Report - netflix-dj7.pages.dev/robots.txt

Report Overview

Submitted URL
netflix-dj7.pages.dev/robots.txt
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-07 12:11:37
Access
public
Website Title
Netflix
Final URL
netflix-dj7.pages.dev/robots.txt
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
11
Network Intrusion Detection
0
Threat Detection Systems
20

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
netflix-dj7.pages.dev	unknown	unknown	No data	No data	4.6 kB	1.9 MB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-05	medium	netflix-dj7.pages.dev/	Netflix Inc.
2024-05-05	medium	netflix-dj7.pages.dev/	Netflix Inc.
2024-05-05	medium	netflix-dj7.pages.dev/	Netflix Inc.
2024-05-05	medium	netflix-dj7.pages.dev/	Netflix Inc.
2024-05-05	medium	netflix-dj7.pages.dev/	Netflix Inc.
2024-05-05	medium	netflix-dj7.pages.dev/	Netflix Inc.
2024-05-05	medium	netflix-dj7.pages.dev/	Netflix Inc.
2024-05-05	medium	netflix-dj7.pages.dev/	Netflix Inc.
2024-05-05	medium	netflix-dj7.pages.dev/	Netflix Inc.
2024-05-05	medium	netflix-dj7.pages.dev/robots.txt	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (10)

URL IP Response Size

netflix-dj7.pages.dev/logo.png

188.114.96.1

200 OK

49 kB

URL GET HTTP/3
netflix-dj7.pages.dev/logo.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netflix-dj7.pages.dev/robots.txt
Certificate
IssuerLet's Encrypt
Subjectnetflix-dj7.pages.dev
Fingerprint95:5B:D1:22:03:96:6E:62:D0:65:0A:F8:72:D6:E5:90:8E:62:AF:A0
ValiditySun, 05 May 2024 13:35:44 GMT - Sat, 03 Aug 2024 13:35:43 GMT

File type
PNG image data, 2214 x 609, 8-bit/color RGBA, non-interlaced
Size
49 kB (49112 bytes)
Hash
79aae551f000611426ef41a8b43abfd2
b58c5ac411b6c834cbc13afcaeb0e3f25489b7e7
2b9aed050de1fb38c9c140ec0a69dcec07db75439f179c3d2f94cd38eadfde11

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /logo.png HTTP/1.1
Host: netflix-dj7.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netflix-dj7.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 12:11:11 GMT
content-type: image/png
content-length: 49112
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a6f0e0f9d413b1057814ec59c8a99769"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ajhjrkNwJMJuVCy5EafX%2B9Qg9zcLTH7kL8i7vdE8oga9UBCkzk9Cy1JVQ%2BKTIlmYdgOr4mmbMvbJFY08Cs8dscN5LXseT4bqTgcgdDfr396vpDe%2FRqTuTYL66E4A0J2ks%2BYIxWHd%2Boo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88011c73584eb512-OSL
alt-svc: h3=":443"; ma=86400

netflix-dj7.pages.dev/drop.png

188.114.96.1

200 OK

300 B

URL GET HTTP/3
netflix-dj7.pages.dev/drop.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netflix-dj7.pages.dev/robots.txt
Certificate
IssuerLet's Encrypt
Subjectnetflix-dj7.pages.dev
Fingerprint95:5B:D1:22:03:96:6E:62:D0:65:0A:F8:72:D6:E5:90:8E:62:AF:A0
ValiditySun, 05 May 2024 13:35:44 GMT - Sat, 03 Aug 2024 13:35:43 GMT

File type
PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced
Size
300 B (300 bytes)
Hash
e4a7179274c9c73e9e22cccd449575db
f770524281fcd53758f9485b3556316915e91e7b
a216e5408002afe495ed8a149c078795e06fff614c700cfaa236bfbc5ae3317a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /drop.png HTTP/1.1
Host: netflix-dj7.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netflix-dj7.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 12:11:11 GMT
content-type: image/png
content-length: 300
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "bdc261f10fec6a0e126202dc7275d867"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KPoCxffvJTllnDAfrj6GxUsBsRZelWBWDBoMAitcSw7eFe6%2FSXpg7ep%2Fyb%2F9pQdSpdTKTnnbOLuIHCBtErO7wJ%2BP%2BxCICfzcD7P%2Fz2XyseE73WL2THWuYTfBejlMRftJXNLRsaV%2F1Jg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88011c735856b512-OSL
alt-svc: h3=":443"; ma=86400

netflix-dj7.pages.dev/feature-3.png

188.114.96.1

200 OK

268 kB

URL GET HTTP/3
netflix-dj7.pages.dev/feature-3.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netflix-dj7.pages.dev/robots.txt
Certificate
IssuerLet's Encrypt
Subjectnetflix-dj7.pages.dev
Fingerprint95:5B:D1:22:03:96:6E:62:D0:65:0A:F8:72:D6:E5:90:8E:62:AF:A0
ValiditySun, 05 May 2024 13:35:44 GMT - Sat, 03 Aug 2024 13:35:43 GMT

File type
PNG image data, 771 x 565, 8-bit/color RGBA, non-interlaced
Size
268 kB (268071 bytes)
Hash
b5595ffda0feb7b278bf2de38f2059bc
a8d6443a4688925b5a46d859f8cd1760e76ee74b
9851e3644c993f21ad8fea4e5b7d0f14129c6ff6d310fe3eda82a306d4fb1b2a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /feature-3.png HTTP/1.1
Host: netflix-dj7.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netflix-dj7.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 12:11:11 GMT
content-type: image/png
content-length: 268071
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "2c6fe064831523cecf23f58ae76788c2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1hQNhCTbgsLLWSJ0i0JtPSj8qyv68Mg7nhdamcWoakfw%2Bep8elDDuIpp5Jr3%2Bn8AfIniV136qmAhLbUpTAxt5Q2elGr6kDEdibGzpXBg%2BpbPObwjkkD8kerLEZV7%2BiyiySjLuI0ROeA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88011c736868b512-OSL
alt-svc: h3=":443"; ma=86400

netflix-dj7.pages.dev/feature-1.png

188.114.96.1

200 OK

298 kB

URL GET HTTP/3
netflix-dj7.pages.dev/feature-1.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netflix-dj7.pages.dev/robots.txt
Certificate
IssuerLet's Encrypt
Subjectnetflix-dj7.pages.dev
Fingerprint95:5B:D1:22:03:96:6E:62:D0:65:0A:F8:72:D6:E5:90:8E:62:AF:A0
ValiditySun, 05 May 2024 13:35:44 GMT - Sat, 03 Aug 2024 13:35:43 GMT

File type
PNG image data, 762 x 572, 8-bit/color RGBA, non-interlaced
Size
298 kB (297551 bytes)
Hash
f779e24d99b9c9780f2fcd8365e3aa4b
b534d90ee9675ab3d4a7708e8ae7d77c3099754c
e44d7e3083e469b1e2dfac2cc18ac6c86abc8bb75c0d9d3903a328b2ff5fbafc

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /feature-1.png HTTP/1.1
Host: netflix-dj7.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netflix-dj7.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 12:11:11 GMT
content-type: image/png
content-length: 297551
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "796ad9fdbabe8eca182bcc9e3726f651"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Biyr6qmt%2BzYaIVyu843Uh55%2FBFwoLxZubNtAuAXigQk1ABGDaFZWrvH2FWxqyrIu20Ktk%2BD7gKSvcMdX7YfMsH4ldYIbgwujrDM1CY5qh2Utaii31lybbUoi7njrcPE4Uvokx9MlZiE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88011c735858b512-OSL
alt-svc: h3=":443"; ma=86400

netflix-dj7.pages.dev/feature-2.png

188.114.96.1

200 OK

165 kB

URL GET HTTP/3
netflix-dj7.pages.dev/feature-2.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netflix-dj7.pages.dev/robots.txt
Certificate
IssuerLet's Encrypt
Subjectnetflix-dj7.pages.dev
Fingerprint95:5B:D1:22:03:96:6E:62:D0:65:0A:F8:72:D6:E5:90:8E:62:AF:A0
ValiditySun, 05 May 2024 13:35:44 GMT - Sat, 03 Aug 2024 13:35:43 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
165 kB (164843 bytes)
Hash
ff9ad058e3106aec0dc44d8ab541f024
604c44c8046aa73e0b7d012865329df4cd48e52b
7d015612c87d7fb6a41265dd64743ae47b7b9ce3e2451a094d58256e2049c70f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /feature-2.png HTTP/1.1
Host: netflix-dj7.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netflix-dj7.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 12:11:11 GMT
content-type: image/png
content-length: 164843
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "5138acdf82d954605e3cb42584778d39"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mBLnveUhqwZ9gAgfkvUNj9UpPrM9knTjUSAPIb%2FNVrS9bcZ7uJAj0cMWIHkguCBvJ1XscUt0y79tDg5VxQmQmFpd55fgMd1PqFS4Kqnf%2FyqZY1TF%2BJzYDsAgbx9GzMZG6iEFg8apFnA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88011c73585eb512-OSL
alt-svc: h3=":443"; ma=86400

netflix-dj7.pages.dev/feature-4.png

188.114.96.1

200 OK

378 kB

URL GET HTTP/3
netflix-dj7.pages.dev/feature-4.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netflix-dj7.pages.dev/robots.txt
Certificate
IssuerLet's Encrypt
Subjectnetflix-dj7.pages.dev
Fingerprint95:5B:D1:22:03:96:6E:62:D0:65:0A:F8:72:D6:E5:90:8E:62:AF:A0
ValiditySun, 05 May 2024 13:35:44 GMT - Sat, 03 Aug 2024 13:35:43 GMT

File type
PNG image data, 737 x 553, 8-bit/color RGBA, non-interlaced
Size
378 kB (377854 bytes)
Hash
819eb84388433c40129d44a5e02803d4
3966adbd1555e1a7425c8b3e592a34d2ed8e3ddd
07618374a57aad9ec237c8a75f8604b731b29893d683348a8425514a430e7b28

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /feature-4.png HTTP/1.1
Host: netflix-dj7.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netflix-dj7.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 12:11:11 GMT
content-type: image/png
content-length: 377854
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "56d777cdf748da679372b1bbadc48442"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9VNCmIv7Fd8j7T6J6WfbMvvkxjbEndTqT8rsfkxbmLuY1QjvDZbf6VH6YFKpvfejpJCe41DhCbzuQAqNUXXmvk4K%2B%2BjXUXX5Z7L52gV0wEy610XvNKJXgm7I%2Fi34X4hR7JYYsoiVvZo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88011c73686bb512-OSL
alt-svc: h3=":443"; ma=86400

netflix-dj7.pages.dev/styles.css

188.114.96.1

200 OK

325 kB

URL GET HTTP/3
netflix-dj7.pages.dev/styles.css
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netflix-dj7.pages.dev/robots.txt
Certificate
IssuerLet's Encrypt
Subjectnetflix-dj7.pages.dev
Fingerprint95:5B:D1:22:03:96:6E:62:D0:65:0A:F8:72:D6:E5:90:8E:62:AF:A0
ValiditySun, 05 May 2024 13:35:44 GMT - Sat, 03 Aug 2024 13:35:43 GMT

File type
assembler source, ASCII text
Size
325 kB (325332 bytes)
Hash
fb0c9728e863d814b4f3a1fb99eaffbc
fe3dccd5f0d7937b6e308abb86b0a1a153dfaece
b1489bc5e00e89fc969207e5d0df7dc13d943e5842046e33029b88539484e0e9

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /styles.css HTTP/1.1
Host: netflix-dj7.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netflix-dj7.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 12:11:11 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"def6cf47393135ed37b77007eac8c5eb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=717cCZvnyZ0YfqKfJVoYJGgwp2EBPoWCzWZ6mrCFtzPE34a35GkSvQaG0rEept2xistYG4FhbBFmFq9erITH4CJdyt9AlhbD7U7amQnBqoKOPb1ixewFjH24p4nv7aCtw%2FtM9pYAdV0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88011c73584ab512-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

netflix-dj7.pages.dev/net.png

188.114.96.1

200 OK

73 kB

URL GET HTTP/3
netflix-dj7.pages.dev/net.png
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netflix-dj7.pages.dev/robots.txt
Certificate
IssuerLet's Encrypt
Subjectnetflix-dj7.pages.dev
Fingerprint95:5B:D1:22:03:96:6E:62:D0:65:0A:F8:72:D6:E5:90:8E:62:AF:A0
ValiditySun, 05 May 2024 13:35:44 GMT - Sat, 03 Aug 2024 13:35:43 GMT

File type
PNG image data, 314 x 478, 8-bit/color RGBA, non-interlaced
Size
73 kB (72862 bytes)
Hash
a8081eda294b25dcf72cf611a71fee5b
8a50280e72bc5971c3c91031b6d06e10372eecb4
09c9000ade56f9acd77d2a8de4caf239a7658d50aed03705484b91228625cd62

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /net.png HTTP/1.1
Host: netflix-dj7.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netflix-dj7.pages.dev/robots.txt
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Tue, 07 May 2024 12:11:11 GMT
content-type: image/png
content-length: 72862
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "f301a05c032bd573b3f7ebac28398511"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sR%2BmwygiDX7drOuDe0EseWPdVJsF9%2BQSthwrWCQjq4cZjMLBYXXaYOAHd7QQyQSTiH%2BmLIWkYxwAJFJRDFRQjvDEJxQa4YMGEgpJF95gluaXx9jBnBCoiwWSo7bDdQ7x3q4na%2FFi1H8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88011c752c70b512-OSL
alt-svc: h3=":443"; ma=86400

netflix-dj7.pages.dev/netflix-landing.jpeg

188.114.96.1

200 OK

324 kB

URL GET HTTP/3
netflix-dj7.pages.dev/netflix-landing.jpeg
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://netflix-dj7.pages.dev/robots.txt
Certificate
IssuerLet's Encrypt
Subjectnetflix-dj7.pages.dev
Fingerprint95:5B:D1:22:03:96:6E:62:D0:65:0A:F8:72:D6:E5:90:8E:62:AF:A0
ValiditySun, 05 May 2024 13:35:44 GMT - Sat, 03 Aug 2024 13:35:43 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
324 kB (323929 bytes)
Hash
d2edb29f3f970c36aadecbb01ed0bb79
52c2200063e91ddf92838729555d9b6cee1a499a
c4d143fbc63dde4eb0f0f8bd9a8ced56f7e0bd663e45b3a4b7f5f30c9f105be1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /netflix-landing.jpeg HTTP/1.1
Host: netflix-dj7.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://netflix-dj7.pages.dev/styles.css
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 12:11:11 GMT
content-type: image/jpeg
content-length: 323929
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "091a20043230c0bd0a08a9d0e01fd2e8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jX06FAuomncMNZic55qc7C9xvVB2OGurhZbxbhMhMk78pnuSxpTxJjzDcJTsiDNSKFmQzoG6K%2BjDGrFWNMYWiDuVt5EvjH5QIRfDQzP6MB5ySqmjwf9W19EIC67JnHF82VcrxYjoSoY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88011c748afbb512-OSL
alt-svc: h3=":443"; ma=86400

netflix-dj7.pages.dev/robots.txt

188.114.96.1

200 OK

7.4 kB

URL User Request GET HTTP/2
netflix-dj7.pages.dev/robots.txt
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectnetflix-dj7.pages.dev
Fingerprint95:5B:D1:22:03:96:6E:62:D0:65:0A:F8:72:D6:E5:90:8E:62:AF:A0
ValiditySun, 05 May 2024 13:35:44 GMT - Sat, 03 Aug 2024 13:35:43 GMT

File type
HTML document, ASCII text, with very long lines (7846), with no line terminators
Size
7.4 kB (7441 bytes)
Hash
33c0537e387e83429177f81bd98d5827
f13121e5148320f871c479b3d01690a2cfdbf970
a86feedb4cfccd8458995875769dc1eaea6210ab90893bf165f8bf69528951d1

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /robots.txt HTTP/1.1
Host: netflix-dj7.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 12:11:11 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4c4d4732ff82e722531fc62933623846"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0WZaoqPiFpsv8I3%2BnGporE7ALdmNKNbLHxqAPNCuHX2D2GFRcI6bzYUXLG0LbXbHaE%2FWFV33ZfzDdvQTHsHr6kHXLKmBIXquKhr3j9W5IzKfIUjcJuWYAAVRZP%2FRN7%2FFvPu19aJm%2FPM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88011c71bfc556c0-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (10)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP

ASN