Report - sungyoenji.github.io/netflex

Report Overview

Submitted URL
sungyoenji.github.io/netflex
IP
185.199.109.153
ASN
#54113 FASTLY
Submitted
2024-04-26 15:46:25
Access
public
Website Title
Netflix
Final URL
sungyoenji.github.io/netflex/
Tags
netflix phishing
urlquery detections
Phishing - Netflix

Detections

urlquery
19
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-26	1.6 kB	52 kB	142.250.74.67
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-25	627 B	229 kB	142.250.74.106
sungyoenji.github.io	unknown	2013-03-08	2023-07-31	2024-04-11	8.8 kB	1.9 MB	185.199.111.153
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-04-26	435 B	32 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	sungyoenji.github.io/netflex	Netflix Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	sungyoenji.github.io/netflex/js/main.js	736 B	2024-04-26	2024-04-26
Pretty URL sungyoenji.github.io/netflex/js/main.js IP 185.199.111.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 17:46:27 Last Seen2024-04-26 17:46:28 Times Seen2 Hash 57e308c852b133aaf614e46662c6c146 d4df4af6f411f40d0aa39aa68d09ae7c9de7de3e 8285396d5a2279baefa8b53523e389c7b420565724bd9daa16c81439c60cc89b Loading...

	sungyoenji.github.io/netflex/js/all.js	1.6 MB	2023-11-04	2024-04-26
Pretty URL sungyoenji.github.io/netflex/js/all.js IP 185.199.111.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-04 18:21:28 Last Seen2024-04-26 17:46:28 Times Seen8 Hash 35f8c5563a018a6c06e9bd7e8208d03e 306c8e701dba954c443edee3026c3e4d474ca752 8a3ed5d626a6da6407fcf7a168a4e2d27e1654373befe6cb69d907f60457b711 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js	90 kB	2023-03-26	2024-05-06
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js IP 142.250.74.106 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-26 04:59:07 Last Seen2024-05-06 19:18:49 Times Seen8480 Hash 641dd14370106e992d352166f5a07e99 eda46747c71d38a880bee44f9a439c3858bb8f99 a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af Loading...

HTTP Transactions (23)

URL IP Response Size

sungyoenji.github.io/netflex

185.199.111.153

301 Moved Permanently

162 B

URL User Request GET HTTP/2
sungyoenji.github.io/netflex
IP
185.199.111.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix
OpenPhish	phishing	Netflix Inc.

HTTP Headers

GET /netflex HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
server: GitHub.com
content-type: text/html
permissions-policy: interest-cohort=()
x-origin-cache: HIT
location: https://sungyoenji.github.io/netflex/
x-github-request-id: B698:0E52:AF7082:B3B403:662BC255
accept-ranges: bytes
date: Fri, 26 Apr 2024 15:45:57 GMT
via: 1.1 varnish
age: 2528
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 13
x-timer: S1714146358.840345,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 5183a64cd648096fd54763c8c6f9774e09219156
content-length: 162
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/

185.199.111.153

200 OK

3.8 kB

URL User Request GET HTTP/2
sungyoenji.github.io/netflex/
IP
185.199.111.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (326), with CRLF line terminators
Size
3.8 kB (3788 bytes)
Hash
f2a36e8f6a529f908d98ff371d0e591b
725f8261bf217cd6df2a2052a9dbcc811c92227e
3a30957b689516b8abb2d26c7ccb7d1a418fb8c790d0ac218bf63c41b201929f

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/ HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64c7ece7-3a19"
expires: Fri, 26 Apr 2024 12:12:50 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: EFB0:0E52:8F2048:929B43:662B97EA
accept-ranges: bytes
age: 426
date: Fri, 26 Apr 2024 15:45:57 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: HIT
x-cache-hits: 0
x-timer: S1714146358.895475,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 4d809a89571a0b9e726c3a444342d826c7894ff8
content-length: 3788
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js

142.250.74.106

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (31154 bytes)
Hash
641dd14370106e992d352166f5a07e99
eda46747c71d38a880bee44f9a439c3858bb8f99
a0fe8723dcf55da64d06b25446d0a8513e52527c45afcb37073465f9c6f352af

HTTP Headers

GET /ajax/libs/jquery/3.6.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31154
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:52:36 GMT
expires: Sat, 26 Apr 2025 05:52:36 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 04 Apr 2023 03:27:01 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 35602
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/css/main.css

185.199.111.153

200 OK

2.4 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/css/main.css
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
2.4 kB (2400 bytes)
Hash
a80bafceb83600bbe14cc2cc1b33b667
1ecbeb11a8a3b9b1a948bb3d75acf90bf147f67d
eb214b3e05069c52a4e4a71d3dead7d3a0b521832086543b0bb00b7363ebc678

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/css/main.css HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64c7ece7-2c6d"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 08CA:0E9A:EAEC6E:F084B4:662BCC35
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.135466,VS0,VE125
vary: Accept-Encoding
x-fastly-request-id: 38926d95c2c55a6be2bdf72c2de5e4629ac7ad22
content-length: 2400
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/css/all.css

185.199.111.153

200 OK

24 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/css/all.css
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
troff or preprocessor input, ASCII text
Size
24 kB (24167 bytes)
Hash
55a54f958c00ab3123d151720e46c3d8
c67242a420436171b20ca97565ab22352fda925b
0822e64055e9b5e5fca4c230a1140b23dff7986fdc111a366251e73b97a1c5b6

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/css/all.css HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64c7ece7-22317"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 14DE:26348:151B897:15914CA:662BCC36
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.135042,VS0,VE158
vary: Accept-Encoding
x-fastly-request-id: 09f867ce9d3325eb3e9467667acd971443642302
content-length: 24167
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/js/main.js

185.199.111.153

200 OK

320 B

URL GET HTTP/2
sungyoenji.github.io/netflex/js/main.js
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators
Size
320 B (320 bytes)
Hash
57e308c852b133aaf614e46662c6c146
d4df4af6f411f40d0aa39aa68d09ae7c9de7de3e
8285396d5a2279baefa8b53523e389c7b420565724bd9daa16c81439c60cc89b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/js/main.js HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64c7ece7-2e0"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: B93E:7677C:157BFA6:15F1D3D:662BCC36
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.161867,VS0,VE134
vary: Accept-Encoding
x-fastly-request-id: 82c27015dd7c30497d30425d1360275735734ec3
content-length: 320
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/imges/device-pile.png

185.199.111.153

200 OK

137 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/imges/device-pile.png
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
137 kB (137040 bytes)
Hash
0b3d821493d5748d829c852bbd6d292d
2b83523c3e0731a1aebace26ecbebf02a63a6b19
81cf64888a7b3f6848b09695b034026d9ad685665b91d54597ecbb6197c6acbb

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/imges/device-pile.png HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64c7ece7-21750"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 1D7E:66896:1510DEF:1586A01:662BCC35
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.154090,VS0,VE162
vary: Accept-Encoding
x-fastly-request-id: ae077b1a85454f186d315ba94254a2289cbcda4c
content-length: 137040
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/css/mobile.css

185.199.111.153

200 OK

731 B

URL GET HTTP/2
sungyoenji.github.io/netflex/css/mobile.css
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Unicode text, UTF-8 text, with CRLF line terminators
Size
731 B (731 bytes)
Hash
17ec76992eb62f946aa8c2e9cd9b3743
44a3e2bd8d7ef7ebc075254879ce93ad4bbf833d
d6ea70c46e35a89e44a9a38def7381114857fcc4889289a27f0ef22d629bab85

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/css/mobile.css HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: text/css; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64c7ece7-9c3"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 2B56:50EF5:151A726:1590104:662BCC36
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.149110,VS0,VE205
vary: Accept-Encoding
x-fastly-request-id: 815141b192d9806a7698dd1bc52bb59830c8579e
content-length: 731
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/imges/tv.png

185.199.111.153

200 OK

11 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/imges/tv.png
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit colormap, non-interlaced
Size
11 kB (11418 bytes)
Hash
77994a67327ba957dfd880e33a91f041
5ba507de8c9bc4a063beecb569e89bcf9e0a901c
b68ea2c7bea397aa11fadb189ce7d83862baebaf03ece643eb5aa9fb5f755056

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/imges/tv.png HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64c7ece7-2c9a"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2B5E:17E625:15FEDBB:1674B60:662BCC36
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.151638,VS0,VE210
vary: Accept-Encoding
x-fastly-request-id: 02633ac99d3269da04c7a691c52e5a5634b2daef
content-length: 11418
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/imges/video-devices.m4v

185.199.111.153

206 Partial Content

266 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/imges/video-devices.m4v
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ISO Media, Apple iTunes Video (.M4V) Video
Size
266 kB (266160 bytes)
Hash
3e55c56205a89c859fed005ae1729faa
b33bba44ef2d6932707d0eef8e00b0ed534fcbb7
3eec290a7f7da9abb00b49ca84f5f16e6d45ca33d40fd8ede4380835d6161d71

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/imges/video-devices.m4v HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: GitHub.com
content-type: video/x-m4v
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64c7ece7-40fb0"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 14DA:0E96:9F8009:A35EBD:662BCC35
accept-ranges: bytes
age: 0
content-range: bytes 0-266159/266160
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.187069,VS0,VE219
vary: Accept-Encoding
x-fastly-request-id: eba39391c90de842230363665eabadd747bd4d6f
content-length: 266160
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/imges/video-tv-0819.m4v

185.199.111.153

206 Partial Content

270 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/imges/video-tv-0819.m4v
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
ISO Media, Apple iTunes Video (.M4V) Video
Size
270 kB (270046 bytes)
Hash
3cb12db7c672b33735006480a455ec72
d060e5996b3f7143755496cf2a06de5a59c283ce
4c7a552d219146985961bf78d9083b7e2c1a82c4ada5d959f48b3e53754c9049

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/imges/video-tv-0819.m4v HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 206 Partial Content
server: GitHub.com
content-type: video/x-m4v
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64c7ece7-41ede"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 4FE6:B3F19:14FD8E9:1573BA8:662BCC35
accept-ranges: bytes
age: 0
content-range: bytes 0-270045/270046
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.186189,VS0,VE230
vary: Accept-Encoding
x-fastly-request-id: 66bf85d0b4565841d5b253362e70fcb8d5cb6de8
content-length: 270046
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/js/all.js

185.199.111.153

200 OK

559 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/js/all.js
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (6136)
Size
559 kB (559184 bytes)
Hash
35f8c5563a018a6c06e9bd7e8208d03e
306c8e701dba954c443edee3026c3e4d474ca752
8a3ed5d626a6da6407fcf7a168a4e2d27e1654373befe6cb69d907f60457b711

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/js/all.js HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64c7ece7-17e5dd"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: D8A6:26348:151B89C:15914CD:662BCC35
accept-ranges: bytes
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.157052,VS0,VE253
vary: Accept-Encoding
x-fastly-request-id: 27b22b350550abe524a0dbe03349f9426e8fbdab
content-length: 559184
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/imges/AAAABTd7lma1wXU3EMLBsaafpKnqf3XyS28nmju9ygsLYh_p3Dq79wPb5um0DkFEVvhV8P9UmkEFZo5KPXJ2hL2SgwRg6uJ9XPDRacaz.png

185.199.111.153

200 OK

254 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/imges/AAAABTd7lma1wXU3EMLBsaafpKnqf3XyS28nmju9ygsLYh_p3Dq79wPb5um0DkFEVvhV8P9UmkEFZo5KPXJ2hL2SgwRg6uJ9XPDRacaz.png
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
254 kB (254047 bytes)
Hash
42ac9180da761f9b187401e464fde306
bb35aae2bd3384351c526292b253c2ce9a800b0d
398625d050724034e3d9aa8b67d5c04e13c79ca4aa125d4ffbfee3eff0433dba

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/imges/AAAABTd7lma1wXU3EMLBsaafpKnqf3XyS28nmju9ygsLYh_p3Dq79wPb5um0DkFEVvhV8P9UmkEFZo5KPXJ2hL2SgwRg6uJ9XPDRacaz.png HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64c7ece7-3e05f"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 6D8A:B3F19:14FD8F5:1573BB3:662BCC36
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.154248,VS0,VE311
vary: Accept-Encoding
x-fastly-request-id: 4fdcb6f7c8a9b3c2924ad375ee9ac1f714064362
content-length: 254047
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/imges/ko%20(1).png

185.199.111.153

200 OK

208 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/imges/ko%20(1).png
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 640 x 480, 8-bit/color RGBA, non-interlaced
Size
208 kB (208051 bytes)
Hash
95ff56d75994d9db56a2f24d68fad132
754c3c7bc90fbecd1c203bbbe711ec86f9d6859a
c009ddd1b206d77ded9cbe787204135bb7294add7f4dd6831cb1768d4f8e3a7e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/imges/ko%20(1).png HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64c7ece7-32cb3"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 2B66:0E7D:8B15E4:8E6034:662BCC36
accept-ranges: bytes
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146358.152772,VS0,VE328
vary: Accept-Encoding
x-fastly-request-id: 66fc23ad646cf62170d5dbd0009652ee03ed77e1
content-length: 208051
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/imges/logo.png

185.199.111.153

200 OK

17 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/imges/logo.png
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
PNG image data, 2560 x 1440, 8-bit colormap, non-interlaced
Size
17 kB (17322 bytes)
Hash
a1f673e7df715f16dae49f4874009082
ad7270ec9b46d561edba8d94686751b2b77ce426
218bc2b47bb718e6c65206f46f0c9791edcfdf5ccff6e6abcecb7637be7cf33b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/imges/logo.png HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/png
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64c7ece7-43aa"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 08D2:D76C1:1473A12:14E9CEA:662BCC36
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146359.563383,VS0,VE118
vary: Accept-Encoding
x-fastly-request-id: ec085817a279b39064a4509174f64fc7208b12c3
content-length: 17322
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/imges/KR-ko-20230508-popsignuptwoweeks-perspective_alpha_website_small.jpg

185.199.111.153

200 OK

110 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/imges/KR-ko-20230508-popsignuptwoweeks-perspective_alpha_website_small.jpg
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1125, components 3
Size
110 kB (109818 bytes)
Hash
d109a37b296d58f661700a7022b0185e
420c001920659c880768618b28039e028ef0cca8
caf362c02c07345c14ea616019483510220f6f19f9134eef4d4cdaebb5228c0b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/imges/KR-ko-20230508-popsignuptwoweeks-perspective_alpha_website_small.jpg HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/jpeg
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64c7ece7-1acfa"
expires: Fri, 26 Apr 2024 15:55:58 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: DA22:0E9A:EAECBE:F084FE:662BCC36
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:58 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146359.564131,VS0,VE300
vary: Accept-Encoding
x-fastly-request-id: a380a70b5cb21253d81ebb941d2e0d1d96fc68bf
content-length: 109818
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2

142.250.74.67

200 OK

17 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 17368, version 1.0
Size
17 kB (17368 bytes)
Hash
abe083d96b58eb02ada8b7c30d7b09f2
61447d66d13a8c8f4335696777a85c438c46f749
db0424fb67fb52e7e538490240cc7fb9c05aa076333a4968f3dee30b825dabf9

HTTP Headers

GET /s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sungyoenji.github.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:50:41 GMT
expires: Sat, 26 Apr 2025 05:50:41 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 35718
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

142.250.74.67

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sungyoenji.github.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:10 GMT
expires: Sat, 26 Apr 2025 06:02:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 35029
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=Nanum+Gothic:wght@400;700;800&family=Noto+Sans+KR:wght@100;300;400;500;700;900&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap

142.250.74.106

200 OK

229 kB

URL GET HTTP/3
fonts.googleapis.com/css2?family=Nanum+Gothic:wght@400;700;800&family=Noto+Sans+KR:wght@100;300;400;500;700;900&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
gzip compressed data, max compression
Size
229 kB (228761 bytes)
Hash
36a355ce165ab116d3056c0fd02b46a9
88ad516bc56cd643d514c9f6090e340c2e280a2d
883a07fa869ed9374bac7c6eda25056d5de4a4b919678bc15372335dc6705075

HTTP Headers

GET /css2?family=Nanum+Gothic:wght@400;700;800&family=Noto+Sans+KR:wght@100;300;400;500;700;900&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 15:45:58 GMT
date: Fri, 26 Apr 2024 15:45:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

sungyoenji.github.io/netflex/webfonts/fa-solid-900.woff2

185.199.111.153

404 Not Found

9.4 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/webfonts/fa-solid-900.woff2
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
9.4 kB (9379 bytes)
Hash
c1f9838a645648cb3b25359f7890a288
0cf12d25140e329bcb4c304feefce63f8f0ba7b3
b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/webfonts/fa-solid-900.woff2 HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/css/all.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "64d39a40-24a3"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
x-proxy-cache: MISS
x-github-request-id: A20E:D76C1:1473A6D:14E9D55:662BCC36
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:59 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146359.972130,VS0,VE124
vary: Accept-Encoding
x-fastly-request-id: 2ddf3b8d0b17a7c624588d81a87f9afc14252e4a
content-length: 9379
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/webfonts/fa-solid-900.ttf

185.199.111.153

404 Not Found

5.3 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/webfonts/fa-solid-900.ttf
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3909)
Size
5.3 kB (5254 bytes)
Hash
c1f9838a645648cb3b25359f7890a288
0cf12d25140e329bcb4c304feefce63f8f0ba7b3
b620507312c5e97566a3c6cfaf99144fefc18a0da7d941401dfa0f5f58fb0368

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/webfonts/fa-solid-900.ttf HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/css/all.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
server: GitHub.com
content-type: text/html; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64d39a40-24a3"
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 500C:0E9A:EAED13:F0855B:662BCC36
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:59 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146359.175911,VS0,VE117
vary: Accept-Encoding
x-fastly-request-id: f2a0a8bdef865b40954503f7bd0cf58d47802d97
content-length: 5254
X-Firefox-Spdy: h2

sungyoenji.github.io/netflex/imges/nficon2016.ico

185.199.111.153

200 OK

1.8 kB

URL GET HTTP/2
sungyoenji.github.io/netflex/imges/nficon2016.ico
IP
185.199.111.153:443
ASN
#54113 FASTLY

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel
Size
1.8 kB (1769 bytes)
Hash
41b45fdce09bd6acd07c7a8949da675e
931e18dfc6e7d950dc2f2bbdfe31e1ea720acf7c
abe8012eb65c0dc0ac3e87dcc1e60e1908ebd8f12b7c47a5df1856f7a7bb1edd

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - Netflix

HTTP Headers

GET /netflex/imges/nficon2016.ico HTTP/1.1
Host: sungyoenji.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sungyoenji.github.io/netflex/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: GitHub.com
content-type: image/vnd.microsoft.icon
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 31 Jul 2023 17:18:31 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"64c7ece7-423e"
expires: Fri, 26 Apr 2024 15:55:59 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 4FFC:D3D1:1541943:15B756B:662BCC37
accept-ranges: bytes
age: 0
date: Fri, 26 Apr 2024 15:45:59 GMT
via: 1.1 varnish
x-served-by: cache-hel1410034-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1714146359.275570,VS0,VE121
vary: Accept-Encoding
x-fastly-request-id: 39d8bdd677211591b660c60742c560fca69f0edc
content-length: 1769
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2

142.250.74.67

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
142.250.74.67:443
ASN
#15169 GOOGLE

Requested by
https://sungyoenji.github.io/netflex/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33
ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Size
16 kB (15860 bytes)
Hash
e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860

HTTP Headers

GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sungyoenji.github.io
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:55:49 GMT
expires: Sat, 26 Apr 2025 05:55:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 35410
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (23)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate