, max-age=31536000
age: 139604
last-modified: Tue, 02 May 2023 15:28:35 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

chikun2004.github.io/Netflix-Clone/abc.jpg

185.199.108.153

302 kB

URL
chikun2004.github.io/Netflix-Clone/abc.jpg
IP
185.199.108.153:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
302 kB (301570 bytes)
Hash
eccdb232f3838cba2ebbcc84181d9ed4
9abf5538c1b7da825a77196b99f29c2d2a8fe9b6
672ffd23a28759667d0b1710cae12a36587dace86680c842457abb49a9a2b0b5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /Netflix-Clone/abc.jpg HTTP/1.1
Host: chikun2004.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chikun2004.github.io/Netflix-Clone/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Fri, 27 Oct 2023 13:41:13 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "653bbdf9-49a02"
expires: Fri, 26 Apr 2024 17:29:36 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 6A58:17D890:156F34F:15EBD0D:662BE228
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 17:19:36 GMT
via: 1.1 varnish
x-served-by: cache-hel1410030-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714151976.401026,VS0,VE155
vary: Accept-Encoding
x-fastly-request-id: ac5c43967d89687aa2762c2f154fa80da169ddeb
content-length: 301570
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Barriecito&family=PT+Serif:wght@400;700&family=Roboto:wght@300&family=Source+Code+Pro:wght@300&display=swap

142.250.74.106

9.6 kB

URL
fonts.googleapis.com/css2?family=Barriecito&family=PT+Serif:wght@400;700&family=Roboto:wght@300&family=Source+Code+Pro:wght@300&display=swap
IP
142.250.74.106:0
ASN
#15169 GOOGLE

File type
gzip compressed data, max compression
Size
9.6 kB (9563 bytes)
Hash
dd58e4e51598c4acc263def34fddf511
60d22c049a93a12b9751f9dfcd7c5b095b8a85d9
424710c2843a09dc83a863d3bfa87a7411f42564017a9a680f727f0a4fff5fca

HTTP Headers

GET /css2?family=Barriecito&family=PT+Serif:wght@400;700&family=Roboto:wght@300&family=Source+Code+Pro:wght@300&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://chikun2004.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 17:19:36 GMT
date: Fri, 26 Apr 2024 17:19:36 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size