Report - rahma-abdelhamed.github.io/netflix/

Report Overview

Submitted URL
rahma-abdelhamed.github.io/netflix/
IP
185.199.108.153
ASN
#54113 FASTLY
Submitted
2024-04-20 06:02:54
Access
public
Website Title
Netflix
Final URL
rahma-abdelhamed.github.io/netflix/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
14
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-19	1.0 kB	171 kB	104.17.24.14
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-04-18	2.0 kB	80 kB	151.101.1.229
rahma-abdelhamed.github.io	unknown	2013-03-08	2023-03-11	2024-04-11	6.4 kB	1.2 MB	185.199.109.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	rahma-abdelhamed.github.io/netflix/	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js	72 kB	2023-03-07	2024-05-02
Pretty URL cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js IP 151.101.1.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:10 Last Seen2024-05-02 20:55:36 Times Seen3266 Hash fb8409a092adc6e8be17e87d59e0595e cf8d9821552d51bb50ce572e696aba1309065800 e3e5f35d586c0e6a9a9d7187687be087580c40a5f8d0e52f0c4053bbc25c98db Loading...

	cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js	21 kB	2023-03-07	2024-05-03
Pretty URL cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js IP 151.101.1.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:05 Last Seen2024-05-03 05:28:17 Times Seen6031 Hash 1022eaf388cc780bcfeb6456157adb7d 313789ca0e31b654784dbba8b0f83f364f8683b4 fe28dc38bc057f6eb11180235bbe458b3295a39b674d889075d3d9a0b5071d9f Loading...

	cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/js/bootstrap.min.js	62 kB	2023-03-07	2024-05-02
Pretty URL cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/js/bootstrap.min.js IP 151.101.1.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:18:06 Last Seen2024-05-02 11:48:06 Times Seen1300 Hash 99e3544139e4735274587a831002ebae 24a900bdfcefd52cbcff3bc36440af9b87cd5067 4b24eee82c2b7ce85ace76193e8a25570dabc6863b94a60a42fa9bb6a37ddc72 Loading...

HTTP Transactions (19)

URL IP Response Size

rahma-abdelhamed.github.io/netflix/

185.199.109.153

200 OK

3.0 kB

URL User Request GET HTTP/2
rahma-abdelhamed.github.io/netflix/
IP
185.199.109.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Size
3.0 kB (3021 bytes)
Hash
7d1eb5aca1bb9809425888d9697aa797
ae0e74347b18cf3bd11551e538abd3a573ce5930
122957767a32fb75cb92aa8b47547d8f77e4b8d46d368268402a1fa50c79b1c2

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /netflix/ HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Sat, 11 Mar 2023 18:17:20 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"640cc5b0-29f4"
expires: Sat, 20 Apr 2024 00:10:38 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 3BDE:29EF9F:625E2B4:6483B2A:662305A6
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713592947.092550,VS0,VE128
vary: Accept-Encoding
x-fastly-request-id: 65c2304b7a106ec555130b2705f7eb026c6c231e
content-length: 3021
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/css/all.min.css

104.17.24.14

200 OK

19 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/css/all.min.css
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
ASCII text, with very long lines (52276)
Size
19 kB (18765 bytes)
Hash
2fd961571c270c2d63b165a97488fe95
8922f78fc464d96eafb41f27916e97b9a12f5e37
ff8510712984ac3ccf08c022b8e8963d556c34ddacdd963f36c99735c8f42057

HTTP Headers

GET /ajax/libs/font-awesome/6.3.0/css/all.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rahma-abdelhamed.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 06:02:27 GMT
content-type: text/css; charset=utf-8
content-length: 18765
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "63e2af34-494d"
last-modified: Tue, 07 Feb 2023 20:06:12 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 1346093
expires: Thu, 10 Apr 2025 06:02:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kCSYhSI5NRsH%2F1aKx31fcM0lPoq%2B4yG6Qbo6ycmVmTArD3EppK9gaMKR%2FXPAyZlwjZ91FHxVuf632ejMYMRcMPbfy%2FntLsN93UJDDTRsYyFl7fCEHebOE55w8eB7v9Qmfgnvrqm2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8772ecf16bf5569b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js

151.101.1.229

200 OK

7.8 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (21060)
Size
7.8 kB (7831 bytes)
Hash
1022eaf388cc780bcfeb6456157adb7d
313789ca0e31b654784dbba8b0f83f364f8683b4
fe28dc38bc057f6eb11180235bbe458b3295a39b674d889075d3d9a0b5071d9f

HTTP Headers

GET /npm/popper.js@1.16.1/dist/umd/popper.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rahma-abdelhamed.github.io
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 1.16.1
x-jsd-version-type: version
etag: W/"52f1-MTeJyg4xtlR4TbuosPg/Nk+Gg7Q"
content-encoding: br
accept-ranges: bytes
date: Sat, 20 Apr 2024 06:02:27 GMT
age: 19423152
x-served-by: cache-fra-eddf8230124-FRA, cache-hel1410020-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 7831
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js

151.101.1.229

200 OK

26 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (65245)
Size
26 kB (26139 bytes)
Hash
fb8409a092adc6e8be17e87d59e0595e
cf8d9821552d51bb50ce572e696aba1309065800
e3e5f35d586c0e6a9a9d7187687be087580c40a5f8d0e52f0c4053bbc25c98db

HTTP Headers

GET /npm/jquery@3.5.1/dist/jquery.slim.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rahma-abdelhamed.github.io
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 3.5.1
x-jsd-version-type: version
etag: W/"11abc-z42YIVUtUbtQzlcuaWq6EwkGWAA"
content-encoding: br
accept-ranges: bytes
date: Sat, 20 Apr 2024 06:02:27 GMT
age: 8126084
x-served-by: cache-fra-eddf8230022-FRA, cache-hel1410020-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26139
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/css/bootstrap.min.css

151.101.1.229

200 OK

26 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/css/bootstrap.min.css
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
ASCII text, with very long lines (65326)
Size
26 kB (26391 bytes)
Hash
d44328cee87c2b405213893ba35eaf78
1fb83fc595cf28bf9362d87610eadfa3b7bbbe59
0c5ed985fdbddc027124d4e6879ce1a1860832cda85e2b517c18d8fbd2fffc06

HTTP Headers

GET /npm/bootstrap@4.6.1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rahma-abdelhamed.github.io
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 4.6.1
x-jsd-version-type: version
etag: W/"278e1-H7g/xZXPKL+TYth2EOrfo7e7vlk"
content-encoding: br
accept-ranges: bytes
date: Sat, 20 Apr 2024 06:02:27 GMT
age: 1230010
x-served-by: cache-fra-eddf8230108-FRA, cache-hel1410020-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 26391
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/js/bootstrap.min.js

151.101.1.229

200 OK

16 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/js/bootstrap.min.js
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (62161)
Size
16 kB (16536 bytes)
Hash
99e3544139e4735274587a831002ebae
24a900bdfcefd52cbcff3bc36440af9b87cd5067
4b24eee82c2b7ce85ace76193e8a25570dabc6863b94a60a42fa9bb6a37ddc72

HTTP Headers

GET /npm/bootstrap@4.6.1/dist/js/bootstrap.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rahma-abdelhamed.github.io
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 4.6.1
x-jsd-version-type: version
etag: W/"f3e8-JKkAvfzv1Sy8/zvDZECvm4fNUGc"
content-encoding: br
accept-ranges: bytes
date: Sat, 20 Apr 2024 06:02:27 GMT
age: 990975
x-served-by: cache-fra-eddf8230043-FRA, cache-hel1410020-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 16536
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/imges/Logonetflix%20(1).png

185.199.109.153

200 OK

32 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/imges/Logonetflix%20(1).png
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 2226 x 678, 8-bit/color RGBA, non-interlaced
Size
32 kB (32265 bytes)
Hash
31da8f75207be28aab51bb84b0d7848c
4855e77638ad1b7c440ae6c3f4d9cfcf3da9ef2e
94e277b7fd0aa31c86e646c079a8e27507efd39375d08eea8bd9d8ae6543ffca

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/imges/Logonetflix%20(1).png HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Sat, 11 Mar 2023 18:17:20 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "640cc5b0-7e09"
expires: Sat, 20 Apr 2024 06:12:27 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: D760:1B1E45:3FD788B:413C494:66235A73
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713592947.417725,VS0,VE126
vary: Accept-Encoding
x-fastly-request-id: 69452790712a9e3fe8cb06343540a24f834ade95
content-length: 32265
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/imges/mobile-0819%20(1).jpg

185.199.109.153

200 OK

50 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/imges/mobile-0819%20(1).jpg
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3
Size
50 kB (49614 bytes)
Hash
a48333d43c19612ed61987fa5dbff3c5
8a8781250b96fee7830eb63ee8dda19e5c871881
492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/imges/mobile-0819%20(1).jpg HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
last-modified: Sat, 11 Mar 2023 18:17:20 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "640cc5b0-c1ce"
expires: Sat, 20 Apr 2024 06:12:27 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: F634:1C3ED8:807230:835A68:66235A73
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713592947.418209,VS0,VE126
vary: Accept-Encoding
x-fastly-request-id: 0c1d7bc695b08b6aaf9b32fea15ce4ddc26ac301
content-length: 49614
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/style.css

185.199.109.153

200 OK

2.1 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/style.css
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ASCII text, with CRLF line terminators
Size
2.1 kB (2064 bytes)
Hash
11794f481af92f7eda52352ec7ae9677
1b8857bd5e50ed9b9451ee19feb9d94b67a7a0b3
a760ad9c5917d552d765b249e54c4d11a6dd30a7e4b200744221040ceb530f29

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/style.css HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Sat, 11 Mar 2023 18:17:20 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"640cc5b0-35ae"
expires: Sat, 20 Apr 2024 06:12:27 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 2FEC:1D4C19:4E9BBC:508F30:66235A73
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713592947.414135,VS0,VE136
vary: Accept-Encoding
x-fastly-request-id: d4b6e540ecc384328a79842683123d12cf0ecae4
content-length: 2064
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/mainjs

185.199.109.153

404 Not Found

5.3 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/mainjs
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.3 kB (5254 bytes)
Hash
c1f9838a645648cb3b25359f7890a288
0cf12d25140e329bcb4c304feefce63f8f0ba7b3
b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/mainjs HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64d39a40-24a3"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 85E2:156FBE:4FE9742:51B9D95:66235A73
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713592947.426880,VS0,VE134
vary: Accept-Encoding
x-fastly-request-id: 39387c757a8df1489ff74a0a0e08608506928093
content-length: 5254
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/imges/tv%20(1).png

185.199.109.153

200 OK

11 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/imges/tv%20(1).png
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Size
11 kB (11418 bytes)
Hash
77994a67327ba957dfd880e33a91f041
5ba507de8c9bc4a063beecb569e89bcf9e0a901c
b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/imges/tv%20(1).png HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Sat, 11 Mar 2023 18:17:20 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "640cc5b0-2c9a"
expires: Sat, 20 Apr 2024 06:12:27 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 27AC:2C8D98:8487C10:87632A2:66235A72
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713592947.418004,VS0,VE143
vary: Accept-Encoding
x-fastly-request-id: 1c2248d822d9ad98ed4843508703831cdef901cc
content-length: 11418
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/imges/IMG1.png

185.199.109.153

200 OK

263 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/imges/IMG1.png
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
263 kB (263266 bytes)
Hash
6effc28c582a9b64154f76608b82a977
0c3bf8e7fc2a50618bf78fa0cf6dac96052fa2fc
e4078b5b28c333b260a5b250e9a252b9394f106371a5abcf243c9a0fa3337b6d

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/imges/IMG1.png HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Sat, 11 Mar 2023 18:17:20 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "640cc5b0-40462"
expires: Sat, 20 Apr 2024 06:12:27 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 0B92:285FD6:561E60D:57F5923:66235A72
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713592947.418617,VS0,VE148
vary: Accept-Encoding
x-fastly-request-id: 8d3906dc7e0fd1754df6c133675732873c5b818b
content-length: 263266
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/imges/device-pile%20(1).png

185.199.109.153

200 OK

137 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/imges/device-pile%20(1).png
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
137 kB (137040 bytes)
Hash
0b3d821493d5748d829c852bbd6d292d
2b83523c3e0731a1aebace26ecbebf02a63a6b19
81cf64888a7b3f6848b09695b034026d9ad685665b91d54597ecbb6197c6acbb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/imges/device-pile%20(1).png HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Sat, 11 Mar 2023 18:17:20 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "640cc5b0-21750"
expires: Sat, 20 Apr 2024 06:12:27 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: D766:303CF7:1D6B3CD:1E10DA8:66235A70
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713592947.418491,VS0,VE151
vary: Accept-Encoding
x-fastly-request-id: 3411cf6dda746b6d357d620af89fa00022db7464
content-length: 137040
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/imges/images_video-tv-0819%20(1).m4v

185.199.109.153

206 Partial Content

270 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/imges/images_video-tv-0819%20(1).m4v
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ISO Media, Apple iTunes Video (.M4V) Video
Size
270 kB (270046 bytes)
Hash
3cb12db7c672b33735006480a455ec72
d060e5996b3f7143755496cf2a06de5a59c283ce
4c7a552d219146985961bf78d9083b7e2c1a82c4ada5d959f48b3e53754c9049

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/imges/images_video-tv-0819%20(1).m4v HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: GitHub.com
content-type: video/x-m4v
permissions-policy: interest-cohort=()
last-modified: Sat, 11 Mar 2023 18:17:20 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "640cc5b0-41ede"
expires: Sat, 20 Apr 2024 06:12:27 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: F01C:26872B:7E3D938:80FDFBD:66235A73
accept-ranges: bytes
age: 0
content-range: bytes 0-270045/270046
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713592948.503352,VS0,VE142
vary: Accept-Encoding
x-fastly-request-id: 640c965be71a84bb14f10259f88c97138f1b4c16
content-length: 270046
X-Firefox-Spdy: h2

cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/webfonts/fa-solid-900.woff2

104.17.24.14

200 OK

150 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/font-awesome/6.3.0/webfonts/fa-solid-900.woff2
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 149908, version 771.256
Size
150 kB (149908 bytes)
Hash
44f8148f80e6c3d60fa6425b0cbb862a
ec2f4e5f311462dce67b8f354e5bb9a68c12cf58
e2c5cf547e2e8d74a17d05c5ad9f1f593ca526452e228124294fa983b908ff82

HTTP Headers

GET /ajax/libs/font-awesome/6.3.0/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://rahma-abdelhamed.github.io
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 20 Apr 2024 06:02:27 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 149908
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "63e2af35-24994"
last-modified: Tue, 07 Feb 2023 20:06:13 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 395107
expires: Thu, 10 Apr 2025 06:02:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MkOPzaZ0UlCiChua1mcrX0E6BTT2XVZALVeucjR%2BgxSiSwe4geJIlAgNUB4znS0OofFO4jwODzZ6VUnulHhwvny3IzoQ7etMT3LpUW%2FV%2B7SE%2B4u695Ebtjw6CmT%2FJrfHvp%2FXwtd6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 8772ecf2ccfa569b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/imges/images_video-tv-0819%20(1).m4v

185.199.109.153

206 Partial Content

270 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/imges/images_video-tv-0819%20(1).m4v
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ISO Media, Apple iTunes Video (.M4V) Video
Size
270 kB (270046 bytes)
Hash
3cb12db7c672b33735006480a455ec72
d060e5996b3f7143755496cf2a06de5a59c283ce
4c7a552d219146985961bf78d9083b7e2c1a82c4ada5d959f48b3e53754c9049

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/imges/images_video-tv-0819%20(1).m4v HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: GitHub.com
content-type: video/x-m4v
permissions-policy: interest-cohort=()
last-modified: Sat, 11 Mar 2023 18:17:20 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "640cc5b0-41ede"
expires: Sat, 20 Apr 2024 06:12:27 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: F01C:26872B:7E3D938:80FDFBD:66235A73
accept-ranges: bytes
age: 0
content-range: bytes 0-270045/270046
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713592948.503792,VS0,VE142
vary: Accept-Encoding
x-fastly-request-id: 86ed53f1d22fba9fa1112b68ba29c7bce0c918fb
content-length: 270046
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/imges/IMG2.jpg

185.199.109.153

200 OK

123 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/imges/IMG2.jpg
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
123 kB (123424 bytes)
Hash
78f0f5fb562739d51a2c0a5f1665be24
7ae25884048d397bf4f1aad5512644c040aae6c2
5ed94a8cb44ac5521126846389874689962cc9ab24d6eb8fb5901c1f5ed181b5

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/imges/IMG2.jpg HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/style.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Sat, 11 Mar 2023 18:17:20 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "640cc5b0-1e220"
expires: Sat, 20 Apr 2024 06:12:27 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2FEC:1D4C19:4E9BE3:508F57:66235A73
accept-ranges: bytes
age: 0
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713592948.612457,VS0,VE129
vary: Accept-Encoding
x-fastly-request-id: e53611d6ddbb893da13ffc2e07011a0c0435487d
content-length: 123424
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/mainjs

185.199.109.153

404 Not Found

5.3 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/mainjs
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.3 kB (5254 bytes)
Hash
c1f9838a645648cb3b25359f7890a288
0cf12d25140e329bcb4c304feefce63f8f0ba7b3
b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/mainjs HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64d39a40-24a3"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 85E2:156FBE:4FE9742:51B9D95:66235A73
accept-ranges: bytes
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1713592948.744921,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 7f21060b8a3140d54529d914397e2ee63ebbbdfe
content-length: 5254
X-Firefox-Spdy: h2

rahma-abdelhamed.github.io/netflix/images/nficon2016.ico

185.199.109.153

404 Not Found

5.3 kB

URL GET HTTP/2
rahma-abdelhamed.github.io/netflix/images/nficon2016.ico
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://rahma-abdelhamed.github.io/netflix/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.3 kB (5254 bytes)
Hash
c1f9838a645648cb3b25359f7890a288
0cf12d25140e329bcb4c304feefce63f8f0ba7b3
b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflix/images/nficon2016.ico HTTP/1.1
Host: rahma-abdelhamed.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rahma-abdelhamed.github.io/netflix/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64d39a40-24a3"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: BE3E:260522:1BA7D4B:1C44B65:662358CF
accept-ranges: bytes
age: 419
date: Sat, 20 Apr 2024 06:02:27 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713592948.785797,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: b4dab6d4186e4dead430f026427cdb085cdb94e3
content-length: 5254
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (19)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate