Report - shaney94.github.io/semanticexp

Report Overview

Submitted URL
shaney94.github.io/semanticexp
IP
185.199.109.153
ASN
#54113 FASTLY
Submitted
2024-04-19 17:51:18
Access
public
Website Title
Netflix - Watch TV Shows Online, Watch Movies Online
Final URL
shaney94.github.io/semanticexp/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
12
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
shaney94.github.io	unknown	unknown	No data	No data	6.0 kB	68 kB	185.199.109.153
cdn.cookielaw.org	502	2011-06-20	2013-12-28	2024-04-19	5.3 kB	184 kB	104.19.178.52
assets.nflxext.com	3871	2011-02-11	2015-07-22	2024-04-19	9.0 kB	1.8 MB	45.57.90.1
occ-0-3419-3418.1.nflxso.net	63723	unknown	No data	No data	580 B	254 kB	45.57.89.164
ae.nflximg.net	16869	2012-06-12	2015-11-12	2024-04-13	2.0 kB	6.1 kB	23.54.134.170
www.netflix.com	1625	1997-11-11	2012-05-21	2024-04-09	544 B	1.3 kB	54.74.73.31
ichnaea-web.netflix.com	2763	1997-11-11	2018-03-20	2024-03-26	1.1 kB	2.6 kB	52.31.74.23
geolocation.onetrust.com	802	2004-01-12	2018-02-07	2024-04-19	481 B	468 B	104.18.32.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	shaney94.github.io/semanticexp	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (18)

	URL	Size	First Seen	Last Seen
	shaney94.github.io/semanticexp/	567 B	2023-03-07	2024-04-19
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:10:28 Last Seen2024-04-19 19:51:26 Times Seen35 Hash b9dcf104490cd9a77d50eb7218fd8a87 5b06c79015e384270772932be0168ff62f1e1d59 667429d772dd3215f8cf885a984d724014af4f01414a108b9b1c448a016d4849 Loading...

	shaney94.github.io/semanticexp/	29 B	2023-03-07	2024-05-01
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:35 Last Seen2024-05-01 20:19:11 Times Seen282 Hash b614eb30a85e093a8c253867ecaef388 c0d460c8bf5d297b618be148f562721492eaf3c3 9810c4dcb8cc5e81bf8ed159ddf2e4b83114bcf6a1f2dda230e4fbc2eb7a96b8 Loading...

	shaney94.github.io/semanticexp/	221 B	2023-03-07	2024-04-30
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:02:47 Last Seen2024-04-30 15:25:36 Times Seen220 Hash a61e8e2ae452c620f228a342439c9490 1c2443e52f3d6207d07790d83e8f70f9925cdbbc 3002909d083e55345c09d9aef1ddb846c46d2ffa01c56b1a198750b4be51d40f Loading...

	shaney94.github.io/semanticexp/	202 B	2024-04-19	2024-04-19
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-19 19:51:26 Last Seen2024-04-19 19:51:26 Times Seen1 Hash cd4eb9807266b048efe2aab8fe24cdb4 3241a6c519c0e439afcd1ebba095572a0e80af2f f2c06eea269baf222fabaec853e1034cd868e0d1182e43152624f937eed77ac8 Loading...

	shaney94.github.io/semanticexp/	374 B	2023-03-07	2024-04-30
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:02:46 Last Seen2024-04-30 15:25:36 Times Seen221 Hash 65a81ff6df898a4bbe90b2cc2c8b5e40 ed60e60aa6bc34db91d9cdde37d164e1fad24083 868c62d3e4ca4070aba3ecbd57e49941c480611cf9e129e2299ea174d802cee8 Loading...

	shaney94.github.io/semanticexp/	2.9 kB	2023-03-07	2024-04-30
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:02:47 Last Seen2024-04-30 15:25:36 Times Seen221 Hash 096988ffeee1c7f6c9704d2b0862163f 0df3e2a0f6b60d648331747892fe0a81ba6f4b36 be54b0e4d2cfacf935c717292d77bcc6a623d91a767ae5db9f22df49bb9bebd9 Loading...

	shaney94.github.io/semanticexp/	118 B	2023-03-07	2024-04-30
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:02:47 Last Seen2024-04-30 15:25:36 Times Seen221 Hash 11c14919ed3d06e54cf8f6f86cef6a71 de2d4401f34cc4020db235d13f0cdfea25b8428b ba5add5f84a8fe069b4107c643e8a9ede7d04c6e0ff96ab6c6d083d83cac5178 Loading...

	shaney94.github.io/semanticexp/	397 B	2023-03-07	2024-04-30
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:02:47 Last Seen2024-04-30 15:25:36 Times Seen221 Hash cce0ab22819f9f15acba59140c691bc8 c575d170c8deb665091c7eb8d06dcd1e78700626 658f7bb822289c279606639f07073f541eb78c8620858f5265f7e94581a4f74a Loading...

	shaney94.github.io/semanticexp/	233 B	2023-03-07	2024-04-30
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:02:46 Last Seen2024-04-30 15:25:36 Times Seen221 Hash ee74e404a7f8b94f6821d6f0b1101636 4e977d314377b26bb61864486f32a0214cdfc06c a3f525d5fd2d47ce76155eed70731d98280691408d7443d4fb1f98838296870a Loading...

	shaney94.github.io/semanticexp/	143 B	2023-03-07	2024-04-30
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:02:46 Last Seen2024-04-30 15:25:36 Times Seen221 Hash b25a09aef9c55a5a1af9dd0e61ef81c8 240ac9cee2e6b6b072e67ec5374b23b9f6de3c18 fd34cfa82b57907348a1a0de3b09025d1b3fea555f90145f1db05345dd2fe249 Loading...

	shaney94.github.io/semanticexp/	6.5 kB	2023-03-13	2024-04-19
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-13 02:39:21 Last Seen2024-04-19 19:51:26 Times Seen102 Hash b924b0850c71e1b3b9947b030e4c370f a99f3c546f2d47a3695e629a2507ef34d7375578 b5d8714c9eb6f727b286dc43341c4449309208e608affde74af861d1ddd22417 Loading...

	shaney94.github.io/semanticexp/	66 B	2023-03-07	2024-04-26
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:35 Last Seen2024-04-26 19:25:03 Times Seen230 Hash 4abc64a802920a119c8f83c365c29d2b 8635509457d014184437306b4c3cd02e8998f535 e90e0f55b55b9acb2af9d0ebdfbd3223b27fa73e39f2a81513df914b556a5871 Loading...

	assets.nflxext.com/web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.da83d6532dfd7ac03621.js	3.0 MB	2024-02-07	2024-04-19
Pretty URL assets.nflxext.com/web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.da83d6532dfd7ac03621.js IP 45.57.90.1 ASN #40027 NETFLIX-ASN Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-07 07:34:22 Last Seen2024-04-19 19:51:26 Times Seen12 Hash fce659dd09fcc0ca938f72cc03059c93 18cc5f0a01ee25d76f5e6e120e8288343f43b2aa 122ddb397fe8ec2063bfb8f98037f173fb0767bdd043e856f5f0e3e2132c9bda Loading...

	cdn.cookielaw.org/scripttemplates/otSDKStub.js	21 kB	2024-04-16	2024-05-02
Pretty URL cdn.cookielaw.org/scripttemplates/otSDKStub.js IP 104.19.178.52 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-16 08:31:16 Last Seen2024-05-02 16:50:20 Times Seen1898 Hash 0cd317a7b9c520801230e944f7d50e41 e3985ff0c2e8b1eaacb617c7c5af5bebfcbceda6 6f08699117c1f15f6d35e7b4380d12d18a1881f075e177b5853b1017a3307544 Loading...

	shaney94.github.io/semanticexp/	149 kB	2024-04-19	2024-04-19
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-19 19:51:26 Last Seen2024-04-19 19:51:26 Times Seen1 Hash 060c0fe0df09639e8ead9bb6c2917c53 92619e8c8ba42ed14588d12b63553837a31207f1 bf6e68305fa28d57555f79ae06a3a5d7ae2eb12c6e34defca133a319795f6619 Loading...

	shaney94.github.io/semanticexp/	371 B	2023-03-07	2024-04-30
Pretty URL shaney94.github.io/semanticexp/ IP 185.199.109.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:03:35 Last Seen2024-04-30 15:25:36 Times Seen206 Hash 6ff41c409959148570e728b6be6ec3a5 136ac0bf11c4c664707c4f230a7af4f40faa0346 b540a71ee97da488e71c9ea903420170793f3b43914e41e512714e20d9806169 Loading...

	cdn.cookielaw.org/scripttemplates/202402.1.0/otBannerSdk.js	441 kB	2024-02-25	2024-05-02
Pretty URL cdn.cookielaw.org/scripttemplates/202402.1.0/otBannerSdk.js IP 104.19.178.52 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-02-25 16:25:21 Last Seen2024-05-02 15:51:46 Times Seen1869 Hash 6b979743e4b75a88762893dfd587d6d7 505bec6656258a9d78a73033bf269dfcd96fa0e6 2e789e43937c7abc5959eba06825459f4e08e050ff9ea43ab8ec5a041a3e7558 Loading...

		Size	First Seen	Last Seen
	#1 Write - e17f9caf1af6f4f22ead280ead6d226c	443 B	2024-04-19	2024-04-19
Pretty Observations First Seen2024-04-19 19:51:26 Last Seen2024-04-19 19:51:26 Times Seen1 Hash e17f9caf1af6f4f22ead280ead6d226c 64effcf2a126edf8cad4bf9ce497afbb9833340e 70f95a1091879e711c4b4a1b11f3659e5814695405cca0d25ccedd3a6c107514 Loading...

HTTP Transactions (47)

URL IP Response Size

shaney94.github.io/semanticexp

185.199.109.153

301 Moved Permanently

162 B

URL User Request GET HTTP/2
shaney94.github.io/semanticexp
IP
185.199.109.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /semanticexp HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: GitHub.com
content-type: text/html
permissions-policy: interest-cohort=()
location: https://shaney94.github.io/semanticexp/
x-github-request-id: C57C:28A741:3F6783A:40C5E07:6622AD35
accept-ranges: bytes
age: 452
date: Fri, 19 Apr 2024 17:50:49 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713549049.470693,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: e80bf4ce8e363d12f0b18309642b03f4eafad117
content-length: 162
X-Firefox-Spdy: h2

shaney94.github.io/semanticexp/

185.199.109.153

200 OK

46 kB

URL User Request GET HTTP/2
shaney94.github.io/semanticexp/
IP
185.199.109.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (21624)
Size
46 kB (46367 bytes)
Hash
fbceb86402842a1e6f5bf61d0a356adf
047a168acc4693c9c4bc273c89daa0de2f5830b4
f10fac53745d313f5553a634023a6973b348d1ad17ec21c8b66432ba51c2cb14

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /semanticexp/ HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Tue, 13 Feb 2024 12:23:59 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"65cb5f5f-48a3a"
expires: Fri, 19 Apr 2024 12:28:20 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: D84A:2E541F:7473C2D:76F6CCF:6622610C
accept-ranges: bytes
age: 452
date: Fri, 19 Apr 2024 17:50:49 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1713549050.502782,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: b272af952dd5c2e93eff8ab041d3ded773855972
content-length: 46367
X-Firefox-Spdy: h2

cdn.cookielaw.org/scripttemplates/otSDKStub.js

104.19.178.52

200 OK

6.9 kB

URL GET HTTP/2
cdn.cookielaw.org/scripttemplates/otSDKStub.js
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (21229)
Size
6.9 kB (6882 bytes)
Hash
0cd317a7b9c520801230e944f7d50e41
e3985ff0c2e8b1eaacb617c7c5af5bebfcbceda6
6f08699117c1f15f6d35e7b4380d12d18a1881f075e177b5853b1017a3307544

HTTP Headers

GET /scripttemplates/otSDKStub.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:49 GMT
content-type: application/javascript
content-length: 6882
content-encoding: gzip
content-md5: zgTRIDojRJmnmBTwUyI2Vw==
last-modified: Thu, 18 Apr 2024 12:14:40 GMT
etag: 0x8DC5FA11F9DF6DF
x-ms-request-id: 18a0208e-901e-0060-0caa-91451c000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 85418
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876ebd38eeb056ab-OSL
X-Firefox-Spdy: h2

assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp.c2d3fe8e25993e76ae25.css

45.57.90.1

200 OK

1.3 kB

URL GET HTTP/1.1
assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp.c2d3fe8e25993e76ae25.css
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint4D:42:BA:1B:8F:26:28:DD:AD:D9:19:18:B4:26:11:E3:CC:82:60:79
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 01 May 2024 23:18:49 GMT

File type
ASCII text, with very long lines (5391), with no line terminators
Size
1.3 kB (1331 bytes)
Hash
ecc94aca72063314d951b2195c4627dc
fd35e167d296663086116a27989ef151ca715b13
17e17d27c179e8eb48cc84a4a4ac89e696b896119c2ae077794bf2728a3b8ee6

HTTP Headers

GET /web/ffe/wp/less/signup/nmhp/nmhp.c2d3fe8e25993e76ae25.css HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:49 GMT
Content-Type: text/css
Content-Length: 1331
Connection: keep-alive
Last-Modified: Mon, 31 Jul 2023 12:21:21 GMT
Content-Encoding: gzip
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:50 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp-reskin.6a003302aa4c93b29722.css

45.57.90.1

200 OK

523 B

URL GET HTTP/1.1
assets.nflxext.com/web/ffe/wp/less/signup/nmhp/nmhp-reskin.6a003302aa4c93b29722.css
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint9C:EA:73:58:F9:21:B0:E4:7E:44:A6:B8:22:82:EA:9F:D5:05:82:78
ValidityWed, 03 Apr 2024 00:00:00 GMT - Fri, 03 May 2024 22:15:02 GMT

File type
ASCII text, with very long lines (523), with no line terminators
Size
523 B (523 bytes)
Hash
03451f9d13e8c7671cd1ce52b9529149
f8c482e7761a79edb7c270b1d8d9d7efde24bd44
bcf36fe4e5ddd746faff3173d643fb713f0056a92b4b5e24462865f989c0bac9

HTTP Headers

GET /web/ffe/wp/less/signup/nmhp/nmhp-reskin.6a003302aa4c93b29722.css HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:49 GMT
Content-Type: text/css
Content-Length: 523
Connection: keep-alive
Last-Modified: Thu, 27 Jul 2023 20:30:51 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:50 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/acquisition/common/transparent_1x1.png

45.57.90.1

200 OK

272 B

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/acquisition/common/transparent_1x1.png
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint4D:42:BA:1B:8F:26:28:DD:AD:D9:19:18:B4:26:11:E3:CC:82:60:79
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 01 May 2024 23:18:49 GMT

File type
PNG image data, 1 x 1, 1-bit grayscale, non-interlaced
Size
272 B (272 bytes)
Hash
5fe512663e1ab802a476941a9ce6f5b5
33c7de23b4693f9bc5a5747428be5de73519b449
6e43a8bb3f972ef0b96dc5e7b24340934646fb8932bda39a8feea67cbbe3e145

HTTP Headers

GET /ffe/siteui/acquisition/common/transparent_1x1.png HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:49 GMT
Content-Type: image/png
Content-Length: 272
Connection: keep-alive
Content-MD5: X+USZj4auAKkdpQanOb1tQ==
Last-Modified: Wed, 01 Jul 2020 17:38:24 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:50 GMT
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png

45.57.90.1

200 OK

20 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint4D:42:BA:1B:8F:26:28:DD:AD:D9:19:18:B4:26:11:E3:CC:82:60:79
ValidityTue, 26 Mar 2024 00:00:00 GMT - Wed, 01 May 2024 23:18:49 GMT

File type
PNG image data, 150 x 210, 8-bit colormap, non-interlaced
Size
20 kB (20506 bytes)
Hash
587e040f20259792094901ca9739669e
d48b9de536ecd248ab1d923bf837c6958a9e0cec
e1fa26cc34fda574edc01d09e374d6f10735a3fa621bdde87c104ee15453d4b6

HTTP Headers

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/boxshot.png HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:49 GMT
Content-Type: image/png
Content-Length: 20506
Connection: keep-alive
Content-MD5: WH4EDyAll5IJSQHKlzlmng==
Last-Modified: Wed, 14 Nov 2018 18:48:14 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:50 GMT
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png

45.57.90.1

200 OK

11 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint9C:EA:73:58:F9:21:B0:E4:7E:44:A6:B8:22:82:EA:9F:D5:05:82:78
ValidityWed, 03 Apr 2024 00:00:00 GMT - Fri, 03 May 2024 22:15:02 GMT

File type
PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Size
11 kB (11418 bytes)
Hash
77994a67327ba957dfd880e33a91f041
5ba507de8c9bc4a063beecb569e89bcf9e0a901c
b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056

HTTP Headers

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/tv.png HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:49 GMT
Content-Type: image/png
Content-Length: 11418
Connection: keep-alive
Content-MD5: d5lKZzJ7qVff2IDjOpHwQQ==
Last-Modified: Wed, 14 Nov 2018 18:20:41 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:50 GMT
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg

45.57.90.1

200 OK

50 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintA0:32:B8:7B:25:3F:38:95:AB:21:97:D8:F0:71:16:3D:2C:D0:7B:6B
ValidityFri, 05 Apr 2024 00:00:00 GMT - Sun, 05 May 2024 23:43:42 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x480, components 3
Size
50 kB (49614 bytes)
Hash
a48333d43c19612ed61987fa5dbff3c5
8a8781250b96fee7830eb63ee8dda19e5c871881
492fdebd363e40cbba153a244bcfe2a7f5f7cf20aff0805fe45d5c7e2180b875

HTTP Headers

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/mobile-0819.jpg HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:49 GMT
Content-Type: image/jpeg
Content-Length: 49614
Connection: keep-alive
Content-MD5: pIMz1DwZYS7WGYf6Xb/zxQ==
Last-Modified: Wed, 14 Aug 2019 17:59:05 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:50 GMT
Accept-Ranges: bytes

assets.nflxext.com/web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.da83d6532dfd7ac03621.js

45.57.90.1

200 OK

621 kB

URL GET HTTP/1.1
assets.nflxext.com/web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.da83d6532dfd7ac03621.js
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint5C:6D:63:AE:1C:17:1C:36:2A:F7:44:23:3C:5E:ED:4C:8A:C6:45:14
ValidityThu, 28 Mar 2024 00:00:00 GMT - Mon, 29 Apr 2024 00:37:43 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Size
621 kB (620947 bytes)
Hash
fce659dd09fcc0ca938f72cc03059c93
18cc5f0a01ee25d76f5e6e120e8288343f43b2aa
122ddb397fe8ec2063bfb8f98037f173fb0767bdd043e856f5f0e3e2132c9bda

HTTP Headers

GET /web/ffe/wp/signup/nmhp/nmhpFrameworkClient.js.da83d6532dfd7ac03621.js HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:49 GMT
Content-Type: application/javascript
Content-Length: 620947
Connection: keep-alive
Last-Modified: Tue, 06 Feb 2024 14:07:34 GMT
Content-Encoding: gzip
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:50 GMT
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

shaney94.github.io/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=nmLanding

185.199.109.153

404 Not Found

5.1 kB

URL GET HTTP/2
shaney94.github.io/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=nmLanding
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.1 kB (5142 bytes)
Hash
1eb970ce5a18bec7165f016df8238566
9efd1514af80fe14db4ed28e9bc53975b9ee089c
70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=css&modalView=nmLanding HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/semanticexp/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
etag: W/"661dd73f-239b"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-github-request-id: 5C14:2B2A1B:3F23F24:4077C78:6622AEF9
accept-ranges: bytes
age: 0
date: Fri, 19 Apr 2024 17:50:49 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713549050.749372,VS0,VE126
vary: Accept-Encoding
x-fastly-request-id: c2a93e0b951cddf8e5527e1353d713d21e2ccc20
content-length: 5142
X-Firefox-Spdy: h2

assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile.png

45.57.90.1

200 OK

137 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile.png
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintA7:40:41:40:83:0A:D4:E9:8F:C6:B3:9A:E6:40:52:3D:E3:C7:7D:C5
ValiditySun, 07 Apr 2024 00:00:00 GMT - Sun, 12 May 2024 22:59:22 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
137 kB (137040 bytes)
Hash
0b3d821493d5748d829c852bbd6d292d
2b83523c3e0731a1aebace26ecbebf02a63a6b19
81cf64888a7b3f6848b09695b034026d9ad685665b91d54597ecbb6197c6acbb

HTTP Headers

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/device-pile.png HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:49 GMT
Content-Type: image/png
Content-Length: 137040
Connection: keep-alive
Content-MD5: Cz2CFJPVdI2CnIUrvW0pLQ==
Last-Modified: Wed, 23 Jan 2019 00:35:07 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:50 GMT
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/vlv3/5e16108c-fd30-46de-9bb8-0b4e1bbbc509/68483501-f27e-4794-a811-e86fa2e3a25f/US-en-20240205-popsignuptwoweeks-perspective_alpha_website_medium.jpg

45.57.90.1

200 OK

197 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/vlv3/5e16108c-fd30-46de-9bb8-0b4e1bbbc509/68483501-f27e-4794-a811-e86fa2e3a25f/US-en-20240205-popsignuptwoweeks-perspective_alpha_website_medium.jpg
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint9C:EA:73:58:F9:21:B0:E4:7E:44:A6:B8:22:82:EA:9F:D5:05:82:78
ValidityWed, 03 Apr 2024 00:00:00 GMT - Fri, 03 May 2024 22:15:02 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
197 kB (197104 bytes)
Hash
aecf9b56a1449371f7ca6fcb7d4ef5ec
4846e66ad8280ae334682f5bcc0cab0799dccc1e
d2fbea011b07a7f6dc1d3d30f534967f99586d404704b0532a768cd0bc1387de

HTTP Headers

GET /ffe/siteui/vlv3/5e16108c-fd30-46de-9bb8-0b4e1bbbc509/68483501-f27e-4794-a811-e86fa2e3a25f/US-en-20240205-popsignuptwoweeks-perspective_alpha_website_medium.jpg HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:49 GMT
Content-Type: image/jpeg
Content-Length: 197104
Connection: keep-alive
Accept-Ranges: bytes
Content-MD5: rs+bVqFEk3H3ym/LfU717A==
Last-Modified: Wed, 07 Feb 2024 14:47:18 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:50 GMT

shaney94.github.io/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=nmLanding

185.199.109.153

404 Not Found

5.1 kB

URL GET HTTP/2
shaney94.github.io/personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=nmLanding
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.1 kB (5142 bytes)
Hash
1eb970ce5a18bec7165f016df8238566
9efd1514af80fe14db4ed28e9bc53975b9ee089c
70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /personalization/cl2/freeform/WebsiteDetect?source=wwwhead&fetchType=js&modalView=nmLanding HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/semanticexp/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
etag: W/"661dd73f-239b"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-github-request-id: 5C14:2B2A1B:3F23F24:4077C78:6622AEF9
accept-ranges: bytes
date: Fri, 19 Apr 2024 17:50:50 GMT
via: 1.1 varnish
age: 1
x-served-by: cache-hel1410020-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1713549051.598008,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: f20d72ea21f8c21c5bfce26452d4f0e2854d5ed7
content-length: 5142
X-Firefox-Spdy: h2

cdn.cookielaw.org/consent/87b6a5c0-0104-4e96-a291-092c11350111/87b6a5c0-0104-4e96-a291-092c11350111.json

104.19.178.52

200 OK

2.0 kB

URL GET HTTP/2
cdn.cookielaw.org/consent/87b6a5c0-0104-4e96-a291-092c11350111/87b6a5c0-0104-4e96-a291-092c11350111.json
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JSON text data
Size
2.0 kB (2040 bytes)
Hash
cd5e664712a0012697e906cbde29a69f
c0e373c85a991d0fca73350fd0647946f9b77d65
7ae9591a1c79e8ebf423d525a348e3757e42b1387bac1cc78b5602ac15697a9a

HTTP Headers

GET /consent/87b6a5c0-0104-4e96-a291-092c11350111/87b6a5c0-0104-4e96-a291-092c11350111.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:50 GMT
content-type: application/x-javascript
content-length: 2040
cf-ray: 876ebd3e4ff5712f-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DC41E51D26EACA
expires: Sat, 20 Apr 2024 17:50:50 GMT
last-modified: Mon, 11 Mar 2024 16:05:47 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: GL0usLX8puPCz9ysSsZkAA==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 56210234-501e-008b-781b-7c3dee000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2

45.57.90.1

200 OK

53 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint8D:47:71:4D:23:F2:C9:6F:E8:82:E1:CE:AF:B3:83:E9:AF:56:79:D5
ValidityThu, 11 Apr 2024 00:00:00 GMT - Sat, 11 May 2024 23:14:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 53304, version 2.6554
Size
53 kB (53304 bytes)
Hash
0bf3177f1fed6d953178221fba43c7e8
83d9f039f1ba7209321c7da72d3dc6a9aa5e2ab3
c0bceb927c506dce9f6e6f5f570e641ad580b9554be06f61508a4aee32380167

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Rg.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:50 GMT
Content-Type: font/woff2
Content-Length: 53304
Connection: keep-alive
Content-MD5: C/MXfx/tbZUxeCIfukPH6A==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:51 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

shaney94.github.io/personalization/cl2/freeform/WebsiteScreen?source=wwwhead&fetchType=js&winw=1280&winh=1024&screenw=1280&screenh=1024&ratio=1

185.199.109.153

404 Not Found

5.1 kB

URL GET HTTP/2
shaney94.github.io/personalization/cl2/freeform/WebsiteScreen?source=wwwhead&fetchType=js&winw=1280&winh=1024&screenw=1280&screenh=1024&ratio=1
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.1 kB (5142 bytes)
Hash
1eb970ce5a18bec7165f016df8238566
9efd1514af80fe14db4ed28e9bc53975b9ee089c
70d613e3acfba24fd2876fcbacaf639e1e111ef4d54baf70761c47673f37d6a3

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /personalization/cl2/freeform/WebsiteScreen?source=wwwhead&fetchType=js&winw=1280&winh=1024&screenw=1280&screenh=1024&ratio=1 HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/semanticexp/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
etag: W/"661dd73f-239b"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-github-request-id: 435C:2C77F2:1746FE6:17C7056:6622AEFA
accept-ranges: bytes
age: 0
date: Fri, 19 Apr 2024 17:50:50 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713549051.598530,VS0,VE121
vary: Accept-Encoding
x-fastly-request-id: 589d57d4d6faede93e2400474e54424567a67c6d
content-length: 5142
X-Firefox-Spdy: h2

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Blk.woff2

45.57.90.1

200 OK

55 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Blk.woff2
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint5C:6D:63:AE:1C:17:1C:36:2A:F7:44:23:3C:5E:ED:4C:8A:C6:45:14
ValidityThu, 28 Mar 2024 00:00:00 GMT - Mon, 29 Apr 2024 00:37:43 GMT

File type
Web Open Font Format (Version 2), TrueType, length 55436, version 2.6554
Size
55 kB (55436 bytes)
Hash
3a098baa43c06a9b1c6ca289ff023250
20269039a89ee7fda89b7bf2bb2f4c2451cba2c1
eaa7941cbc06d30c54d52c6d3272a7549d45a23baf7405c6712d97904692da9d

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Blk.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:50 GMT
Content-Type: font/woff2
Content-Length: 55436
Connection: keep-alive
Content-MD5: OgmLqkPAapscbKKJ/wIyUA==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:51 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Md.woff2

45.57.90.1

200 OK

54 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Md.woff2
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
FingerprintF2:C1:BA:EF:55:99:AC:C4:16:49:85:D4:FE:02:84:EA:40:3D:58:C6
ValidityTue, 02 Apr 2024 00:00:00 GMT - Sat, 04 May 2024 23:53:25 GMT

File type
Web Open Font Format (Version 2), TrueType, length 53940, version 2.6554
Size
54 kB (53940 bytes)
Hash
ea769921b0cfa4fc6d4d1a2e0b1fa5ff
34dcd2875c9752ebba6f894eb8d410e4958cc1b4
9ac2bd03fcde501b3f30f47ab1fae62161f87808ea6411f38e8feaa4bbddc42e

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Md.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:50 GMT
Content-Type: font/woff2
Content-Length: 53940
Connection: keep-alive
Content-MD5: 6naZIbDPpPxtTRouCx+l/w==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:51 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

occ-0-3419-3418.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABejKYujIIDQciqmGJJ8BtXkYKKTi5jiqexltvN1YmvXYIfX8B9CYwooUSIzOKneblRFthZAFsYLMgKMyNfeHwk16DmEkpIIcb6A3.png?r=f55

45.57.89.164

200 OK

253 kB

URL GET HTTP/1.1
occ-0-3419-3418.1.nflxso.net/dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABejKYujIIDQciqmGJJ8BtXkYKKTi5jiqexltvN1YmvXYIfX8B9CYwooUSIzOKneblRFthZAFsYLMgKMyNfeHwk16DmEkpIIcb6A3.png?r=f55
IP
45.57.89.164:443
ASN
#2906 AS-SSI

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint8A:3C:64:07:0E:EE:3B:67:C2:B7:18:A4:BF:92:38:2B:0C:6C:7F:4C
ValidityWed, 10 Apr 2024 00:00:00 GMT - Sun, 12 May 2024 04:25:32 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
253 kB (253151 bytes)
Hash
bac31463a9cffbfeed00e05c47a46595
e4618c8bc554902a28d120bc60500d8726470579
eea9de1cdc682d9ea1d1e395e35baa6e35a6d685664bd636e8bf2900158134d1

HTTP Headers

GET /dnm/api/v6/19OhWN2dO19C9txTON9tvTFtefw/AAAABejKYujIIDQciqmGJJ8BtXkYKKTi5jiqexltvN1YmvXYIfX8B9CYwooUSIzOKneblRFthZAFsYLMgKMyNfeHwk16DmEkpIIcb6A3.png?r=f55 HTTP/1.1
Host: occ-0-3419-3418.1.nflxso.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:50 GMT
Content-Type: image/png
Content-Length: 253151
Connection: keep-alive
Accept-CH: Device-Memory, Downlink, DPR, ECT, RTT, Save-Data, Viewport-Width, Width
Access-Control-Allow-Origin: *
Cache-Control: max-age=31104000, public, s-maxage=604800
ETag: "bac31463a9cffbfeed00e05c47a46595"
Last-Modified: Thu, 01 Jun 2023 20:52:44 GMT
Timing-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/download-icon.gif

45.57.90.1

200 OK

22 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/download-icon.gif
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint5C:6D:63:AE:1C:17:1C:36:2A:F7:44:23:3C:5E:ED:4C:8A:C6:45:14
ValidityThu, 28 Mar 2024 00:00:00 GMT - Mon, 29 Apr 2024 00:37:43 GMT

File type
GIF image data, version 89a, 100 x 100
Size
22 kB (22171 bytes)
Hash
dd3cb78db78c3e0a13c9b77ee19deee6
9de1915d6543939218ff991b39ee5f9a11aad6f5
4f99e4c2ed1c2b7de72f47102c64d601567f8efaad5944a08c86786cad4050e6

HTTP Headers

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/download-icon.gif HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:51 GMT
Content-Type: image/gif
Content-Length: 22171
Connection: keep-alive
Content-MD5: 3Ty3jbeMPgoTybd+4Z3u5g==
Last-Modified: Mon, 12 Nov 2018 22:40:57 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:52 GMT
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Bd.woff2

45.57.90.1

200 OK

55 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Bd.woff2
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint5C:6D:63:AE:1C:17:1C:36:2A:F7:44:23:3C:5E:ED:4C:8A:C6:45:14
ValidityThu, 28 Mar 2024 00:00:00 GMT - Mon, 29 Apr 2024 00:37:43 GMT

File type
Web Open Font Format (Version 2), TrueType, length 55228, version 2.6554
Size
55 kB (55228 bytes)
Hash
88c69f2f77619fc71f22d83643f98645
9074bca7ca0541efd221d12d30a33e3b74cf824b
6cc71e5053b6599423f3ba402e6e50c04907b9ba93c3211a56dd32e3a2e6cf4d

HTTP Headers

GET /ffe/siteui/fonts/netflix-sans/v3/NetflixSans_W_Bd.woff2 HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://assets.nflxext.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:51 GMT
Content-Type: font/woff2
Content-Length: 55228
Connection: keep-alive
Content-MD5: iMafL3dhn8cfItg2Q/mGRQ==
Last-Modified: Thu, 17 Jan 2019 20:16:30 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:52 GMT
Access-Control-Allow-Origin: *
Accept-Ranges: bytes

assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v

45.57.90.1

206 Partial Content

270 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint5C:6D:63:AE:1C:17:1C:36:2A:F7:44:23:3C:5E:ED:4C:8A:C6:45:14
ValidityThu, 28 Mar 2024 00:00:00 GMT - Mon, 29 Apr 2024 00:37:43 GMT

File type
ISO Media, Apple iTunes Video (.M4V) Video
Size
270 kB (270046 bytes)
Hash
3cb12db7c672b33735006480a455ec72
d060e5996b3f7143755496cf2a06de5a59c283ce
4c7a552d219146985961bf78d9083b7e2c1a82c4ada5d959f48b3e53754c9049

HTTP Headers

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-tv-0819.m4v HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 206 Partial Content
Server: nginx
Date: Fri, 19 Apr 2024 17:50:51 GMT
Content-Type: video/x-m4v
Content-Length: 270046
Connection: keep-alive
Content-MD5: PLEtt8Zyszc1AGSApFXscg==
Last-Modified: Mon, 12 Aug 2019 20:49:12 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:52 GMT
Content-Range: bytes 0-270045/270046

assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v

45.57.90.1

206 Partial Content

266 kB

URL GET HTTP/1.1
assets.nflxext.com/ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint9C:EA:73:58:F9:21:B0:E4:7E:44:A6:B8:22:82:EA:9F:D5:05:82:78
ValidityWed, 03 Apr 2024 00:00:00 GMT - Fri, 03 May 2024 22:15:02 GMT

File type
ISO Media, Apple iTunes Video (.M4V) Video
Size
266 kB (266160 bytes)
Hash
3e55c56205a89c859fed005ae1729faa
b33bba44ef2d6932707d0eef8e00b0ed534fcbb7
3eec290a7f7da9abb00b49ca84f5f16e6d45ca33d40fd8ede4380835d6161d71

HTTP Headers

GET /ffe/siteui/acquisition/ourStory/fuji/desktop/video-devices.m4v HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 206 Partial Content
Server: nginx
Date: Fri, 19 Apr 2024 17:50:51 GMT
Content-Type: video/x-m4v
Content-Length: 266160
Connection: keep-alive
Content-MD5: PlXFYgWonIWf7QBa4XKfqg==
Last-Modified: Wed, 09 Jan 2019 20:47:49 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:52 GMT
Content-Range: bytes 0-266159/266160

assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.png

45.57.90.1

200 OK

1.8 kB

URL GET HTTP/1.1
assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.png
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint5C:6D:63:AE:1C:17:1C:36:2A:F7:44:23:3C:5E:ED:4C:8A:C6:45:14
ValidityThu, 28 Mar 2024 00:00:00 GMT - Mon, 29 Apr 2024 00:37:43 GMT

File type
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Size
1.8 kB (1755 bytes)
Hash
3d194514babc5d7d010308a0f808ca51
867e51e9b4a474c19da52d6454076c007a9d01f2
7341f7b8b0ae3c0da4aea559efc31f0b53d9db9dd291664fdcf7d618fd95ed8a

HTTP Headers

GET /us/ffe/siteui/common/icons/nficon2016.png HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:51 GMT
Content-Type: image/png
Content-Length: 1755
Connection: keep-alive
Content-MD5: PRlFFLq8XX0BAwig+AjKUQ==
Last-Modified: Tue, 21 Jun 2016 22:29:33 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:52 GMT
Accept-Ranges: bytes

assets.nflxext.com/us/ffe/siteui/common/icons/nficon2023.ico

45.57.90.1

200 OK

9.9 kB

URL GET HTTP/1.1
assets.nflxext.com/us/ffe/siteui/common/icons/nficon2023.ico
IP
45.57.90.1:443
ASN
#40027 NETFLIX-ASN

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.1.nflxso.net
Fingerprint9C:EA:73:58:F9:21:B0:E4:7E:44:A6:B8:22:82:EA:9F:D5:05:82:78
ValidityWed, 03 Apr 2024 00:00:00 GMT - Fri, 03 May 2024 22:15:02 GMT

File type
MS Windows icon resource - 1 icon, 48x48, 32 bits/pixel
Size
9.9 kB (9854 bytes)
Hash
58f54d9ea15176671802bebeee4da4cb
4ba1cb97814772435962f3ac25af0def81851735
9c5f7722c5df8eb24dda20ecc01c9f73e3103e10052fd980da4e7d9f753a97d3

HTTP Headers

GET /us/ffe/siteui/common/icons/nficon2023.ico HTTP/1.1
Host: assets.nflxext.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 19 Apr 2024 17:50:51 GMT
Content-Type: image/x-icon
Content-Length: 9854
Connection: keep-alive
Content-MD5: WPVNnqFRdmcYAr6+7k2kyw==
Last-Modified: Thu, 31 Aug 2023 18:57:29 GMT
Cache-Control: max-age=604801
Expires: Fri, 26 Apr 2024 17:50:52 GMT
Accept-Ranges: bytes

shaney94.github.io/personalization/log

185.199.109.153

405 Method Not Allowed

131 B

URL POST HTTP/2
shaney94.github.io/personalization/log
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
131 B (131 bytes)
Hash
9a67f98ebf567e0b2b3cdeb58be2da2d
36870e81e17d2a0ad49eaa5d208961f0290ba751
db9c83197aadfaf315c26741f15264db83844a31372701a8465737d63508df7f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

POST /personalization/log HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Netflix.ichnaea.request.type: UiRequest
Content-Type: application/json
Content-Length: 1287
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/semanticexp/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 405 Method Not Allowed
server: Varnish
retry-after: 0
accept-ranges: bytes
date: Fri, 19 Apr 2024 17:50:51 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713549052.540832,VS0,VE1
x-fastly-request-id: 479f6ec1618931bb74a31a26b0677e90ed355a4a
content-length: 131
X-Firefox-Spdy: h2

shaney94.github.io/personalization/cl2

185.199.109.153

405 Method Not Allowed

131 B

URL POST HTTP/2
shaney94.github.io/personalization/cl2
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
131 B (131 bytes)
Hash
9a67f98ebf567e0b2b3cdeb58be2da2d
36870e81e17d2a0ad49eaa5d208961f0290ba751
db9c83197aadfaf315c26741f15264db83844a31372701a8465737d63508df7f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

POST /personalization/cl2 HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Netflix.Client.Request.Name: ui/cl
Content-Type: application/json
Content-Length: 6743
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/semanticexp/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 405 Method Not Allowed
server: Varnish
retry-after: 0
accept-ranges: bytes
date: Fri, 19 Apr 2024 17:50:51 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713549052.541340,VS0,VE0
x-fastly-request-id: 13f50972bb2344f366537c97e6017e4056316c7f
content-length: 131
X-Firefox-Spdy: h2

cdn.cookielaw.org/scripttemplates/202402.1.0/otBannerSdk.js

104.19.178.52

200 OK

107 kB

URL GET HTTP/2
cdn.cookielaw.org/scripttemplates/202402.1.0/otBannerSdk.js
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
107 kB (106956 bytes)
Hash
6b979743e4b75a88762893dfd587d6d7
505bec6656258a9d78a73033bf269dfcd96fa0e6
2e789e43937c7abc5959eba06825459f4e08e050ff9ea43ab8ec5a041a3e7558

HTTP Headers

GET /scripttemplates/202402.1.0/otBannerSdk.js HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:51 GMT
content-type: application/javascript
content-length: 106956
content-encoding: gzip
content-md5: 5m3SVn9yaQSlRqLvlzjrBg==
last-modified: Mon, 04 Mar 2024 07:33:33 GMT
etag: 0x8DC3C1D6598CBF8
x-ms-request-id: c5464b4d-e01e-0037-5c1c-6eeb2f000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 67777
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876ebd445b1056ab-OSL
X-Firefox-Spdy: h2

cdn.cookielaw.org/consent/87b6a5c0-0104-4e96-a291-092c11350111/bb72f804-6254-4555-9726-5d04b8878bdc/en.json

104.19.178.52

200 OK

16 kB

URL GET HTTP/2
cdn.cookielaw.org/consent/87b6a5c0-0104-4e96-a291-092c11350111/bb72f804-6254-4555-9726-5d04b8878bdc/en.json
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JSON text data
Size
16 kB (15609 bytes)
Hash
bf6ac1727f8a72a5a76b945c6ce3fc01
2f9d91ffe7d5e4cb5921abd1672fd785803e40cd
e18e988fc702fb09a4a443b2929b26a517872eeef0372cdc7bfd861f556d321d

HTTP Headers

GET /consent/87b6a5c0-0104-4e96-a291-092c11350111/bb72f804-6254-4555-9726-5d04b8878bdc/en.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shaney94.github.io/
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:51 GMT
content-type: application/x-javascript
content-length: 15609
cf-ray: 876ebd44deb1712f-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=86400
content-encoding: gzip
etag: 0x8DC41E520D5AF3C
expires: Sat, 20 Apr 2024 17:50:51 GMT
last-modified: Mon, 11 Mar 2024 16:05:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
content-md5: 7668OEJ0MrNKjrSbLldOwg==
x-content-type-options: nosniff
x-ms-blob-type: BlockBlob
x-ms-lease-status: unlocked
x-ms-request-id: 6d118a37-701e-00a3-46c1-795c46000000
x-ms-version: 2009-09-19
server: cloudflare
X-Firefox-Spdy: h2

cdn.cookielaw.org/scripttemplates/202402.1.0/assets/otFlat.json

104.19.178.52

200 OK

3.0 kB

URL GET HTTP/2
cdn.cookielaw.org/scripttemplates/202402.1.0/assets/otFlat.json
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JSON text data
Size
3.0 kB (3041 bytes)
Hash
9b1f8ddf85fb0cbfd926faacb1fc0405
ade7f952c70f07fd3497cd3e8656ca1f28c78633
f4aaa18c55c90588c5e828e56dcc6b2cb0acf9a4280494c7d1a53fc5e3669112

HTTP Headers

GET /scripttemplates/202402.1.0/assets/otFlat.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shaney94.github.io/
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:51 GMT
content-type: application/json
content-length: 3041
content-encoding: gzip
content-md5: J2h618merDnrxos96K8Rfg==
last-modified: Mon, 04 Mar 2024 07:33:26 GMT
etag: 0x8DC3C1D6130E74D
x-ms-request-id: b8ed1b69-401e-003e-6267-91aefc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876ebd454f24712f-OSL
X-Firefox-Spdy: h2

cdn.cookielaw.org/scripttemplates/202402.1.0/assets/v2/otPcTab.json

104.19.178.52

200 OK

14 kB

URL GET HTTP/2
cdn.cookielaw.org/scripttemplates/202402.1.0/assets/v2/otPcTab.json
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
JSON text data
Size
14 kB (13599 bytes)
Hash
67eafe0ca141b9b52080c52d281966c4
93308b43a6234c01123881a7b02e9b014b082294
51dfbad7e1a227d3935016e5c4190e5e46e03daa4b249e5ded55f54235efbd7a

HTTP Headers

GET /scripttemplates/202402.1.0/assets/v2/otPcTab.json HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shaney94.github.io/
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:51 GMT
content-type: application/json
content-length: 13599
content-encoding: gzip
content-md5: cum224+VZtN2fQod9AfC0A==
last-modified: Mon, 04 Mar 2024 07:33:28 GMT
etag: 0x8DC3C1D62BEEDFC
x-ms-request-id: 00059455-901e-004f-6e67-9148d7000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876ebd454f2c712f-OSL
X-Firefox-Spdy: h2

cdn.cookielaw.org/logos/dd6b162f-1a32-456a-9cfe-897231c7763c/4345ea78-053c-46d2-b11e-09adaef973dc/Netflix_Logo_PMS.png

104.19.178.52

200 OK

16 kB

URL GET HTTP/2
cdn.cookielaw.org/logos/dd6b162f-1a32-456a-9cfe-897231c7763c/4345ea78-053c-46d2-b11e-09adaef973dc/Netflix_Logo_PMS.png
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
PNG image data, 1801 x 756, 8-bit/color RGBA, non-interlaced
Size
16 kB (16386 bytes)
Hash
dcc4094709a2dc14af288844556ff9b7
0dd0347c55ca4f5332e11d5b742babf8aebf8d6f
675dd7b68acf580f893bec532f5b260b8f984b67734a9a6831334b2ff4aad384

HTTP Headers

GET /logos/dd6b162f-1a32-456a-9cfe-897231c7763c/4345ea78-053c-46d2-b11e-09adaef973dc/Netflix_Logo_PMS.png HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:51 GMT
content-type: application/octet-stream
content-length: 16386
content-md5: 3MQJRwmi3BSvKIhEVW/5tw==
last-modified: Mon, 18 May 2020 21:10:31 GMT
etag: 0x8D7FB6FE5CFC000
x-ms-request-id: 31c6f199-001e-0072-15cd-213ecc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 85420
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876ebd45dcc656ab-OSL
X-Firefox-Spdy: h2

ae.nflximg.net/monet/scripts/adtech_iframe_target_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22US%22%2C%22region_code%22%3A%22GA%22%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%2C%22deniedConsentCookieGroups%22%3A%22C0003%2CC0004%2CC0005%22%7D

23.54.134.170

200 OK

1.5 kB

URL GET HTTP/1.1
ae.nflximg.net/monet/scripts/adtech_iframe_target_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22US%22%2C%22region_code%22%3A%22GA%22%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%2C%22deniedConsentCookieGroups%22%3A%22C0003%2CC0004%2CC0005%22%7D
IP
23.54.134.170:443
ASN
#16625 AKAMAI-AS

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subjectassets.nflxext.com
Fingerprint08:4B:E4:CC:DA:C9:B3:E4:40:7A:9F:85:D3:B6:1C:69:DE:BF:B8:CD
ValidityTue, 13 Feb 2024 00:00:00 GMT - Wed, 12 Feb 2025 20:41:11 GMT

File type
HTML document, ASCII text
Size
1.5 kB (1504 bytes)
Hash
c00758b56d72da99f3f00e05f6dfb686
b6fd9573b47257f3434a52527810edf4c67d5803
46906a172b230be72a609fb98f3689e0baaa3292de25181121d75df0f84bf644

HTTP Headers

GET /monet/scripts/adtech_iframe_target_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22US%22%2C%22region_code%22%3A%22GA%22%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%2C%22deniedConsentCookieGroups%22%3A%22C0003%2CC0004%2CC0005%22%7D HTTP/1.1
Host: ae.nflximg.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-MD5: wAdYtW1y2pnz8A4F9t+2hg==
Content-Type: text/html
ETag: "c00758b56d72da99f3f00e05f6dfb686:1667228899.15889"
Last-Modified: Mon, 31 Oct 2022 15:08:11 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 19 Apr 2024 17:50:51 GMT
Content-Length: 1504
Connection: keep-alive
Timing-Allow-Origin: *
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *

ae.nflximg.net/monet/scripts/netflix_tag_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22US%22%2C%22region_code%22%3A%22GA%22%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%2C%22deniedConsentCookieGroups%22%3A%22C0003%2CC0004%2CC0005%22%7D

23.54.134.170

3.5 kB

URL
ae.nflximg.net/monet/scripts/netflix_tag_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22US%22%2C%22region_code%22%3A%22GA%22%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%2C%22deniedConsentCookieGroups%22%3A%22C0003%2CC0004%2CC0005%22%7D
IP
23.54.134.170:0
ASN
#16625 AKAMAI-AS

Certificate
IssuerDigiCert Inc
Subjectassets.nflxext.com
Fingerprint08:4B:E4:CC:DA:C9:B3:E4:40:7A:9F:85:D3:B6:1C:69:DE:BF:B8:CD
ValidityTue, 13 Feb 2024 00:00:00 GMT - Wed, 12 Feb 2025 20:41:11 GMT

File type
HTML document, ASCII text, with very long lines (14231)
Size
3.5 kB (3530 bytes)
Hash
6ae043a3cd730f68eb53eed62fc73904
4ccb3c746aa254804918b247cd9e1991b9b00d7a
68da22e6fa7dcd05aa655f1031310948bcfdc1ab52c10bf0c0806ed8cb88aa9d

HTTP Headers

GET /monet/scripts/netflix_tag_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22US%22%2C%22region_code%22%3A%22GA%22%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%2C%22deniedConsentCookieGroups%22%3A%22C0003%2CC0004%2CC0005%22%7D HTTP/1.1
Host: ae.nflximg.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ae.nflximg.net/monet/scripts/adtech_iframe_target_05.html?data=%7B%22membership_status%22%3A%22ANONYMOUS%22%2C%22country%22%3A%22US%22%2C%22region_code%22%3A%22GA%22%2C%22is_member%22%3A%22ANONYMOUS%22%2C%22wasFormerMember%22%3Afalse%2C%22referrer%22%3A%22nmLanding%22%2C%22deniedConsentCookieGroups%22%3A%22C0003%2CC0004%2CC0005%22%7D
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-MD5: auBDo81zD2jrU+7WL8c5BA==
Content-Type: text/html
ETag: "6ae043a3cd730f68eb53eed62fc73904:1711400495.457929"
Last-Modified: Mon, 25 Mar 2024 21:01:22 GMT
Server: AkamaiNetStorage
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Fri, 19 Apr 2024 17:50:52 GMT
Content-Length: 3530
Connection: keep-alive
Timing-Allow-Origin: *
Access-Control-Max-Age: 86400
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET,POST
Access-Control-Allow-Origin: *

cdn.cookielaw.org/scripttemplates/202402.1.0/assets/otCommonStyles.css

104.19.178.52

200 OK

3.7 kB

URL GET HTTP/2
cdn.cookielaw.org/scripttemplates/202402.1.0/assets/otCommonStyles.css
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
ASCII text, with very long lines (21778), with no line terminators
Size
3.7 kB (3674 bytes)
Hash
73bc4067d312180a1b19a4d883f42d6a
ad328a9a572fbea43f295e7769835ff08f6ff1fd
d3f7b0ec4de079928a999641e781e80f33597a392a561bc460276dfb4efb6eec

HTTP Headers

GET /scripttemplates/202402.1.0/assets/otCommonStyles.css HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shaney94.github.io/
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:51 GMT
content-type: text/css
content-md5: c7xAZ9MSGAobGaTYg/Qtag==
last-modified: Mon, 04 Mar 2024 07:33:37 GMT
x-ms-request-id: aede2876-c01e-007d-2322-7c48a0000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876ebd455f37712f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

www.netflix.com/ichnaea/log

54.74.73.31

0 B

URL
www.netflix.com/ichnaea/log
IP
54.74.73.31:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /ichnaea/log HTTP/1.1
Host: www.netflix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Netflix.ichnaea.request.type: IchnaeaRequest
Content-Length: 100
Origin: https://ae.nflximg.net
DNT: 1
Connection: keep-alive
Referer: https://ae.nflximg.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: https://ae.nflximg.net
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
allow: GET, POST, OPTIONS
x-ichnaea: ~0=true~RL=511
x-content-type-options: nosniff
x-xss-protection: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 19 Apr 2024 17:50:52 GMT
x-envoy-upstream-service-time: 1
x-b3-traceid: 6622aefcf6d585dc70233ec59eb611ed
x-request-id: fb3eb264-d7c2-4435-9699-5ff50c34cf49
server: singleingestcl-secure 7d2fef14-afa5-4e81-a597-022ebdfb58b1
x-envoy-decorator-operation: lo_svc_http
content-length: 0
via: 2 i-09f59308a2303f231 (eu-west-1)
strict-transport-security: max-age=31536000; includeSubDomains
x-originating-url: http://www.netflix.com/ichnaea/log
x-netflix.nfstatus: 1_1
x-netflix.proxy.execution-time: 3
X-Firefox-Spdy: h2

ichnaea-web.netflix.com/log

52.31.74.23

0 B

URL
ichnaea-web.netflix.com/log
IP
52.31.74.23:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /log HTTP/1.1
Host: ichnaea-web.netflix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-netflix.ichnaea.request.type
Referer: https://ae.nflximg.net/
Origin: https://ae.nflximg.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://ae.nflximg.net
allow: GET, POST, OPTIONS
cache-control: no-cache, no-store, max-age=0, must-revalidate
date: Fri, 19 Apr 2024 17:50:51 GMT
expires: 0
pragma: no-cache
Server: singleingestcl-secure 6b4b7f49-a0e0-4ae4-8fc2-3bfe9addb349
strict-transport-security: max-age=31536000 ; includeSubDomains
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
Via: 1.1 i-0ded2ec97752a065a (eu-west-1)
x-b3-traceid: 6622aefc26b11c56727eacdcadc466a7
x-content-type-options: nosniff
x-envoy-decorator-operation: lo_svc_http
x-envoy-upstream-service-time: 0
x-frame-options: DENY
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 4
X-Originating-URL: https://ichnaea-web.netflix.com/log
x-request-id: 9e47a5ec-7c48-4abd-929e-dd309968e379
x-xss-protection: 0
Content-Length: 0
Connection: keep-alive

ichnaea-web.netflix.com/log

52.31.74.23

0 B

URL
ichnaea-web.netflix.com/log
IP
52.31.74.23:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /log HTTP/1.1
Host: ichnaea-web.netflix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
X-Netflix.ichnaea.request.type: IchnaeaRequest
Content-Length: 482
Origin: https://ae.nflximg.net
DNT: 1
Connection: keep-alive
Referer: https://ae.nflximg.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
access-control-allow-credentials: true
access-control-allow-headers: Accept,Accept-Language,Authorization,Content-Type,Content-Encoding,Cookie,debugRequest,X-Netflix.application.name,X-Netflix.application.version,X-Netflix.certification.version,X-Netflix.Client.Request.Name,X-Netflix.device.type,X-Netflix.esn,X-Netflix.ichnaea.request.type,X-Netflix.oauth.consumer.key,X-Netflix.oauth.token,X-Netflix.request.uuid,X-Netflix.user.id
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: https://ae.nflximg.net
allow: GET, POST, OPTIONS
cache-control: no-cache, no-store, max-age=0, must-revalidate
date: Fri, 19 Apr 2024 17:50:51 GMT
expires: 0
pragma: no-cache
Server: singleingestcl-secure c65f4eeb-26eb-4946-9ded-53185037bbb0
Via: 1.1 i-0ded2ec97752a065a (eu-west-1)
x-b3-traceid: 6622aefc1823138df05ad6d349fc654a
x-content-type-options: nosniff
x-envoy-decorator-operation: lo_svc_http
x-envoy-upstream-service-time: 0
x-frame-options: DENY
x-ichnaea: ~0=true~RL=294
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 4
X-Originating-URL: https://ichnaea-web.netflix.com/log
x-request-id: cd5da823-5be6-4a94-8392-61b48fba01fa
x-xss-protection: 0
Content-Length: 0
Connection: keep-alive

shaney94.github.io/personalization/cl2

185.199.109.153

405 Method Not Allowed

131 B

URL POST HTTP/2
shaney94.github.io/personalization/cl2
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
131 B (131 bytes)
Hash
9a67f98ebf567e0b2b3cdeb58be2da2d
36870e81e17d2a0ad49eaa5d208961f0290ba751
db9c83197aadfaf315c26741f15264db83844a31372701a8465737d63508df7f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

POST /personalization/cl2 HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Netflix.Client.Request.Name: ui/cl
Content-Type: application/json
Content-Length: 6743
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/semanticexp/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 405 Method Not Allowed
server: Varnish
retry-after: 0
accept-ranges: bytes
date: Fri, 19 Apr 2024 17:50:52 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713549053.575512,VS0,VE0
x-fastly-request-id: 0a6fb742380ba119fc94c45e83263b69707e0d07
content-length: 131
X-Firefox-Spdy: h2

shaney94.github.io/personalization/cl2

185.199.109.153

405 Method Not Allowed

131 B

URL POST HTTP/2
shaney94.github.io/personalization/cl2
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
131 B (131 bytes)
Hash
9a67f98ebf567e0b2b3cdeb58be2da2d
36870e81e17d2a0ad49eaa5d208961f0290ba751
db9c83197aadfaf315c26741f15264db83844a31372701a8465737d63508df7f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

POST /personalization/cl2 HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Netflix.Client.Request.Name: ui/cl
Content-Type: application/json
Content-Length: 6743
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/semanticexp/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 405 Method Not Allowed
server: Varnish
retry-after: 0
accept-ranges: bytes
date: Fri, 19 Apr 2024 17:50:54 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713549055.608115,VS0,VE1
x-fastly-request-id: e923967b6e362e426d1110a4671cfbbfc54ae2fd
content-length: 131
X-Firefox-Spdy: h2

cdn.cookielaw.org/logos/static/ot_guard_logo.svg

104.19.178.52

200 OK

472 B

URL GET HTTP/2
cdn.cookielaw.org/logos/static/ot_guard_logo.svg
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
gzip compressed data, from Unix
Size
472 B (472 bytes)
Hash
cc3f28616cfc174732bc506bcfb5ab24
524c7446845b2be7f34f5e6cdf17ecbe48f90f7f
33f778e793788c4a36f5934effc2ffd0db36b0df169d7c0dabef209e582951f1

HTTP Headers

GET /logos/static/ot_guard_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://shaney94.github.io/
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:51 GMT
content-type: image/svg+xml
content-md5: tXyZydHjxQshFMbbBT1/8A==
last-modified: Thu, 18 Apr 2024 19:47:54 GMT
x-ms-request-id: 1ef49b19-a01e-008f-3f65-92b0e9000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876ebd45efe5712f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

shaney94.github.io/personalization/cl2

185.199.109.153

405 Method Not Allowed

131 B

URL POST HTTP/2
shaney94.github.io/personalization/cl2
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
131 B (131 bytes)
Hash
9a67f98ebf567e0b2b3cdeb58be2da2d
36870e81e17d2a0ad49eaa5d208961f0290ba751
db9c83197aadfaf315c26741f15264db83844a31372701a8465737d63508df7f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

POST /personalization/cl2 HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Netflix.Client.Request.Name: ui/cl
Content-Type: application/json
Content-Length: 6743
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/semanticexp/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 405 Method Not Allowed
server: Varnish
retry-after: 0
accept-ranges: bytes
date: Fri, 19 Apr 2024 17:51:06 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713549067.682651,VS0,VE0
x-fastly-request-id: 25034672898e497cfecd28f3a560faea96237256
content-length: 131
X-Firefox-Spdy: h2

shaney94.github.io/personalization/cl2

185.199.109.153

405 Method Not Allowed

131 B

URL POST HTTP/2
shaney94.github.io/personalization/cl2
IP
185.199.109.153:443
ASN
#54113 FASTLY

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
131 B (131 bytes)
Hash
9a67f98ebf567e0b2b3cdeb58be2da2d
36870e81e17d2a0ad49eaa5d208961f0290ba751
db9c83197aadfaf315c26741f15264db83844a31372701a8465737d63508df7f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

POST /personalization/cl2 HTTP/1.1
Host: shaney94.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Netflix.Client.Request.Name: ui/cl
Content-Type: application/json
Content-Length: 2640
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/semanticexp/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 405 Method Not Allowed
server: Varnish
retry-after: 0
accept-ranges: bytes
date: Fri, 19 Apr 2024 17:51:14 GMT
via: 1.1 varnish
x-served-by: cache-hel1410020-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713549075.838308,VS0,VE0
x-fastly-request-id: 2556d86bc517f9cda31d89ee5fbd02230d118fe3
content-length: 131
X-Firefox-Spdy: h2

cdn.cookielaw.org/logos/static/powered_by_logo.svg

104.19.178.52

200 OK

5.2 kB

URL GET HTTP/2
cdn.cookielaw.org/logos/static/powered_by_logo.svg
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
5.2 kB (5194 bytes)
Hash
38b5388f36f8f885deb26afdac0e3116
112eccab1891a3a7cab1c5602ba72c9e127136e0
a8562f11c5a80a5c1c4ab388cfa2a69598203a57a5c67d1f80512bddd80d09ef

HTTP Headers

GET /logos/static/powered_by_logo.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:51 GMT
content-type: image/svg+xml
content-md5: Y+c301RBZNK39PvKQWrIBw==
last-modified: Wed, 17 Apr 2024 06:40:30 GMT
x-ms-request-id: 3bc77349-c01e-006d-2ffa-908dc8000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 85420
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876ebd45dcc856ab-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

geolocation.onetrust.com/cookieconsentpub/v1/geo/location

104.18.32.137

200 OK

72 B

URL GET HTTP/2
geolocation.onetrust.com/cookieconsentpub/v1/geo/location
IP
104.18.32.137:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectonetrust.com
Fingerprint9B:BC:B4:A8:C7:6C:6C:02:0F:FD:9F:06:F2:67:FB:DD:A1:E0:3F:47
ValidityMon, 13 Nov 2023 00:00:00 GMT - Tue, 12 Nov 2024 23:59:59 GMT

File type
troff or preprocessor input, ASCII text, with no line terminators
Size
72 B (72 bytes)
Hash
adf75b99dbbf416c627dfc5de30f9ad1
699f3845f7dfb3fa9968c2117b44c3f3eb728fff
a0e4a8f457272bd17d07ae2e1e09731df6cc6fdc3ea9e32e713ef4a8a012fc27

HTTP Headers

GET /cookieconsentpub/v1/geo/location HTTP/1.1
Host: geolocation.onetrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shaney94.github.io
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:51 GMT
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 876ebd441eca56c0-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

cdn.cookielaw.org/logos/static/ot_close.svg

104.19.178.52

200 OK

651 B

URL GET HTTP/2
cdn.cookielaw.org/logos/static/ot_close.svg
IP
104.19.178.52:443
ASN
#13335 CLOUDFLARENET

Requested by
https://shaney94.github.io/semanticexp/
Certificate
IssuerCloudflare, Inc.
Subjectcookielaw.org
FingerprintC9:7F:A3:0A:53:6E:A6:6C:2F:D0:E2:2C:F5:35:B4:BC:81:90:40:31
ValidityFri, 01 Mar 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
651 B (651 bytes)
Hash
775913dc8267eb216d54c1e1dfe467b1
c6c68dea713afbe52666360532140507347a5d10
7f95ae3119579940ba6840a95abc442065d3a8412a8f6aff872ffdf86bcc8240

HTTP Headers

GET /logos/static/ot_close.svg HTTP/1.1
Host: cdn.cookielaw.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shaney94.github.io/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 17:50:51 GMT
content-type: image/svg+xml
content-md5: pcXWFGpuVeSg/jVnYCseRg==
last-modified: Wed, 17 Apr 2024 06:40:30 GMT
x-ms-request-id: bcb244ef-a01e-0044-7e3f-91b3bc000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
cache-control: max-age=86400
cf-cache-status: HIT
age: 85420
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 876ebd45cca756ab-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (18)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML