Report - www.netflix.com/:zobik@hiltonvr.com:123456

Report Overview

Visited public
2023-09-16 17:33:32
Tags
URL
www.netflix.com/:zobik@hiltonvr.com:123456
Finishing URL
www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
IP / ASN
18.200.8.190
#16509 AMAZON-02
Title
Netflix

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
assets.nflxext.com	3871	2011-02-11	2015-07-22 06:02:07	2023-09-15 23:12:46	7.1 kB	1.9 MB	45.57.91.1
www.netflix.com	1625	1997-11-11	2012-05-21 04:28:01	2023-09-15 10:02:41	1.8 kB	34 kB	54.155.246.232

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-09-16	medium	hiltonvr.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456	ScriptElement	66 B	2023-03-07	2025-06-11
Pretty URL www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456 IP 54.155.246.232 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-06-11 12:17 Times Seen208 Hash 4abc64a802920a119c8f83c365c29d2b 8635509457d014184437306b4c3cd02e8998f535 e90e0f55b55b9acb2af9d0ebdfbd3223b27fa73e39f2a81513df914b556a5871 Loading...

	www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456	ScriptElement	10 kB	2024-08-21	2024-08-21
Pretty URL www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456 IP 54.155.246.232 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-21 06:41 Last Seen2024-08-21 06:41 Times Seen1 Hash 2ae5edf1c7e16f5442fe9d440716942b 13ca29ba7ede401ed11a074a20aa848374d489a2 478224d518e5cdbe38af43b6c16558342db24da8793aa679ec64f64cd9949c12 Loading...

	www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456	ScriptElement	371 B	2023-03-07	2025-06-11
Pretty URL www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456 IP 54.155.246.232 ASN #16509 AMAZON-02 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03 Last Seen2025-06-11 12:17 Times Seen208 Hash 6ff41c409959148570e728b6be6ec3a5 136ac0bf11c4c664707c4f230a7af4f40faa0346 b540a71ee97da488e71c9ea903420170793f3b43914e41e512714e20d9806169 Loading...

HTTP Transactions (16)

URL IP Response Size

assets.nflxext.com/web/ffe/wp/less/core/not-found.b1d1f69ee775faf52d43.css

45.57.91.1

200 OK

2.6 kB

URL GET HTTP/1.1
assets.nflxext.com/web/ffe/wp/less/core/not-found.b1d1f69ee775faf52d43.css
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint0E:FF:C4:11:E5:2C:A4:84:B9:B9:32:96:2B:4A:28:CA:87:C1:7C:DD
ValidityTue, 05 Sep 2023 00:00:00 GMT - Mon, 09 Oct 2023 22:09:11 GMT

File type
ASCII text, with very long lines (11197), with no line terminators
Size
2.6 kB (2611 bytes)
Hash
6ee517a486c980cc3b433016b5fc4bf6
fd14ccca3abd5b5b9f35b7cf10e723d7c3a9da1a
654e5595b88dcc6d0c927c6ad6e2e03d74645930e598eed782152b13746a5576

HTTP Headers

GET /web/ffe/wp/less/core/not-found.b1d1f69ee775faf52d43.css HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.netflix.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: text/css
Content-Length: 2611
Connection: keep-alive
Last-Modified: Tue, 15 Nov 2022 21:20:44 GMT
Content-Encoding: gzip
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/web/ffe/wp/less/core/error-page.b122c37502204303115a.css

45.57.91.1

200 OK

2.5 kB

URL GET HTTP/1.1
assets.nflxext.com/web/ffe/wp/less/core/error-page.b122c37502204303115a.css
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint33:D7:24:93:DC:B5:12:00:BE:D6:EF:74:F3:49:41:D0:AE:65:12:24
ValidityFri, 01 Sep 2023 00:00:00 GMT - Thu, 05 Oct 2023 22:51:13 GMT

File type
ASCII text, with very long lines (9816), with no line terminators
Size
2.5 kB (2524 bytes)
Hash
3a3a1ae922b50ecc635259fcfc708f91
cfcd6c03e346f89c8ed42fd1a39d68d620ca49d7
910fb84da8dac07dc71624e7123c3617727aac2637fcb5421c0b772b4d97f42f

HTTP Headers

GET /web/ffe/wp/less/core/error-page.b122c37502204303115a.css HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.netflix.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: text/css
Content-Length: 2524
Connection: keep-alive
Last-Modified: Wed, 25 Jan 2023 19:05:46 GMT
Content-Encoding: gzip
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/en_us/home/logo_v7.png

45.57.91.1

200 OK

2.7 kB

URL GET HTTP/1.1
assets.nflxext.com/en_us/home/logo_v7.png
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint0E:FF:C4:11:E5:2C:A4:84:B9:B9:32:96:2B:4A:28:CA:87:C1:7C:DD
ValidityTue, 05 Sep 2023 00:00:00 GMT - Mon, 09 Oct 2023 22:09:11 GMT

File type
PNG image data, 142 x 40, 8-bit/color RGBA, non-interlaced\012- data
Size
2.7 kB (2680 bytes)
Hash
fde4ca14565aac63c6e093e32f00be94
73547b4a10004775eb1d627ff66fd651c7e9b2d6
465c0102fffa3d9264f587b9ec899fd3781d67957765c89db54c42b928c7f2f0

HTTP Headers

GET /en_us/home/logo_v7.png HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/web/ffe/wp/less/core/not-found.b1d1f69ee775faf52d43.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: image/png
Content-Length: 2680
Connection: keep-alive
Content-MD5: /eTKFFZarGPG4JPjLwC+lA==
ETag: "fde4ca14565aac63c6e093e32f00be94:1659569022.536479"
Last-Modified: Wed, 03 Aug 2022 22:20:25 GMT
Cache-Control: max-age=14401
Expires: Sat, 16 Sep 2023 21:33:13 GMT
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/pages/errors/bg-lost-in-space.png

45.57.91.1

200 OK

1.5 MB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/pages/errors/bg-lost-in-space.png
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint33:D7:24:93:DC:B5:12:00:BE:D6:EF:74:F3:49:41:D0:AE:65:12:24
ValidityFri, 01 Sep 2023 00:00:00 GMT - Thu, 05 Oct 2023 22:51:13 GMT

File type
PNG image data, 1260 x 682, 8-bit/color RGBA, non-interlaced\012- data
Size
1.5 MB (1462646 bytes)
Hash
dc18e037894b9f8cb3575fa9bf482613
2f14fcfe327c8d50b174e4382725c38bf154e425
b94ac2db51e184ed7f26d74aeb02d96456823d8491e93d66e4fbcc1ffacd0382

HTTP Headers

GET /ffe/siteui/pages/errors/bg-lost-in-space.png HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/web/ffe/wp/less/core/not-found.b1d1f69ee775faf52d43.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: image/png
Content-Length: 1462646
Connection: keep-alive
Content-MD5: 3BjgN4lLn4yzV1+pv0gmEw==
Last-Modified: Wed, 06 Nov 2019 21:02:09 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Th.woff2

45.57.91.1

200 OK

52 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Th.woff2
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintE7:60:3A:07:AC:8B:B1:3A:E4:88:1A:05:A0:D1:60:1B:9B:0D:E4:53
ValidityFri, 08 Sep 2023 00:00:00 GMT - Sat, 14 Oct 2023 23:59:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 51572, version 2.6554\012- data
Size
52 kB (51572 bytes)
Hash
5686fb8208753b302350262c49893f7e
3f8e8a12efc8df13c2cd2a955c0df9f649fbf5d7
a118bedea5b15926f5d2b053b09b337485accd063dd8ae030d52214270566761

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Th.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.netflix.com
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: font/woff2
Content-Length: 51572
Connection: keep-alive
Content-MD5: Vob7ggh1OzAjUCYsSYk/fg==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2

45.57.91.1

200 OK

53 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint33:D7:24:93:DC:B5:12:00:BE:D6:EF:74:F3:49:41:D0:AE:65:12:24
ValidityFri, 01 Sep 2023 00:00:00 GMT - Thu, 05 Oct 2023 22:51:13 GMT

File type
Web Open Font Format (Version 2), TrueType, length 53304, version 2.6554\012- data
Size
53 kB (53304 bytes)
Hash
0bf3177f1fed6d953178221fba43c7e8
83d9f039f1ba7209321c7da72d3dc6a9aa5e2ab3
c0bceb927c506dce9f6e6f5f570e641ad580b9554be06f61508a4aee32380167

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.netflix.com
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: font/woff2
Content-Length: 53304
Connection: keep-alive
Content-MD5: C/MXfx/tbZUxeCIfukPH6A==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Md.woff2

45.57.91.1

200 OK

54 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Md.woff2
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintE7:60:3A:07:AC:8B:B1:3A:E4:88:1A:05:A0:D1:60:1B:9B:0D:E4:53
ValidityFri, 08 Sep 2023 00:00:00 GMT - Sat, 14 Oct 2023 23:59:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 53940, version 2.6554\012- data
Size
54 kB (53940 bytes)
Hash
ea769921b0cfa4fc6d4d1a2e0b1fa5ff
34dcd2875c9752ebba6f894eb8d410e4958cc1b4
9ac2bd03fcde501b3f30f47ab1fae62161f87808ea6411f38e8feaa4bbddc42e

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Md.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.netflix.com
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: font/woff2
Content-Length: 53940
Connection: keep-alive
Content-MD5: 6naZIbDPpPxtTRouCx+l/w==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Lt.woff2

45.57.91.1

200 OK

53 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Lt.woff2
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintE7:60:3A:07:AC:8B:B1:3A:E4:88:1A:05:A0:D1:60:1B:9B:0D:E4:53
ValidityFri, 08 Sep 2023 00:00:00 GMT - Sat, 14 Oct 2023 23:59:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 53368, version 2.6554\012- data
Size
53 kB (53368 bytes)
Hash
2ed3e95706ca06c7e3d04baf76c4ba7c
3b8197c021670136cb977317bde917edaefaea5d
f661862ea361cc80f099cb993b07e2a3440877eb03464144da92e821468c693d

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Lt.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.netflix.com
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: font/woff2
Content-Length: 53368
Connection: keep-alive
Content-MD5: LtPpVwbKBsfj0EuvdsS6fA==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Th.woff2

45.57.91.1

200 OK

52 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Th.woff2
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintE7:60:3A:07:AC:8B:B1:3A:E4:88:1A:05:A0:D1:60:1B:9B:0D:E4:53
ValidityFri, 08 Sep 2023 00:00:00 GMT - Sat, 14 Oct 2023 23:59:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 51572, version 2.6554\012- data
Size
52 kB (51572 bytes)
Hash
5686fb8208753b302350262c49893f7e
3f8e8a12efc8df13c2cd2a955c0df9f649fbf5d7
a118bedea5b15926f5d2b053b09b337485accd063dd8ae030d52214270566761

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Th.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.netflix.com
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: font/woff2
Content-Length: 51572
Connection: keep-alive
Content-MD5: Vob7ggh1OzAjUCYsSYk/fg==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2

45.57.90.1

200 OK

53 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint33:D7:24:93:DC:B5:12:00:BE:D6:EF:74:F3:49:41:D0:AE:65:12:24
ValidityFri, 01 Sep 2023 00:00:00 GMT - Thu, 05 Oct 2023 22:51:13 GMT

File type
Web Open Font Format (Version 2), TrueType, length 53304, version 2.6554\012- data
Size
53 kB (53304 bytes)
Hash
0bf3177f1fed6d953178221fba43c7e8
83d9f039f1ba7209321c7da72d3dc6a9aa5e2ab3
c0bceb927c506dce9f6e6f5f570e641ad580b9554be06f61508a4aee32380167

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.netflix.com
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: font/woff2
Content-Length: 53304
Connection: keep-alive
Content-MD5: C/MXfx/tbZUxeCIfukPH6A==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Md.woff2

45.57.91.1

200 OK

54 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Md.woff2
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintE7:60:3A:07:AC:8B:B1:3A:E4:88:1A:05:A0:D1:60:1B:9B:0D:E4:53
ValidityFri, 08 Sep 2023 00:00:00 GMT - Sat, 14 Oct 2023 23:59:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 53940, version 2.6554\012- data
Size
54 kB (53940 bytes)
Hash
ea769921b0cfa4fc6d4d1a2e0b1fa5ff
34dcd2875c9752ebba6f894eb8d410e4958cc1b4
9ac2bd03fcde501b3f30f47ab1fae62161f87808ea6411f38e8feaa4bbddc42e

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Md.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.netflix.com
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: font/woff2
Content-Length: 53940
Connection: keep-alive
Content-MD5: 6naZIbDPpPxtTRouCx+l/w==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Lt.woff2

45.57.91.1

200 OK

53 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Lt.woff2
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintE7:60:3A:07:AC:8B:B1:3A:E4:88:1A:05:A0:D1:60:1B:9B:0D:E4:53
ValidityFri, 08 Sep 2023 00:00:00 GMT - Sat, 14 Oct 2023 23:59:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 53368, version 2.6554\012- data
Size
53 kB (53368 bytes)
Hash
2ed3e95706ca06c7e3d04baf76c4ba7c
3b8197c021670136cb977317bde917edaefaea5d
f661862ea361cc80f099cb993b07e2a3440877eb03464144da92e821468c693d

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Lt.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.netflix.com
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: font/woff2
Content-Length: 53368
Connection: keep-alive
Content-MD5: LtPpVwbKBsfj0EuvdsS6fA==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.png

45.57.91.1

200 OK

1.8 kB

URL GET HTTP/1.1
assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.png
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint33:D7:24:93:DC:B5:12:00:BE:D6:EF:74:F3:49:41:D0:AE:65:12:24
ValidityFri, 01 Sep 2023 00:00:00 GMT - Thu, 05 Oct 2023 22:51:13 GMT

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
1.8 kB (1755 bytes)
Hash
3d194514babc5d7d010308a0f808ca51
867e51e9b4a474c19da52d6454076c007a9d01f2
7341f7b8b0ae3c0da4aea559efc31f0b53d9db9dd291664fdcf7d618fd95ed8a

HTTP Headers

GET /us/ffe/siteui/common/icons/nficon2016.png HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.netflix.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: image/png
Content-Length: 1755
Connection: keep-alive
Content-MD5: PRlFFLq8XX0BAwig+AjKUQ==
Last-Modified: Tue, 21 Jun 2016 22:29:33 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Accept-Ranges: bytes

assets.nflxext.com/us/ffe/siteui/common/icons/nficon2023.ico

45.57.91.1

200 OK

9.9 kB

URL GET HTTP/1.1
assets.nflxext.com/us/ffe/siteui/common/icons/nficon2023.ico
IP
45.57.91.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint0E:FF:C4:11:E5:2C:A4:84:B9:B9:32:96:2B:4A:28:CA:87:C1:7C:DD
ValidityTue, 05 Sep 2023 00:00:00 GMT - Mon, 09 Oct 2023 22:09:11 GMT

File type
MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel\012- data
Size
9.9 kB (9854 bytes)
Hash
58f54d9ea15176671802bebeee4da4cb
4ba1cb97814772435962f3ac25af0def81851735
9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3

HTTP Headers

GET /us/ffe/siteui/common/icons/nficon2023.ico HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.netflix.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 16 Sep 2023 17:33:12 GMT
Content-Type: image/x-icon
Content-Length: 9854
Connection: keep-alive
Content-MD5: WPVNnqFRdmcYAr6+7k2kyw==
Last-Modified: Thu, 31 Aug 2023 18:57:29 GMT
Cache-Control: max-age=604801
Expires: Sat, 23 Sep 2023 17:33:13 GMT
Accept-Ranges: bytes

www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456

54.155.246.232

200 OK

16 kB

URL User Request GET HTTP/2
www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
IP
54.155.246.232:443
ASN
#16509 AMAZON-02

Certificate
IssuerDigiCert Inc
Subjectwww.netflix.com
FingerprintE8:F3:65:88:B4:8D:64:7D:B7:D2:1E:F5:C4:33:F1:8F:F7:7F:B5:40
ValidityWed, 14 Dec 2022 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (15190)
Size
16 kB (15584 bytes)
Hash
091c9f93afb00631c994d51578386cf9
9e2a551c1b9ba015438316db8e754f8c011b4277
e01ba3e140d163cb46e0cbf872784a56f0d3e4c883bb2c35c8483dae50a88c1f

HTTP Headers

GET /NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456 HTTP/1.1
Host: www.netflix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: nfvdid=BQFmAAEBEL208W4msLDg0zVhjMequH5Alrs1Oqb-CvkYmt_6PhQjbop-s94furXptnkvks4xQdj5biAESMCdcnRdNPuwcBRCW1auwsh_ozNA3NF7mGSOGg%3D%3D; SecureNetflixId=v%3D2%26mac%3DAQEAEQABABTNehmDUArtVJEHSE0XwNIE7ko2qNvLVi0.%26dt%3D1694885591492; NetflixId=v%3D2%26ct%3DBQAOAAEBEBmyfCyyB1XkwDsflQsmhzSBAFdmk2yTHWGC-kv49atERKyvb_UcCPN4H0OKUkQ3DVZTMQXxNtWVqPpZ5QEWioyPu_2DfB8EAy8qH5PKBT8Tc8SY9tT6X1qCHdhCQ5UP-K4PNHoL36IHyYgqHF4339m1UzABRnmgHKDXJ-jCGyUswxOPyDEmI7Fe_F0We_m2cNboKJeeF5XJArK71_r69WQ9tRArnaPIDoyYFW0cQGcC04OIWIi2TJOAfqAzRPl-W3S4zCz4gOKVCt8_ckh_uYLsTQIYZBiAdHoKU3rxqGK39owdifWF9vzhDbc-KscPdGUPVXB-IOUG58SsN1d0_JKqvbuSXB5vOXIa_aYoEsrFwpE.%26bt%3Ddev%26mac%3DAQEAEAABABQ79TYp_hgtUrNfLHAxmjj4OAHmDNcQzOc.
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nq_website_nonmember-prod-release 263275e3-ab6f-4e92-8d79-e7990b7f7055
x-frame-options: DENY
content-type: text/html; charset=utf-8
date: Sat, 16 Sep 2023 17:33:11 GMT
x-envoy-upstream-service-time: 56
x-b3-traceid: 20a91c68c2991935
x-request-id: 500774de-05fa-410f-9cdf-3c75c8f62a15
x-envoy-decorator-operation: lo_svc
via: 2 i-0e403ea6d9e8d65a9 (eu-west-1)
x-xss-protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-originating-url: http://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
x-netflix.nfstatus: 1_1
x-netflix.proxy.execution-time: 60
x-netflix.zuul.netty.content.compressor.target: gzip
content-encoding: gzip
X-Firefox-Spdy: h2

www.netflix.com/:zobik@hiltonvr.com:123456

54.155.246.232

302 Found

16 kB

URL User Request GET HTTP/2
www.netflix.com/:zobik@hiltonvr.com:123456
IP
54.155.246.232:443
ASN
#16509 AMAZON-02

Certificate
IssuerDigiCert Inc
Subjectwww.netflix.com
FingerprintE8:F3:65:88:B4:8D:64:7D:B7:D2:1E:F5:C4:33:F1:8F:F7:7F:B5:40
ValidityWed, 14 Dec 2022 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT

File type

Size
16 kB (15584 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /:zobik@hiltonvr.com:123456 HTTP/1.1
Host: www.netflix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: nq_website_core-prod-release c10c9cf0-0394-48a5-ae3f-914008e36d34
x-frame-options: DENY
location: https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F%3Azobik%40hiltonvr.com%3A123456
date: Sat, 16 Sep 2023 17:33:11 GMT
x-envoy-upstream-service-time: 7
x-b3-traceid: 467bbdd13588f44b
x-request-id: fbf097ec-e535-4e39-a4ac-6402dd1e554f
x-envoy-decorator-operation: lo_svc
via: 2 i-0e403ea6d9e8d65a9 (eu-west-1)
x-xss-protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-originating-url: http://www.netflix.com/:zobik@hiltonvr.com:123456
edge-control: no-cache, no-store
cache-control: no-cache, no-store
set-cookie: nfvdid=BQFmAAEBEL208W4msLDg0zVhjMequH5Alrs1Oqb-CvkYmt_6PhQjbop-s94furXptnkvks4xQdj5biAESMCdcnRdNPuwcBRCW1auwsh_ozNA3NF7mGSOGg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
SecureNetflixId=v%3D2%26mac%3DAQEAEQABABTNehmDUArtVJEHSE0XwNIE7ko2qNvLVi0.%26dt%3D1694885591492; Domain=.netflix.com; Expires=Sun, 15 Sep 2024 17:33:11 GMT; Path=/; Secure; SameSite=Strict
NetflixId=v%3D2%26ct%3DBQAOAAEBEBmyfCyyB1XkwDsflQsmhzSBAFdmk2yTHWGC-kv49atERKyvb_UcCPN4H0OKUkQ3DVZTMQXxNtWVqPpZ5QEWioyPu_2DfB8EAy8qH5PKBT8Tc8SY9tT6X1qCHdhCQ5UP-K4PNHoL36IHyYgqHF4339m1UzABRnmgHKDXJ-jCGyUswxOPyDEmI7Fe_F0We_m2cNboKJeeF5XJArK71_r69WQ9tRArnaPIDoyYFW0cQGcC04OIWIi2TJOAfqAzRPl-W3S4zCz4gOKVCt8_ckh_uYLsTQIYZBiAdHoKU3rxqGK39owdifWF9vzhDbc-KscPdGUPVXB-IOUG58SsN1d0_JKqvbuSXB5vOXIa_aYoEsrFwpE.%26bt%3Ddev%26mac%3DAQEAEAABABQ79TYp_hgtUrNfLHAxmjj4OAHmDNcQzOc.; Domain=.netflix.com; Expires=Sun, 15 Sep 2024 17:33:11 GMT; Path=/; Secure; SameSite=Lax
x-netflix.nfstatus: 1_1
x-netflix.proxy.execution-time: 14
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (16)

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/1.1

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers