Report - f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417

Report Overview

Submitted URL
f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
IP
34.102.176.152
ASN
#15169 GOOGLE
Submitted
2023-06-01 13:17:00
Access
public
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.sectigo.com	487	2018-08-16	2019-11-29	2023-05-31	660 B	1.9 kB	104.18.15.101
f9w1lned0ruqblxi6jahwotak.filesusr.com	unknown	2017-08-28	2022-06-02	2023-05-13	1.1 kB	183 kB	34.102.176.152
codex.nflxext.com	11577	2011-02-11	2016-09-24	2023-05-29	2.3 kB	1.2 kB	45.57.90.1
assets.nflxext.com	3871	2011-02-11	2015-07-22	2023-05-31	2.0 kB	232 kB	45.57.90.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

Scan Date	Severity	Indicator	Alert
2023-05-31	medium	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (20)

	URL	Size	First Seen	Last Seen
	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	92 B	2023-03-10	2023-07-24
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 02:45:18 Last Seen2023-07-24 09:27:20 Times Seen11 Hash 8b205c2c715ff7196869a973fc066183 44b4ab3700a46957176259acd73a9dd6ccc9468c 888ccc9e0165633b8e206eed0738977f1621eee531efe0654f2cbf2a410a6aba Loading...

	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	580 B	2023-03-10	2023-07-24
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 02:45:18 Last Seen2023-07-24 09:27:20 Times Seen11 Hash e91de09fd0f1d31b9c1634f709db68e9 b602b3455cc881976dcf262e33c148b28c43f1e7 b59ea6eb6a27c597010e8d461b52ac439f45684284b7f48a7b31360658d63551 Loading...

	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	84 B	2023-03-10	2023-07-24
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 02:45:18 Last Seen2023-07-24 09:27:20 Times Seen11 Hash 2a542669527b756715924a44ce3f5745 ac5f5cf4c9a64c68f33dd72c2dfcb56010e4d01d 3c87f9c3e2030dc905c0530e7f095a13ee1cc604f21e17be561537af892ec297 Loading...

	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	187 B	2023-03-10	2023-07-24
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 02:45:18 Last Seen2023-07-24 09:27:20 Times Seen11 Hash c60f8bdde2a446bfaf37a51fa2a1e830 772e5dd8377b2f9b12e9adf6cad550d8c01b0fb8 b0a4507bde2d5ddb43449e30b21999696ee0180506f6adc5b8a51c36ac4858fd Loading...

	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	89 B	2023-03-07	2023-08-13
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen158 Hash f7344584d56398d2b8aa7ed81e95e37b 101fd2382ac37229d53211dbb58f527177b428a2 6f6f99dcad394b42ff648026e70eb999ca871ae3b4298853dff0c3b3f4a92047 Loading...

	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	81 B	2023-03-07	2023-08-13
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen158 Hash 57e47dd3f5d98140589d5ec0b0dbb4ea 027ca6c160b8970badd6728e83c5db90cfd544fc 1957a5ee07a9d2c94dc7daa4d5ac38cbaf68a3816d543016aea00c2b156b5265 Loading...

	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	72 B	2023-03-10	2023-07-24
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-10 02:45:18 Last Seen2023-07-24 09:27:20 Times Seen11 Hash 5ce816ca8b7e1b5a259198c359c3e084 46ab8cccc3281042f26087efb54aec96a9fdf436 c1976f50c437f25560f0a3ec3ce92b17e2bf21239e117000b94ac999bf3b4853 Loading...

	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	81 B	2023-03-07	2023-08-13
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen158 Hash 374a9d3b2a0962c0e4bb70709efd58b7 4fab4261997228429e4e99adc8fc9c937cc11bf6 7d22bf5ed04f476b466b865bacaa80ce8083e3ad3544c9a609359492faca82f5 Loading...

	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	81 B	2023-03-07	2023-08-13
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen158 Hash 9a942e86d1cf5906c766d94d07b3226a ef5bf0c15ccf13f55ca0b62196e2be3d428ba688 e6a3af812ff64f2c8e22a4e5d2727fdfed661e03f5a0bed32e83aa9d661ff92f Loading...

	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	77 B	2023-03-07	2023-08-13
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen158 Hash 9f4654d4601d43f148a6ea17efbb072d 3886dec04f8a5562426cf707d66e555c37ad3c0f 15e917844e5d91da0b5b66e2743ff4dd93bdf0602ec4ae500c4b7d06af5a2b87 Loading...

	f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html	73 B	2023-03-07	2023-08-13
Pretty URL f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html IP 34.102.176.152 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen158 Hash 7105dc971bb7d3082b598e9309164f40 43b1033f55e56f6271ceccfd141794bae764bd16 27bdce2a200b907a6db1b16577a766e5c0f4986821fd547984a6570305a005fc Loading...

		Size	First Seen	Last Seen
	#1 Write - fe8ef8d6170fbf3fbe1afb3fba0282c4	166 B	2023-03-10	2023-07-24
Pretty Observations First Seen2023-03-10 02:45:18 Last Seen2023-07-24 09:27:20 Times Seen11 Hash fe8ef8d6170fbf3fbe1afb3fba0282c4 2fe7cbeaaf22226adee53fbe2a0932bf837cc466 adc7fb447339dd9a618804220dddb66533cd0cd1f7464439c83b636a91e73803 Loading...

	#2 Write - 1b18e6fb1e12162f604ab9b3fe909b72	52 B	2023-03-07	2023-08-13
Pretty Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen120 Hash 1b18e6fb1e12162f604ab9b3fe909b72 15974a2816c31d56887a8d6fc2e06da42f3a39e6 b194d12169aa71376399e944905412d028589cf11407dcc2a94cb6a2a54b424b Loading...

	#3 Write - 30e97a9b8527190c2f05cc60d97d6a80	58 B	2023-03-10	2023-07-24
Pretty Observations First Seen2023-03-10 02:45:18 Last Seen2023-07-24 09:27:20 Times Seen10 Hash 30e97a9b8527190c2f05cc60d97d6a80 e41a6b6986599d36c80878764a740ef5c3c7733d fb7c70dabfd1c8840ed7950ffacc4818f6bc0877ec4ba7bda3b8e6596ccd5183 Loading...

	#4 Write - f6494d932b3c13ac5e5fcbf566292c8b	57 B	2023-03-07	2023-08-13
Pretty Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen124 Hash f6494d932b3c13ac5e5fcbf566292c8b c7d7443ae0d280b245b58dd988dbe48be1061af4 db41ee2a07a5b818a94de014804bb411b456c016860b9181077c474bc4cdee4b Loading...

	#5 Write - 3f15341f447b070793e73dcde2db2e0a	51 B	2023-03-10	2023-07-24
Pretty Observations First Seen2023-03-10 02:45:18 Last Seen2023-07-24 09:27:20 Times Seen11 Hash 3f15341f447b070793e73dcde2db2e0a faafc7798e7e9cbb82768817b0d219f1e4e926f1 812a657c90eba14ee21ba7cf73519c9c17e53d4d378083fa6841d7c463b5a105 Loading...

	#6 Write - 62f861e821357b56956b2170c6e7128c	57 B	2023-03-07	2023-08-31
Pretty Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-31 02:48:55 Times Seen150 Hash 62f861e821357b56956b2170c6e7128c 6ab45041f2d465d1840e53d86de2ed121c892e2e 2ced30d9e6d6f28d669c122806b815616f03ff193f2b72b5e3fa1bec69ec6428 Loading...

	#7 Write - 1275579abbca1b987303f75482fa4844	57 B	2023-03-07	2023-08-13
Pretty Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen120 Hash 1275579abbca1b987303f75482fa4844 57f3568f09010c37d620087969f764df81db8638 942dfba021e0ad5bedc66146e0b724a40a831b11b86e9c9445f7a87a66b90184 Loading...

	#8 Write - 8bd7175a8508f8bd5cb8e4d7b485901f	54 B	2023-03-07	2023-08-13
Pretty Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen120 Hash 8bd7175a8508f8bd5cb8e4d7b485901f dccca165ccc4cd71bcf500064c8cc7ac69a62f6a 597fa1a82e76300844085cbafc95453252a0fc0e77fbd64e1cc234c836fb9642 Loading...

	#9 Write - 3833b1d69a682d8e04daab1f58617f8b	61 B	2023-03-07	2023-08-13
Pretty Observations First Seen2023-03-07 01:36:29 Last Seen2023-08-13 11:51:51 Times Seen120 Hash 3833b1d69a682d8e04daab1f58617f8b cfb5d96c120f7e8af46ab486f60f23f8c7a2c147 c9d5788001b48cbc8d29e4e082a73d6b86a5e1dd22df6a4f860592785943ad6f Loading...

HTTP Transactions (12)

URL IP Response Size

ocsp.sectigo.com/

104.18.15.101

471 B

URL
ocsp.sectigo.com/
IP
104.18.15.101:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
3f2468285c6ce55576b28b089be871f0
4a8b6ea8548430801392c6c194d6965aaba15cb6
ef909b473f9dea6645b7bbe3e433307d5e3ab382af1db153b1f3fc3192652d18

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 13:16:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 29 May 2023 03:10:12 GMT
Expires: Mon, 05 Jun 2023 03:10:11 GMT
Etag: "4a8b6ea8548430801392c6c194d6965aaba15cb6"
Cache-Control: max-age=310155,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d07bb8eed3bb4ff-OSL

ocsp.sectigo.com/

104.18.14.101

471 B

URL
ocsp.sectigo.com/
IP
104.18.14.101:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
3f2468285c6ce55576b28b089be871f0
4a8b6ea8548430801392c6c194d6965aaba15cb6
ef909b473f9dea6645b7bbe3e433307d5e3ab382af1db153b1f3fc3192652d18

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 01 Jun 2023 13:16:43 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 29 May 2023 03:10:12 GMT
Expires: Mon, 05 Jun 2023 03:10:11 GMT
Etag: "4a8b6ea8548430801392c6c194d6965aaba15cb6"
Cache-Control: max-age=309432,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d07bb9099eeb527-OSL

f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html

34.102.176.152

200 OK

182 kB

URL User Request GET HTTP/2
f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
IP
34.102.176.152:443
ASN
#15169 GOOGLE

Certificate
IssuerSectigo Limited
Subject*.filesusr.com
Fingerprint44:25:DD:B9:AC:08:D6:F7:A8:CF:F4:D3:0B:91:ED:AB:5E:19:F4:3B
ValiditySat, 25 Feb 2023 00:00:00 GMT - Thu, 24 Aug 2023 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2157)
Size
182 kB (182002 bytes)
Hash
3a78d13182fce9818213d74210e7f8fe
667c31f0ff1c106314bceb6523af04f4b75a993c
922cc27512380fc5b4dbb9554c94d664e8e7149234f9fc5c83ad81dbaf08f347

Detections

Analyzer	Verdict	Alert
openphish	Netflix Inc.

HTTP Headers

GET /html/c69417_3a78d13182fce9818213d74210e7f8fe.html HTTP/1.1
Host: f9w1lned0ruqblxi6jahwotak.filesusr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Thu, 01 Jun 2023 13:16:42 GMT
content-type: text/html; charset=utf-8
content-length: 182002
expires: Thu, 01 Jun 2023 14:16:42 GMT
cache-control: public, max-age=15552000, immutable
last-modified: Wed, 16 Sep 2020 21:30:05 GMT
etag: "3a78d13182fce9818213d74210e7f8fe"
accept-ranges: bytes
access-control-allow-origin: *
timing-allow-origin: *
x-seen-by: gcp.us-central-1.media-router-84588bb8-cwtfg
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vff980d5b/js/js/components%7Clogin%7CloginControllerClient.js/2/4N034k4a4m06464u4M080o004O4p4J4w4n4I4c4v4y0a024K/l/true/none

45.57.90.1

404 Not Found

146 B

URL GET HTTP/1.1
codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vff980d5b/js/js/components%7Clogin%7CloginControllerClient.js/2/4N034k4a4m06464u4M080o004O4p4J4w4n4I4c4v4y0a024K/l/true/none
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintAA:97:3F:4D:92:D7:56:2D:4C:D6:99:9B:71:0E:24:14:8E:90:E3:EA
ValidityFri, 26 May 2023 00:00:00 GMT - Fri, 30 Jun 2023 23:23:52 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vff980d5b/js/js/components%7Clogin%7CloginControllerClient.js/2/4N034k4a4m06464u4M080o004O4p4J4w4n4I4c4v4y0a024K/l/true/none HTTP/1.1
Host: codex.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f9w1lned0ruqblxi6jahwotak.filesusr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 01 Jun 2023 13:16:43 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive

codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vff980d5b/js/js/bootstrap.js,common%7Cbootstrap.js/2/4N034k4a4m06464u4M080o004O4p4J4w4n4I4c4v4y0a024K/bck/true/none

45.57.90.1

404 Not Found

146 B

URL GET HTTP/1.1
codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vff980d5b/js/js/bootstrap.js,common%7Cbootstrap.js/2/4N034k4a4m06464u4M080o004O4p4J4w4n4I4c4v4y0a024K/bck/true/none
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintAA:97:3F:4D:92:D7:56:2D:4C:D6:99:9B:71:0E:24:14:8E:90:E3:EA
ValidityFri, 26 May 2023 00:00:00 GMT - Fri, 30 Jun 2023 23:23:52 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /%5E3.0.0/truthBundle/webui/1.22.5-shakti-js-vff980d5b/js/js/bootstrap.js,common%7Cbootstrap.js/2/4N034k4a4m06464u4M080o004O4p4J4w4n4I4c4v4y0a024K/bck/true/none HTTP/1.1
Host: codex.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f9w1lned0ruqblxi6jahwotak.filesusr.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 01 Jun 2023 13:16:43 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive

codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vff980d5b/css/css/less%7Clogin%7CloginBase.less,less%7Cpages%7Clogin%7CLogin.less/1/vFxM3Kw8EJL/none/true/none

45.57.90.1

404 Not Found

146 B

URL GET HTTP/1.1
codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vff980d5b/css/css/less%7Clogin%7CloginBase.less,less%7Cpages%7Clogin%7CLogin.less/1/vFxM3Kw8EJL/none/true/none
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint19:11:F6:8F:50:A3:8B:18:DF:3F:77:A1:EB:F5:0A:EA:64:78:46:3C
ValidityMon, 08 May 2023 00:00:00 GMT - Mon, 12 Jun 2023 22:01:08 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vff980d5b/css/css/less%7Clogin%7CloginBase.less,less%7Cpages%7Clogin%7CLogin.less/1/vFxM3Kw8EJL/none/true/none HTTP/1.1
Host: codex.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f9w1lned0ruqblxi6jahwotak.filesusr.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 01 Jun 2023 13:16:43 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive

codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vff980d5b/css/css/less%7Ccore%7Cerror-page.less/1/vFxM3Kw8EJL/none/true/none

45.57.90.1

404 Not Found

146 B

URL GET HTTP/1.1
codex.nflxext.com/%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vff980d5b/css/css/less%7Ccore%7Cerror-page.less/1/vFxM3Kw8EJL/none/true/none
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint11:CA:E0:2D:8D:7C:CA:CD:ED:8B:67:42:FE:3D:FB:63:B2:82:AD:EB
ValiditySat, 06 May 2023 00:00:00 GMT - Thu, 08 Jun 2023 23:13:16 GMT

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
146 B (146 bytes)
Hash
8eec510e57f5f732fd2cce73df7b73ef
3c0af39ecb3753c5fee3b53d063c7286019eac3b
55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

HTTP Headers

GET /%5E3.0.0/truthBundle/webui/1.22.5-shakti-css-vff980d5b/css/css/less%7Ccore%7Cerror-page.less/1/vFxM3Kw8EJL/none/true/none HTTP/1.1
Host: codex.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f9w1lned0ruqblxi6jahwotak.filesusr.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 01 Jun 2023 13:16:43 GMT
Content-Type: text/html
Content-Length: 146
Connection: keep-alive

assets.nflxext.com/ffe/siteui/vlv3/70731dc8-8977-4ed7-9a0a-421f510aea00/eee627d4-cdcf-419f-a823-ce5864140508/MX-es-20200914-popsignuptwoweeks-perspective_alpha_website_medium.jpg

45.57.90.1

200 OK

211 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/vlv3/70731dc8-8977-4ed7-9a0a-421f510aea00/eee627d4-cdcf-419f-a823-ce5864140508/MX-es-20200914-popsignuptwoweeks-perspective_alpha_website_medium.jpg
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintAA:97:3F:4D:92:D7:56:2D:4C:D6:99:9B:71:0E:24:14:8E:90:E3:EA
ValidityFri, 26 May 2023 00:00:00 GMT - Fri, 30 Jun 2023 23:23:52 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3\012- data
Size
211 kB (210847 bytes)
Hash
509d8e1729151b0ba4f7053780f6d197
f27a5ea7bec414b4d83ec90b19a0f46931838f86
409f011c7228ada84bb36dadaafb28e0b956843292d29bd5eee77b196df22d96

HTTP Headers

GET /ffe/siteui/vlv3/70731dc8-8977-4ed7-9a0a-421f510aea00/eee627d4-cdcf-419f-a823-ce5864140508/MX-es-20200914-popsignuptwoweeks-perspective_alpha_website_medium.jpg HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f9w1lned0ruqblxi6jahwotak.filesusr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 13:16:43 GMT
Content-Type: image/jpeg
Content-Length: 210847
Connection: keep-alive
Accept-Ranges: bytes
Content-MD5: UJ2OFykVGwuk9wU3gPbRlw==
Last-Modified: Wed, 16 Sep 2020 18:35:58 GMT
Cache-Control: max-age=604801
Expires: Thu, 08 Jun 2023 13:16:44 GMT

f9w1lned0ruqblxi6jahwotak.filesusr.com/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=login

34.102.176.152

403 Forbidden

9 B

URL GET HTTP/3
f9w1lned0ruqblxi6jahwotak.filesusr.com/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=login
IP
34.102.176.152:443
ASN
#15169 GOOGLE

Requested by
https://f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
Certificate
IssuerSectigo Limited
Subject*.filesusr.com
Fingerprint44:25:DD:B9:AC:08:D6:F7:A8:CF:F4:D3:0B:91:ED:AB:5E:19:F4:3B
ValiditySat, 25 Feb 2023 00:00:00 GMT - Thu, 24 Aug 2023 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
9 B (9 bytes)
Hash
722969577a96ca3953e84e3d949dee81
3dab5f6012e3e149b5a939b9cebba4a0b84dc8f5
78342a0905a72ce44da083dcb5d23b8ea0c16992ba2a82eece97e033d76ba3d3

HTTP Headers

GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=login HTTP/1.1
Host: f9w1lned0ruqblxi6jahwotak.filesusr.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 403 Forbidden
server: openresty/1.21.4.1
date: Thu, 01 Jun 2023 13:16:43 GMT
content-type: text/plain
content-length: 9
access-control-allow-origin: *
cache-control: no-cache, private, must-revalidate, proxy-revalidate, no-store
timing-allow-origin: *
x-seen-by: gcp.us-central-1.media-router-84588bb8-mfcdt
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

assets.nflxext.com/ffe/siteui/login/images/FB-f-Logo__blue_57.png

45.57.90.1

200 OK

1.5 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/login/images/FB-f-Logo__blue_57.png
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint19:11:F6:8F:50:A3:8B:18:DF:3F:77:A1:EB:F5:0A:EA:64:78:46:3C
ValidityMon, 08 May 2023 00:00:00 GMT - Mon, 12 Jun 2023 22:01:08 GMT

File type
PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced\012- data
Size
1.5 kB (1455 bytes)
Hash
a33ca47ef110b6e3ec5086b8776407d3
dff5bbbe61b4920a23fb21a7fca69ca9e94dcb6c
3e49d9dc43267590184389ab3da0cb9f7308c9c848667dab109a0f7c73450ece

HTTP Headers

GET /ffe/siteui/login/images/FB-f-Logo__blue_57.png HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f9w1lned0ruqblxi6jahwotak.filesusr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 13:16:43 GMT
Content-Type: image/png
Content-Length: 1455
Connection: keep-alive
Accept-Ranges: bytes
Content-MD5: ozykfvEQtuPsUIa4d2QH0w==
Last-Modified: Thu, 30 Jun 2016 17:48:49 GMT
Cache-Control: max-age=604801
Expires: Thu, 08 Jun 2023 13:16:44 GMT

assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.png

45.57.90.1

200 OK

1.8 kB

URL GET HTTP/1.1
assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.png
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintAA:97:3F:4D:92:D7:56:2D:4C:D6:99:9B:71:0E:24:14:8E:90:E3:EA
ValidityFri, 26 May 2023 00:00:00 GMT - Fri, 30 Jun 2023 23:23:52 GMT

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size
1.8 kB (1755 bytes)
Hash
3d194514babc5d7d010308a0f808ca51
867e51e9b4a474c19da52d6454076c007a9d01f2
7341f7b8b0ae3c0da4aea559efc31f0b53d9db9dd291664fdcf7d618fd95ed8a

HTTP Headers

GET /us/ffe/siteui/common/icons/nficon2016.png HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f9w1lned0ruqblxi6jahwotak.filesusr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 13:16:43 GMT
Content-Type: image/png
Content-Length: 1755
Connection: keep-alive
Content-MD5: PRlFFLq8XX0BAwig+AjKUQ==
Last-Modified: Tue, 21 Jun 2016 22:29:33 GMT
Cache-Control: max-age=604801
Expires: Thu, 08 Jun 2023 13:16:44 GMT
Accept-Ranges: bytes

assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.ico

45.57.90.1

200 OK

17 kB

URL GET HTTP/1.1
assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.ico
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://f9w1lned0ruqblxi6jahwotak.filesusr.com/html/c69417_3a78d13182fce9818213d74210e7f8fe.html
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint19:11:F6:8F:50:A3:8B:18:DF:3F:77:A1:EB:F5:0A:EA:64:78:46:3C
ValidityMon, 08 May 2023 00:00:00 GMT - Mon, 12 Jun 2023 22:01:08 GMT

File type
MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Size
17 kB (16958 bytes)
Hash
41b45fdce09bd6acd07c7a8949da675e
931e18dfc6e7d950dc2f2bbdfe31e1ea720acf7c
abe8012eb65c0dc0ac3e87dcc1e60e1908ebd8f12b7c47a5df1856f7a7bb1edd

HTTP Headers

GET /us/ffe/siteui/common/icons/nficon2016.ico HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://f9w1lned0ruqblxi6jahwotak.filesusr.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 01 Jun 2023 13:16:43 GMT
Content-Type: image/x-icon
Content-Length: 16958
Connection: keep-alive
Content-MD5: QbRf3OCb1qzQfHqJSdpnXg==
Last-Modified: Tue, 21 Jun 2016 21:54:27 GMT
Cache-Control: max-age=604801
Expires: Thu, 08 Jun 2023 13:16:44 GMT
Accept-Ranges: bytes

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (20)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML