Report - helix-feeder.world/_P5RKbX-FsAHtf-Vfz7CQB8RFCHFBqS1Ck6SQdnjgB29hDa

Report Overview

Visited public
2023-10-22 06:47:50
Tags
Submit Tags
URL
helix-feeder.world/_P5RKbX-FsAHtf-Vfz7CQB8RFCHFBqS1Ck6SQdnjgB29hDa_
Finishing URL
about:privatebrowsing
IP / ASN
104.21.15.69
#13335 CLOUDFLARENET
Title

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
helix-feeder.world	unknown	2023-06-30	2023-06-30 09:49:22	2023-08-28 11:54:29	525 B	301 kB	0.0.0.0
www.netflix.com	1625	1997-11-11	2012-05-21 04:28:01	2023-10-21 18:13:17	5.3 kB	307 kB	18.200.8.190
cdn.cookielaw.org	502	2011-06-20	2013-12-28 14:20:36	2023-10-21 22:53:52	931 B	11 kB	104.18.130.236
assets.nflxext.com	3871	2011-02-11	2015-07-22 06:02:07	2023-10-20 19:14:14	937 B	556 kB	45.57.90.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-10-22 06:47:32	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .world TLD
2023-10-22 06:47:32	medium	Client IP	Internal IP	ET INFO Observed DNS Query to .world TLD
2023-10-22 06:47:46	medium	Client IP	172.67.161.233	ET INFO HTTP Request to Suspicious *.world Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (10)

	URL	IP	Response	Size
	GET www.netflix.com/	18.200.8.190	302 Found	0 B
URL User Request GET HTTP/2 www.netflix.com/ IP 18.200.8.190:443 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subjectwww.netflix.com FingerprintE8:F3:65:88:B4:8D:64:7D:B7:D2:1E:F5:C4:33:F1:8F:F7:7F:B5:40 ValidityWed, 14 Dec 2022 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET / HTTP/1.1 Host: www.netflix.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 301 Moved Permanently Location: https://www.netflix.com/ Content-Length: 0 Via: 1.1 i-0b0476c3502455d54 (eu-west-1) Server: nq_website_nonmember-prod-release UNKNOWN X-Xss-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains X-Originating-URL: http://www.netflix.com/ Set-Cookie: nfvdid=BQFmAAEBEOseRNqjp49rHab8Yde2dqJAFclkz-oNr4VNoO9pJGc65fu2iVWT6Q55LmYDoGN4L3IKvmGnaB-_yxo1u5KtBBFb5rBHONHleBXO5G_WdR0ozQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000 X-Netflix.nfstatus: 1_21 X-Netflix.proxy.execution-time: 1

	www.netflix.com/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=nmLanding	54.73.148.110		0 B
URL www.netflix.com/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=nmLanding IP 54.73.148.110:0 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subjectwww.netflix.com FingerprintE8:F3:65:88:B4:8D:64:7D:B7:D2:1E:F5:C4:33:F1:8F:F7:7F:B5:40 ValidityWed, 14 Dec 2022 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=nmLanding HTTP/1.1 Host: www.netflix.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.netflix.com/no-en/ Cookie: nfvdid=BQFmAAEBEOseRNqjp49rHab8Yde2dqJAFclkz-oNr4VNoO9pJGc65fu2iVWT6Q55LmYDoGN4L3IKvmGnaB-_yxo1u5KtBBFb5rBHONHleBXO5G_WdR0ozQ%3D%3D; flwssn=3ed4d77f-2f31-4d91-8855-6578c318ccab; SecureNetflixId=v%3D2%26mac%3DAQEAEQABABS5Wns6EP4MvpW1nDSZpqWqL1qcFdwakx0.%26dt%3D1697957265467; NetflixId=v%3D2%26ct%3DBQAOAAEBEGjmi5knJ1IQ8GZZPCFr7iiBAFykYKXehLL9AFe2FQnPCvCQWou3d9XwSgJNWsjEx2jy1CrSGY4RuPd3kNcKS2eo23Ha_FjrCfe-MmiQeaBSkAUo1OcxdoheonNvU36O3cJkF-S8VhCrI9oHQA1uNZvGd_FzZonzLrPdvwl8cLJdq2aeot8b5PGOXnMHTuO3KG8pEOTepM9mjaKKzH_72BqQ0T0ITvJt3MgDTsSo69MkBbLb70Mz8Hcx07bJuDPxmpGn7fZij84nLNcIqun3CYfqnnA4X4ouhFMsesjILMgipX-S1DksD4lL8UnzyDRe78qgv2by10pvOoEW-hFTsYcgLrXVAuIT_OufDnCVGhWOOKw.%26bt%3Ddev%26mac%3DAQEAEAABABTfLYlqsuzVOkBItLjeRnjhnsABTametyw. Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK access-control-allow-origin: https://www.netflix.com/no-en/ access-control-allow-credentials: true access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id access-control-allow-methods: GET, POST, OPTIONS allow: GET, POST, OPTIONS cache-control: max-age=0 expires: Sat, 21 Oct 2023 06:47:46 GMT pragma: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: DENY date: Sun, 22 Oct 2023 06:47:45 GMT x-envoy-upstream-service-time: 1 x-b3-traceid: e625d03cfd3111b3 x-request-id: 5408ff5d-095c-4dcf-ac95-f4f31e9511a7 server: singleingestcritical-secure 17b9459b-e6c8-4f20-9835-24a039b706b1 x-envoy-decorator-operation: lo_svc_http content-length: 0 via: 2 i-0445fee67c250f416 (eu-west-1) strict-transport-security: max-age=31536000; includeSubDomains x-originating-url: http://www.netflix.com/personalization/cl2/freeform/WebsiteDetect?modalView=nmLanding&source=wwwhead&fetchType=css x-netflix.nfstatus: 1_1 x-netflix.proxy.execution-time: 9 X-Firefox-Spdy: h2

	cdn.cookielaw.org/scripttemplates/otSDKStub.js	104.18.130.236		6.8 kB
URL cdn.cookielaw.org/scripttemplates/otSDKStub.js IP 104.18.130.236:0 ASN #13335 CLOUDFLARENET File type ASCII text, with very long lines (21066) Size 6.8 kB (6821 bytes) Hash 2519ee5475b0712191098f22675b35f1 e39a5c056244c8d2af80c181842a5069554697b2 2fc7f40fe3b6fca4d842274e5c319024864535325c7484e201b7c53257209809 HTTP Headers `GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.netflix.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Sun, 22 Oct 2023 06:47:46 GMT content-type: application/javascript content-length: 6821 content-encoding: gzip content-md5: HAfQnQ1aKA6QX2rlLtw0Ew== last-modified: Thu, 19 Oct 2023 20:11:54 GMT etag: 0x8DBD0DFA36E1998 x-ms-request-id: fe2eddf8-e01e-0045-438e-03ec60000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * cache-control: max-age=86400 cf-cache-status: HIT age: 43091 accept-ranges: bytes vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 819fca72ae82b515-OSL X-Firefox-Spdy: h2

	www.netflix.com/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=nmLanding	54.73.148.110		0 B
URL www.netflix.com/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=nmLanding IP 54.73.148.110:0 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subjectwww.netflix.com FingerprintE8:F3:65:88:B4:8D:64:7D:B7:D2:1E:F5:C4:33:F1:8F:F7:7F:B5:40 ValidityWed, 14 Dec 2022 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=nmLanding HTTP/1.1 Host: www.netflix.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.netflix.com/no-en/ Cookie: nfvdid=BQFmAAEBEOseRNqjp49rHab8Yde2dqJAFclkz-oNr4VNoO9pJGc65fu2iVWT6Q55LmYDoGN4L3IKvmGnaB-_yxo1u5KtBBFb5rBHONHleBXO5G_WdR0ozQ%3D%3D; flwssn=3ed4d77f-2f31-4d91-8855-6578c318ccab; SecureNetflixId=v%3D2%26mac%3DAQEAEQABABS5Wns6EP4MvpW1nDSZpqWqL1qcFdwakx0.%26dt%3D1697957265467; NetflixId=v%3D2%26ct%3DBQAOAAEBEGjmi5knJ1IQ8GZZPCFr7iiBAFykYKXehLL9AFe2FQnPCvCQWou3d9XwSgJNWsjEx2jy1CrSGY4RuPd3kNcKS2eo23Ha_FjrCfe-MmiQeaBSkAUo1OcxdoheonNvU36O3cJkF-S8VhCrI9oHQA1uNZvGd_FzZonzLrPdvwl8cLJdq2aeot8b5PGOXnMHTuO3KG8pEOTepM9mjaKKzH_72BqQ0T0ITvJt3MgDTsSo69MkBbLb70Mz8Hcx07bJuDPxmpGn7fZij84nLNcIqun3CYfqnnA4X4ouhFMsesjILMgipX-S1DksD4lL8UnzyDRe78qgv2by10pvOoEW-hFTsYcgLrXVAuIT_OufDnCVGhWOOKw.%26bt%3Ddev%26mac%3DAQEAEAABABTfLYlqsuzVOkBItLjeRnjhnsABTametyw. Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK access-control-allow-origin: https://www.netflix.com/no-en/ access-control-allow-credentials: true access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id access-control-allow-methods: GET, POST, OPTIONS allow: GET, POST, OPTIONS cache-control: max-age=0 expires: Sat, 21 Oct 2023 06:47:46 GMT pragma: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: DENY date: Sun, 22 Oct 2023 06:47:45 GMT x-envoy-upstream-service-time: 0 x-b3-traceid: d3d1de5ad57c0de7 x-request-id: 5efaff9b-df47-42bd-9cb9-890ae7374cb5 server: singleingestcritical-secure 99d83e43-4c11-41a9-a33e-243bc71253ad x-envoy-decorator-operation: lo_svc_http content-length: 0 via: 2 i-0445fee67c250f416 (eu-west-1) strict-transport-security: max-age=31536000; includeSubDomains x-originating-url: http://www.netflix.com/personalization/cl2/freeform/WebsiteDetect?modalView=nmLanding&source=wwwhead&fetchType=js x-netflix.nfstatus: 1_1 x-netflix.proxy.execution-time: 9 X-Firefox-Spdy: h2

	www.netflix.com/personalization/cl2/freeform/WebsiteScreen?source=wwwhead&fetchType=js&winw=1280&winh=1024&screenw=1280&screenh=1024&ratio=1	54.73.148.110		0 B
URL www.netflix.com/personalization/cl2/freeform/WebsiteScreen?source=wwwhead&fetchType=js&winw=1280&winh=1024&screenw=1280&screenh=1024&ratio=1 IP 54.73.148.110:0 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subjectwww.netflix.com FingerprintE8:F3:65:88:B4:8D:64:7D:B7:D2:1E:F5:C4:33:F1:8F:F7:7F:B5:40 ValidityWed, 14 Dec 2022 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /personalization/cl2/freeform/WebsiteScreen?source=wwwhead&fetchType=js&winw=1280&winh=1024&screenw=1280&screenh=1024&ratio=1 HTTP/1.1 Host: www.netflix.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.netflix.com/no-en/ Cookie: nfvdid=BQFmAAEBEOseRNqjp49rHab8Yde2dqJAFclkz-oNr4VNoO9pJGc65fu2iVWT6Q55LmYDoGN4L3IKvmGnaB-_yxo1u5KtBBFb5rBHONHleBXO5G_WdR0ozQ%3D%3D; flwssn=3ed4d77f-2f31-4d91-8855-6578c318ccab; SecureNetflixId=v%3D2%26mac%3DAQEAEQABABS5Wns6EP4MvpW1nDSZpqWqL1qcFdwakx0.%26dt%3D1697957265467; NetflixId=v%3D2%26ct%3DBQAOAAEBEGjmi5knJ1IQ8GZZPCFr7iiBAFykYKXehLL9AFe2FQnPCvCQWou3d9XwSgJNWsjEx2jy1CrSGY4RuPd3kNcKS2eo23Ha_FjrCfe-MmiQeaBSkAUo1OcxdoheonNvU36O3cJkF-S8VhCrI9oHQA1uNZvGd_FzZonzLrPdvwl8cLJdq2aeot8b5PGOXnMHTuO3KG8pEOTepM9mjaKKzH_72BqQ0T0ITvJt3MgDTsSo69MkBbLb70Mz8Hcx07bJuDPxmpGn7fZij84nLNcIqun3CYfqnnA4X4ouhFMsesjILMgipX-S1DksD4lL8UnzyDRe78qgv2by10pvOoEW-hFTsYcgLrXVAuIT_OufDnCVGhWOOKw.%26bt%3Ddev%26mac%3DAQEAEAABABTfLYlqsuzVOkBItLjeRnjhnsABTametyw. Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK access-control-allow-origin: https://www.netflix.com/no-en/ access-control-allow-credentials: true access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id access-control-allow-methods: GET, POST, OPTIONS allow: GET, POST, OPTIONS cache-control: max-age=0 expires: Sat, 21 Oct 2023 06:47:46 GMT pragma: no-cache x-content-type-options: nosniff x-xss-protection: 1; mode=block x-frame-options: DENY date: Sun, 22 Oct 2023 06:47:45 GMT x-envoy-upstream-service-time: 1 x-b3-traceid: 61e7709af279556e x-request-id: a34abc3e-f419-40e4-91e4-9283482a057d server: singleingestcritical-secure b3bb8150-cbe9-4dd9-b7aa-87e95a1d6a40 x-envoy-decorator-operation: lo_svc_http content-length: 0 via: 2 i-0445fee67c250f416 (eu-west-1) strict-transport-security: max-age=31536000; includeSubDomains x-originating-url: http://www.netflix.com/personalization/cl2/freeform/WebsiteScreen?source=wwwhead&fetchType=js&winw=1280&screenh=1024&screenw=1280&winh=1024&ratio=1 x-netflix.nfstatus: 1_1 x-netflix.proxy.execution-time: 11 X-Firefox-Spdy: h2

	assets.nflxext.com/web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.21138ff63cba4becefdf.js	45.57.90.1		555 kB
URL assets.nflxext.com/web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.21138ff63cba4becefdf.js IP 45.57.90.1:0 ASN #40027 NETFLIX-ASN File type Unicode text, UTF-8 text, with very long lines (65534), with no line terminators Size 555 kB (554604 bytes) Hash cefe0b28e39e5b0a747f030ee1d39c8e 3f6f81c37d6c9aacebfc9bf26ea4b17360a18a32 ea98c43dd39da7790a68e8420effe1e340e307b611b3ff60bcf1e2f5e8928c42 HTTP Headers `GET /web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.21138ff63cba4becefdf.js HTTP/1.1 Host: assets.nflxext.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.netflix.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Sun, 22 Oct 2023 06:47:46 GMT Content-Type: application/javascript Content-Length: 554604 Connection: keep-alive Last-Modified: Thu, 19 Oct 2023 12:28:27 GMT Content-Encoding: gzip Cache-Control: max-age=604801 Expires: Sun, 29 Oct 2023 06:47:47 GMT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes`

	assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp-reskin.6a003302aa4c93b29722.css	45.57.90.1		523 B
URL assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp-reskin.6a003302aa4c93b29722.css IP 45.57.90.1:0 ASN #40027 NETFLIX-ASN File type ASCII text, with very long lines (523), with no line terminators Size 523 B (523 bytes) Hash 03451f9d13e8c7671cd1ce52b9529149 f8c482e7761a79edb7c270b1d8d9d7efde24bd44 bcf36fe4e5ddd746faff3173d643fb713f0056a92b4b5e24462865f989c0bac9 HTTP Headers `GET /web/ffe/wp/less/signup/nmhp/nmhp-reskin.6a003302aa4c93b29722.css HTTP/1.1 Host: assets.nflxext.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://www.netflix.com/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Date: Sun, 22 Oct 2023 06:47:46 GMT Content-Type: text/css Content-Length: 523 Connection: keep-alive Last-Modified: Thu, 27 Jul 2023 20:30:51 GMT Cache-Control: max-age=604801 Expires: Sun, 29 Oct 2023 06:47:47 GMT Timing-Allow-Origin: * Access-Control-Allow-Origin: * Accept-Ranges: bytes`

	cdn.cookielaw.org/consent/87b6a5c0-0104-4e96-a291-092c11350111/87b6a5c0-0104-4e96-a291-092c11350111.json	104.18.130.236		1.9 kB
URL cdn.cookielaw.org/consent/87b6a5c0-0104-4e96-a291-092c11350111/87b6a5c0-0104-4e96-a291-092c11350111.json IP 104.18.130.236:0 ASN #13335 CLOUDFLARENET File type JSON data\012- , ASCII text, with very long lines (5830), with no line terminators Size 1.9 kB (1893 bytes) Hash 676584f015f79d402f044c39452e7c41 673a760e6bf2334da4e96e23cd38d27cdbef5258 1a4065ead26a118363a9ee57fbbf14747fbb890cb8c02806ffdba6ca1e01e6ba HTTP Headers `GET /consent/87b6a5c0-0104-4e96-a291-092c11350111/87b6a5c0-0104-4e96-a291-092c11350111.json HTTP/1.1 Host: cdn.cookielaw.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: https://www.netflix.com DNT: 1 Connection: keep-alive Referer: https://www.netflix.com/ Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Sun, 22 Oct 2023 06:47:46 GMT content-type: application/x-javascript content-length: 1893 cf-ray: 819fca745bcc56b5-OSL cf-cache-status: HIT accept-ranges: bytes access-control-allow-origin: * age: 5400 cache-control: public, max-age=86400 content-encoding: gzip etag: 0x8DBA414404B8522 expires: Mon, 23 Oct 2023 06:47:46 GMT last-modified: Wed, 23 Aug 2023 20:05:08 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Accept-Encoding access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding content-md5: LNTJSBxq/pu406OeBM98cA== x-content-type-options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: f2adfa73-901e-003d-0bfd-d54f98000000 x-ms-version: 2009-09-19 server: cloudflare X-Firefox-Spdy: h2

	GET helix-feeder.world/_P5RKbX-FsAHtf-Vfz7CQB8RFCHFBqS1Ck6SQdnjgB29hDa_	0.0.0.0		301 kB
URL User Request GET helix-feeder.world/_P5RKbX-FsAHtf-Vfz7CQB8RFCHFBqS1Ck6SQdnjgB29hDa_ IP 0.0.0.0:0 ASN #0 Certificate IssuerGoogle Trust Services LLC Subjecthelix-feeder.world FingerprintF7:6E:9F:DF:BE:2E:37:7E:6E:C7:18:34:0D:80:05:75:63:A1:01:06 ValidityMon, 28 Aug 2023 06:51:59 GMT - Sun, 26 Nov 2023 06:51:58 GMT File type Size 301 kB (300739 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /_P5RKbX-FsAHtf-Vfz7CQB8RFCHFBqS1Ck6SQdnjgB29hDa_ HTTP/1.1 Host: helix-feeder.world User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 302 Found date: Sun, 22 Oct 2023 06:47:45 GMT content-type: text/html; charset=UTF-8 location: http://www.netflix.com/ x-powered-by: PHP/5.4.16 cf-cache-status: DYNAMIC report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=idHpSz3gbBWaSt0AtPajOW555%2BPDmTnUT7KC6CYgi04jZWg9L41JqGdy9LXqqkFPdK7V%2FXgUR0E%2BB9Z4Fs2et5LGwjPSR0sxbe4s1vE2%2B1J7LWSSTv5vei5PFWCV2sGdxhujY6Q%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server: cloudflare cf-ray: 819fca1ad88f5688-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	GET www.netflix.com/no-en/	54.73.148.110	200 OK	301 kB
URL User Request GET HTTP/2 www.netflix.com/no-en/ IP 54.73.148.110:443 ASN #16509 AMAZON-02 Certificate IssuerDigiCert Inc Subjectwww.netflix.com FingerprintE8:F3:65:88:B4:8D:64:7D:B7:D2:1E:F5:C4:33:F1:8F:F7:7F:B5:40 ValidityWed, 14 Dec 2022 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT File type Size 301 kB (300739 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /no-en/ HTTP/1.1 Host: www.netflix.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: nfvdid=BQFmAAEBEOseRNqjp49rHab8Yde2dqJAFclkz-oNr4VNoO9pJGc65fu2iVWT6Q55LmYDoGN4L3IKvmGnaB-_yxo1u5KtBBFb5rBHONHleBXO5G_WdR0ozQ%3D%3D; flwssn=3ed4d77f-2f31-4d91-8855-6578c318ccab; NetflixId=v%3D2%26ct%3DBQAOAAEBEGjmi5knJ1IQ8GZZPCFr7iiBAFykYKXehLL9AFe2FQnPCvCQWou3d9XwSgJNWsjEx2jy1CrSGY4RuPd3kNcKS2eo23Ha_FjrCfe-MmiQeaBSkAUo1OcxdoheonNvU36O3cJkF-S8VhCrI9oHQA1uNZvGd_FzZonzLrPdvwl8cLJdq2aeot8b5PGOXnMHTuO3KG8pEOTepM9mjaKKzH_72BqQ0T0ITvJt3MgDTsSo69MkBbLb70Mz8Hcx07bJuDPxmpGn7fZij84nLNcIqun3CYfqnnA4X4ouhFMsesjILMgipX-S1DksD4lL8UnzyDRe78qgv2by10pvOoEW-hFTsYcgLrXVAuIT_OufDnCVGhWOOKw.%26bt%3Ddev%26mac%3DAQEAEAABABTfLYlqsuzVOkBItLjeRnjhnsABTametyw. Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK server: nq_website_nonmember-prod-release ddc72af0-13e0-4a73-aa93-37e3d82f6e0f x-frame-options: DENY accept-ch: Sec-CH-UA-Platform-Version,Sec-CH-UA-Model set-cookie: flwssn=3ed4d77f-2f31-4d91-8855-6578c318ccab; Max-Age=10800; Domain=.netflix.com; Path=/ content-type: text/html; charset=utf-8 cache-control: no-cache, no-store, must-revalidate pragma: no-cache expires: 0 x-robots-tag: index date: Sun, 22 Oct 2023 06:47:45 GMT x-envoy-upstream-service-time: 160 x-b3-traceid: 6709bc4e73606df1 x-request-id: 95b807c8-5578-4b6e-847b-2ded092dfedd x-envoy-decorator-operation: lo_svc via: 2 i-0445fee67c250f416 (eu-west-1) x-xss-protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains x-originating-url: http://www.netflix.com/no-en/ x-netflix.nfstatus: 1_1 x-netflix.proxy.execution-time: 163 x-netflix.zuul.netty.content.compressor.target: gzip content-encoding: gzip X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (10)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size