Report - c0m4ng-4ji1-pgbsns-10093876.glitch.me/

Report Overview

Submitted URL
c0m4ng-4ji1-pgbsns-10093876.glitch.me/
IP
34.226.28.43
ASN
#14618 AMAZON-AES
Submitted
2024-05-04 16:12:18
Access
public
Website Title
Page Help Support Team
Final URL
c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
14

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-05-03	338 B	942 B	54.230.218.11
c0m4ng-4ji1-pgbsns-10093876.glitch.me	unknown	unknown	No data	No data	3.3 kB	666 kB	52.203.22.109
cdn.glitch.global	282615	2021-09-09	2022-01-13	2024-04-13	1.0 kB	745 kB	151.101.66.132
cdn.jsdelivr.net	439	2012-05-16	2012-09-30	2024-05-03	1.0 kB	56 kB	151.101.1.229
ajax.googleapis.com	12905	2005-01-25	2013-08-16	2024-05-04	452 B	32 kB	216.58.207.234

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-04	medium	c0m4ng-4ji1-pgbsns-10093876.glitch.me/	Facebook, Inc.
2024-05-04	medium	c0m4ng-4ji1-pgbsns-10093876.glitch.me/	Facebook, Inc.
2024-05-04	medium	c0m4ng-4ji1-pgbsns-10093876.glitch.me/	Facebook, Inc.
2024-05-04	medium	c0m4ng-4ji1-pgbsns-10093876.glitch.me/	Facebook, Inc.
2024-05-04	medium	c0m4ng-4ji1-pgbsns-10093876.glitch.me/	Facebook, Inc.
2024-05-04	medium	c0m4ng-4ji1-pgbsns-10093876.glitch.me/	Facebook, Inc.
2024-05-04	medium	c0m4ng-4ji1-pgbsns-10093876.glitch.me/	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	URL	Size	First Seen	Last Seen
	c0m4ng-4ji1-pgbsns-10093876.glitch.me/	0 B	2023-03-07	2024-05-18
Pretty URL c0m4ng-4ji1-pgbsns-10093876.glitch.me/ IP 52.203.22.109 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 11:59:52 Times Seen37784270 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	c0m4ng-4ji1-pgbsns-10093876.glitch.me/	0 B	2023-03-07	2024-05-18
Pretty URL c0m4ng-4ji1-pgbsns-10093876.glitch.me/ IP 52.203.22.109 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 11:59:52 Times Seen37784270 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	c0m4ng-4ji1-pgbsns-10093876.glitch.me/	0 B	2023-03-07	2024-05-18
Pretty URL c0m4ng-4ji1-pgbsns-10093876.glitch.me/ IP 52.203.22.109 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-18 11:59:52 Times Seen37784270 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js	80 kB	2023-03-07	2024-05-18
Pretty URL cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js IP 151.101.1.229 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:07:49 Last Seen2024-05-18 09:22:55 Times Seen1590 Hash 6dae88aba81e468737c510cc2e4ec1dd 6b4b985a90abd7ab1c2e35ff3b874d07cf8410ee 2515e37eee31f5ef3d659b21dcc84dc6ea732b06872da51078b5b526de34c0c1 Loading...

	ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js	90 kB	2023-03-07	2024-05-18
Pretty URL ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP 216.58.207.234 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:13 Last Seen2024-05-18 11:56:45 Times Seen274858 Hash 8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e Loading...

		Size	First Seen	Last Seen
	#1 Write - 83f7a6a497a6659077be72d41433c23d	11 B	2024-05-04	2024-05-05
Pretty Observations First Seen2024-05-04 02:52:23 Last Seen2024-05-05 15:05:59 Times Seen5 Hash 83f7a6a497a6659077be72d41433c23d dc5bb4dabb7982bd15d105fcd789fc0226908fec ac304dc5cadb72a4fefb30421172f072ee679d92aa5c47d7ff673ba002fac845 Loading...

HTTP Transactions (13)

URL IP Response Size

ocsp.r2m03.amazontrust.com/

54.230.218.11

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
54.230.218.11:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
5dbb1324236c2bca8a8d06b9765e2e76
e35595f04ee717d05e49622aae46cf4dc87c1c37
54a52320fc9e94819db9bcd573d1e31becb9fa71f2933ca27e75a1c5868b9778

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sat, 04 May 2024 16:11:53 GMT
Last-Modified: Sat, 04 May 2024 14:44:10 GMT
Server: ECAcc (ska/F775)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jhv9y4kixQ5_wCo8KdHX7vkr6tXsOnvgXwKa_r8xv-p48iZI3f1lcw==
Age: 5263

c0m4ng-4ji1-pgbsns-10093876.glitch.me/

52.203.22.109

200 OK

9.7 kB

URL User Request GET HTTP/2
c0m4ng-4ji1-pgbsns-10093876.glitch.me/
IP
52.203.22.109:443
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (759)
Size
9.7 kB (9677 bytes)
Hash
f5e5451c9aacd5f47bc5892ee9fc766d
4470badfe155d4bdb3de51cd1af4f6de6457c792
c9f438a47dede59d3cf6157e2a2337b83b1179df9e03f7dbd7fe0bed8d3d87c2

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET / HTTP/1.1
Host: c0m4ng-4ji1-pgbsns-10093876.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 04 May 2024 16:11:53 GMT
content-type: text/html; charset=utf-8
content-length: 9677
x-amz-id-2: 8Jih7y/El28Qmn9SV4594+sk/0W2x0AkH38GmRTF+RLyDQ+Lrx2QRpOY1PB9aCx3twGm0MmOcTA=
x-amz-request-id: GSXNHK0485TVR226
last-modified: Fri, 03 May 2024 19:50:49 GMT
etag: "f5e5451c9aacd5f47bc5892ee9fc766d"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: UhMAelYMwLAJlNECLLRJuhFa9HLuy2wL
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

cdn.glitch.global/50766a48-a3a8-4744-81cf-89e220f53e55/Locked.png?v=1712331236983

151.101.66.132

200 OK

20 kB

URL GET HTTP/2
cdn.glitch.global/50766a48-a3a8-4744-81cf-89e220f53e55/Locked.png?v=1712331236983
IP
151.101.66.132:443
ASN
#54113 FASTLY

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerLet's Encrypt
Subjectcdn.glitch.global
FingerprintF2:EB:85:15:C1:89:0D:2A:EF:A5:2E:07:1E:4F:69:31:EF:1C:8C:06
ValiditySun, 31 Mar 2024 19:31:34 GMT - Sat, 29 Jun 2024 19:31:33 GMT

File type
PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Size
20 kB (20176 bytes)
Hash
ce97933f4d9d2af68efecceb67ffb645
9ca1f9d8b10afc6af5a76ff14fe76b0da5441230
5b1f89c63b9a87f0a0b2737a0789cf18c8b3786302e2c7dd56fa1d2ebc7bfde2

HTTP Headers

GET /50766a48-a3a8-4744-81cf-89e220f53e55/Locked.png?v=1712331236983 HTTP/1.1
Host: cdn.glitch.global
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: rhnbD7ixysJElnBdkZbRduHMY7m7olOX7fTgxwLdIdiezd5RlmbnzXWuna7EQu6kQMX0STIqyJT9UrHoL+kdVC67dMlOS48T
x-amz-request-id: XVKH4HJY47KYYWAS
last-modified: Fri, 05 Apr 2024 15:44:24 GMT
etag: "ce97933f4d9d2af68efecceb67ffb645"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-type: image/png
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
access-control-allow-methods: GET, HEAD, POST
access-control-allow-origin: *
content-security-policy: script-src 'none'
accept-ranges: bytes
age: 2056117
date: Sat, 04 May 2024 16:11:54 GMT
x-served-by: cache-iad-kcgs7200032-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 342, 0
x-timer: S1714839114.051131,VS0,VE1
content-length: 20176
X-Firefox-Spdy: h2

c0m4ng-4ji1-pgbsns-10093876.glitch.me/1.css

52.203.22.109

200 OK

911 B

URL GET HTTP/2
c0m4ng-4ji1-pgbsns-10093876.glitch.me/1.css
IP
52.203.22.109:443
ASN
#14618 AMAZON-AES

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
911 B (911 bytes)
Hash
73e21d1b1adb0e6883af30c5740b9d27
b48d38d608acd1159d4260d921cb231b5fb0e5fd
f4910399b76dd65003f18ba3460e7c194f3dd90f64b9c0e08cde902a651847b7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /1.css HTTP/1.1
Host: c0m4ng-4ji1-pgbsns-10093876.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 16:11:54 GMT
content-type: text/css; charset=utf-8
content-length: 911
x-amz-id-2: Lpf7LxlRRabxPsczzPZAH6newq+gzGClx/uxo8gavUD6DUqARXUk5viDkqtfzVsZfqZTMMYqGIb5sf4Gre3E2rsTEhyXWeAF7C+BNY2/nto=
x-amz-request-id: D10DF4VG62R31ZCY
last-modified: Fri, 03 May 2024 19:50:49 GMT
etag: "73e21d1b1adb0e6883af30c5740b9d27"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: pAGzCS0GE6zAljnrBoB1h2JNRWYm8APy
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css

151.101.1.229

200 OK

30 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
Unicode text, UTF-8 text, with very long lines (65300)
Size
30 kB (30281 bytes)
Hash
6d9c6fda1e7087224431cc8068bb998f
6273ac1a23d79a122f022f6a87c5b75c2cfafc3a
fb1763b59f9f5764294b5af9fa5250835ae608282fe6f2f2213a5952aacf1fbf

HTTP Headers

GET /npm/bootstrap@5.2.0-beta1/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.2.0-beta1
x-jsd-version-type: version
etag: W/"2f3f9-YnOsGiPXmhIvAi9qh8W3XCz6/Do"
content-encoding: br
accept-ranges: bytes
date: Sat, 04 May 2024 16:11:54 GMT
age: 20960558
x-served-by: cache-fra-etou8220113-FRA, cache-hel1410034-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 30281
X-Firefox-Spdy: h2

cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js

151.101.1.229

200 OK

24 kB

URL GET HTTP/2
cdn.jsdelivr.net/npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js
IP
151.101.1.229:443
ASN
#54113 FASTLY

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT

File type
JavaScript source, ASCII text, with very long lines (65293)
Size
24 kB (24445 bytes)
Hash
6dae88aba81e468737c510cc2e4ec1dd
6b4b985a90abd7ab1c2e35ff3b874d07cf8410ee
2515e37eee31f5ef3d659b21dcc84dc6ea732b06872da51078b5b526de34c0c1

HTTP Headers

GET /npm/bootstrap@5.2.0-beta1/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.2.0-beta1
x-jsd-version-type: version
etag: W/"1377e-a0uYWpCr16scLjX/O4dNB8+EEO4"
content-encoding: br
accept-ranges: bytes
date: Sat, 04 May 2024 16:11:54 GMT
age: 2371824
x-served-by: cache-fra-eddf8230137-FRA, cache-hel1410023-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 24445
X-Firefox-Spdy: h2

cdn.glitch.global/50766a48-a3a8-4744-81cf-89e220f53e55/metaa.gif?v=1712331254807

151.101.66.132

200 OK

724 kB

URL GET HTTP/2
cdn.glitch.global/50766a48-a3a8-4744-81cf-89e220f53e55/metaa.gif?v=1712331254807
IP
151.101.66.132:443
ASN
#54113 FASTLY

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerLet's Encrypt
Subjectcdn.glitch.global
FingerprintF2:EB:85:15:C1:89:0D:2A:EF:A5:2E:07:1E:4F:69:31:EF:1C:8C:06
ValiditySun, 31 Mar 2024 19:31:34 GMT - Sat, 29 Jun 2024 19:31:33 GMT

File type
GIF image data, version 89a, 1920 x 1080
Size
724 kB (723689 bytes)
Hash
c59c74953830ca917d052790fc1b5cec
65f101c5036586b7a1e6ea11442ffe7a3ace0594
0861a5fa8da089ba0e9dc91cfdeda4b23cc55f484f6c3df5df71f63233f14e1c

HTTP Headers

GET /50766a48-a3a8-4744-81cf-89e220f53e55/metaa.gif?v=1712331254807 HTTP/1.1
Host: cdn.glitch.global
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
x-amz-id-2: 40HY1v/z9r2cxUrD7zXogvkyLt9/DBg0B+aMeoG9MIgxm5vPyRf2eXSv9Nmh5it5NydXXcUA9wQ=
x-amz-request-id: XZNWM74P7BM2TQ9C
last-modified: Fri, 05 Apr 2024 15:44:40 GMT
etag: "c59c74953830ca917d052790fc1b5cec"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-type: image/gif
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
access-control-allow-methods: GET, HEAD, POST
access-control-allow-origin: *
content-security-policy: script-src 'none'
accept-ranges: bytes
age: 24037
date: Sat, 04 May 2024 16:11:54 GMT
x-served-by: cache-iad-kjyo7100072-IAD, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 15, 0
x-timer: S1714839114.051438,VS0,VE1
content-length: 723689
X-Firefox-Spdy: h2

c0m4ng-4ji1-pgbsns-10093876.glitch.me/3.css

52.203.22.109

200 OK

52 kB

URL GET HTTP/2
c0m4ng-4ji1-pgbsns-10093876.glitch.me/3.css
IP
52.203.22.109:443
ASN
#14618 AMAZON-AES

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
ASCII text
Size
52 kB (52280 bytes)
Hash
68ad7a7a7bd5e69b98381e4ac4c4b7c9
bd7672563381e58242049877de0fd9ed6eb717e9
ec5adca88902cbc5e36abe0a39b9c741bacb21b375055165b27ae0ee37a7a8a6

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /3.css HTTP/1.1
Host: c0m4ng-4ji1-pgbsns-10093876.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 16:11:54 GMT
content-type: text/css; charset=utf-8
content-length: 52280
x-amz-id-2: aTA5k4Z4vkveXAGOhxxqKh8ZAvLHs86ZgDIwr4TYu4f8MOHJpWwl4c12w0/o1vu0GRAB7ak1IZlOhwQIOGklqQ==
x-amz-request-id: D10B0TAQBCJS92ZE
last-modified: Fri, 03 May 2024 19:50:49 GMT
etag: "68ad7a7a7bd5e69b98381e4ac4c4b7c9"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: _nN9zHc0qTVhzWNVIoBsgURG9XLPEWRN
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

c0m4ng-4ji1-pgbsns-10093876.glitch.me/assets/popup.js

52.203.22.109

404 Not Found

3.7 kB

URL GET HTTP/2
c0m4ng-4ji1-pgbsns-10093876.glitch.me/assets/popup.js
IP
52.203.22.109:443
ASN
#14618 AMAZON-AES

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /assets/popup.js HTTP/1.1
Host: c0m4ng-4ji1-pgbsns-10093876.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Sat, 04 May 2024 16:11:54 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js

216.58.207.234

200 OK

31 kB

URL GET HTTP/2
ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js
IP
216.58.207.234:443
ASN
#15169 GOOGLE

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
JavaScript source, ASCII text, with very long lines (65447)
Size
31 kB (31017 bytes)
Hash
8fb8fee4fcc3cc86ff6c724154c49c42
b82d238d4e31fdf618bae8ac11a6c812c03dd0d4
ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e

HTTP Headers

GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 May 2024 06:28:00 GMT
expires: Sat, 03 May 2025 06:28:00 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 121434
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

c0m4ng-4ji1-pgbsns-10093876.glitch.me/2.css

52.203.22.109

200 OK

589 kB

URL GET HTTP/2
c0m4ng-4ji1-pgbsns-10093876.glitch.me/2.css
IP
52.203.22.109:443
ASN
#14618 AMAZON-AES

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
ASCII text
Size
589 kB (589139 bytes)
Hash
21b14f4bfbce44d9bf89f6c82d2d64f1
54adc46644595aaae554884527ed44d86be20e36
dfe7167f226cafa2c4040a062f48e3f9139dd11cbf5baa251eb5aad0e1ae7fa9

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /2.css HTTP/1.1
Host: c0m4ng-4ji1-pgbsns-10093876.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Sat, 04 May 2024 16:11:54 GMT
content-type: text/css; charset=utf-8
content-length: 589139
x-amz-id-2: xXZ+fpjAKn5c9eNntkGCKKICW10aaQjp01ufp2O4EcaM3cPXU6sInWdk9sld6vr8ISoCbAe2LP8mF1HD67L7Bmco1diPzf7NuE74/WykxZA=
x-amz-request-id: D102VS2FGY79V0WC
last-modified: Fri, 03 May 2024 19:50:49 GMT
etag: "21b14f4bfbce44d9bf89f6c82d2d64f1"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: SkeMySbWdms7qO.oGPIhGGT751fntnyZ
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

c0m4ng-4ji1-pgbsns-10093876.glitch.me/assets/popup.js

52.203.22.109

404 Not Found

3.7 kB

URL GET HTTP/2
c0m4ng-4ji1-pgbsns-10093876.glitch.me/assets/popup.js
IP
52.203.22.109:443
ASN
#14618 AMAZON-AES

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /assets/popup.js HTTP/1.1
Host: c0m4ng-4ji1-pgbsns-10093876.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Sat, 04 May 2024 16:11:54 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

c0m4ng-4ji1-pgbsns-10093876.glitch.me/assets/XXXX-removebg-preview.png

52.203.22.109

404 Not Found

3.7 kB

URL GET HTTP/2
c0m4ng-4ji1-pgbsns-10093876.glitch.me/assets/XXXX-removebg-preview.png
IP
52.203.22.109:443
ASN
#14618 AMAZON-AES

Requested by
https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /assets/XXXX-removebg-preview.png HTTP/1.1
Host: c0m4ng-4ji1-pgbsns-10093876.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c0m4ng-4ji1-pgbsns-10093876.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Sat, 04 May 2024 16:11:54 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (13)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers