Report - violating-condtion.glitch.me/

Report Overview

Submitted URL
violating-condtion.glitch.me/
IP
35.170.12.36
ASN
#14618 AMAZON-AES
Submitted
2024-04-17 15:46:05
Access
public
Website Title
Request Form
Final URL
violating-condtion.glitch.me/help.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
violating-condtion.glitch.me	unknown	unknown	No data	No data	2.0 kB	58 kB	35.170.12.36
cdn.glitch.global	282615	2021-09-09	2022-01-13	2024-04-16	995 B	19 kB	151.101.66.132
upload.wikimedia.org	2215	2003-03-16	2012-05-21	2024-04-17	474 B	56 kB	185.15.59.240
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-04-17	338 B	942 B	54.192.65.12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	violating-condtion.glitch.me/	Facebook, Inc.
2024-04-17	medium	violating-condtion.glitch.me/	Facebook, Inc.
2024-04-17	medium	violating-condtion.glitch.me/help.html	Facebook, Inc.
2024-04-17	medium	violating-condtion.glitch.me/	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (8)

URL IP Response Size

ocsp.r2m03.amazontrust.com/

54.192.65.12

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
54.192.65.12:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
d2a465dba049fdb317be90b8cbe4ad9c
fd073c04bf00f15ab0fadeb96c9efb486a9413b6
fcd0e26b497e68a6a5b97868018d473bba4e7ae560f0d15c227e203e249e261d

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 17 Apr 2024 15:45:40 GMT
Last-Modified: Wed, 17 Apr 2024 14:48:23 GMT
Server: ECAcc (amb/6A94)
X-Cache: Miss from cloudfront
Via: 1.1 a3e2f19da08276cde03ad0c6828e954c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: MRS52-C1
X-Amz-Cf-Id: nXvnseLs5zCrUwwiEy79W2ZLDOVHynfL12rOIilZsJ_M2_gKPnVjmg==
Age: 3437

violating-condtion.glitch.me/

35.170.12.36

200 OK

1.3 kB

URL User Request GET HTTP/2
violating-condtion.glitch.me/
IP
35.170.12.36:443
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
JavaScript source, Unicode text, UTF-8 text
Size
1.3 kB (1280 bytes)
Hash
dec81a895ed73a4a226709ffd8852922
77acee674ee8b94b8733eef0d0f6a0e117cada06
33fc51cdee3ba23852b4900a35efdc6b33613561d83515f83610108a18365639

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET / HTTP/1.1
Host: violating-condtion.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 15:45:40 GMT
content-type: text/html; charset=utf-8
content-length: 1280
x-amz-id-2: gKmxgrCSvPt6nY64YKL+aoNx9E3r8MJgF1NLhzOOFbpxNO18sS9u71oQX01SHmgopu+Eq4jQ7WEcwJ4mQ/TPWFB4TX8Zvn43Jyk6Kct6OrI=
x-amz-request-id: 5SM9MXW83E80KSJD
last-modified: Tue, 16 Apr 2024 05:49:16 GMT
etag: "dec81a895ed73a4a226709ffd8852922"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: eF5XHrXVzpLWFkjBk_iHNkCX6lVTXWUc
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

violating-condtion.glitch.me/favicon.ico

35.170.12.36

3.7 kB

URL
violating-condtion.glitch.me/favicon.ico
IP
35.170.12.36:0
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: violating-condtion.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://violating-condtion.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 17 Apr 2024 15:45:41 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

violating-condtion.glitch.me/help.html

35.170.12.36

200 OK

2.8 kB

URL User Request GET HTTP/2
violating-condtion.glitch.me/help.html
IP
35.170.12.36:443
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
2.8 kB (2844 bytes)
Hash
5adfdfb85fa6f2736576b292d82c62d2
ac5733b66c25e2e5d16cd211843af237e86966fc
ea374a11041ca938850f6c6e15054f2ec174232eb525738499188617adac0719

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /help.html HTTP/1.1
Host: violating-condtion.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://violating-condtion.glitch.me/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 15:45:45 GMT
content-type: text/html; charset=utf-8
content-length: 2844
x-amz-id-2: 1qfEPvny8CGl71A5Ky1FMdeuLZKhjs+ufXPZRTMVIuYhwpnvzTI4ihaoKACShHOzOgw4eoXTQuw=
x-amz-request-id: HNBR5XN3TTVS3HRC
last-modified: Tue, 16 Apr 2024 05:49:16 GMT
etag: "5adfdfb85fa6f2736576b292d82c62d2"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: n1liunttKihY5DW5Gvw41B9J0zx_Hak4
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

cdn.glitch.global/0c92fe91-f6a5-4eb7-85f9-57f29912d3f4/IMG_20240316_125232.jpg?v=1710575596406

151.101.66.132

200 OK

13 kB

URL GET HTTP/2
cdn.glitch.global/0c92fe91-f6a5-4eb7-85f9-57f29912d3f4/IMG_20240316_125232.jpg?v=1710575596406
IP
151.101.66.132:443
ASN
#54113 FASTLY

Requested by
https://violating-condtion.glitch.me/help.html
Certificate
IssuerLet's Encrypt
Subjectcdn.glitch.global
FingerprintF2:EB:85:15:C1:89:0D:2A:EF:A5:2E:07:1E:4F:69:31:EF:1C:8C:06
ValiditySun, 31 Mar 2024 19:31:34 GMT - Sat, 29 Jun 2024 19:31:33 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=109, orientation=upper-left, width=328], baseline, precision 8, 328x109, components 3
Size
13 kB (12724 bytes)
Hash
d1064fbad13f0250dc186edf6d5017c8
3b069c4c1eb9228d5f50c987774df490d461cd7e
83cdef6fb443c85a249211df67b2ac4c7a1f90ccdd81b5c38117798f58132063

HTTP Headers

GET /0c92fe91-f6a5-4eb7-85f9-57f29912d3f4/IMG_20240316_125232.jpg?v=1710575596406 HTTP/1.1
Host: cdn.glitch.global
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://violating-condtion.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: 4s7FF4+fye1VQce09EbI1ZvA1NdEVDYbOlzmmNcJffBAWW1Ey+RPJsqwcwLtawqiakLnwJtm6r71VA2cp/ScE70KkRY5TtrTV9rfFdVZpqI=
x-amz-request-id: T7FAMW26DN046PBX
last-modified: Sat, 16 Mar 2024 07:53:17 GMT
etag: "d1064fbad13f0250dc186edf6d5017c8"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-type: image/jpeg
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
access-control-allow-methods: GET, HEAD, POST
access-control-allow-origin: *
content-security-policy: script-src 'none'
accept-ranges: bytes
age: 890693
date: Wed, 17 Apr 2024 15:45:45 GMT
x-served-by: cache-iad-kjyo7100145-IAD, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 337, 0
x-timer: S1713368745.246516,VS0,VE1
content-length: 12724
X-Firefox-Spdy: h2

cdn.glitch.global/3b9c0936-6e58-4ace-bab9-026d99a84875/video-logo.jpg?v=1710497688611

151.101.66.132

200 OK

4.3 kB

URL GET HTTP/2
cdn.glitch.global/3b9c0936-6e58-4ace-bab9-026d99a84875/video-logo.jpg?v=1710497688611
IP
151.101.66.132:443
ASN
#54113 FASTLY

Requested by
https://violating-condtion.glitch.me/help.html
Certificate
IssuerLet's Encrypt
Subjectcdn.glitch.global
FingerprintF2:EB:85:15:C1:89:0D:2A:EF:A5:2E:07:1E:4F:69:31:EF:1C:8C:06
ValiditySun, 31 Mar 2024 19:31:34 GMT - Sat, 29 Jun 2024 19:31:33 GMT

File type
RIFF (little-endian) data, Web/P image
Size
4.3 kB (4294 bytes)
Hash
11866df30cf7d0b1b4fd22c64bd29efd
d61d3538d79584cedd1246e2ff6b4b80d968cbb3
fc59f3622770b4b99411b55860b6631dd3b75cb3c7ce090a014b4486ef1c13de

HTTP Headers

GET /3b9c0936-6e58-4ace-bab9-026d99a84875/video-logo.jpg?v=1710497688611 HTTP/1.1
Host: cdn.glitch.global
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://violating-condtion.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: MN+91tJAg7z5Ze3LcXpRQ8g6O5B0WVQt7ZeMbjGiGJeJhZuIvDgiV/esYpw3/5hNkGx+82gHgOzUAQi9eO/9NA==
x-amz-request-id: N4YQTQ90SQTK6Y9R
last-modified: Fri, 15 Mar 2024 10:14:49 GMT
etag: "11866df30cf7d0b1b4fd22c64bd29efd"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-type: image/jpeg
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
access-control-allow-methods: GET, HEAD, POST
access-control-allow-origin: *
content-security-policy: script-src 'none'
accept-ranges: bytes
age: 993380
date: Wed, 17 Apr 2024 15:45:45 GMT
x-served-by: cache-iad-kcgs7200036-IAD, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 1139, 0
x-timer: S1713368745.247695,VS0,VE1
content-length: 4294
X-Firefox-Spdy: h2

violating-condtion.glitch.me/style.css

35.170.12.36

200 OK

49 kB

URL GET HTTP/2
violating-condtion.glitch.me/style.css
IP
35.170.12.36:443
ASN
#14618 AMAZON-AES

Requested by
https://violating-condtion.glitch.me/help.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
ASCII text
Size
49 kB (48958 bytes)
Hash
4dc8f1f11bee3a0b7678c12f7d2838f3
467a69aaf06306de5e4a1768c9e0b921bdd42089
2db7b1e419d537235cbebb742eb4e7b9050b3f6222e1a49e934be41df0436246

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /style.css HTTP/1.1
Host: violating-condtion.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://violating-condtion.glitch.me/help.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 17 Apr 2024 15:45:45 GMT
content-type: text/css; charset=utf-8
content-length: 48958
x-amz-id-2: yv3zZOOKwRNGzk1OrNoDA3Y+Vnd2yH+aTWBSRAa2EbdJmf+fcogpgdzzpXmkbXTaZC1E61wxo88=
x-amz-request-id: X11H9E69CD39VKFV
last-modified: Tue, 16 Apr 2024 05:49:16 GMT
etag: "4dc8f1f11bee3a0b7678c12f7d2838f3"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: DmnkEZE2eZS.WHfHoGO6ci24E9AJOeSl
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

upload.wikimedia.org/wikipedia/commons/6/6c/Facebook_Logo_2023.png

185.15.59.240

200 OK

55 kB

URL GET HTTP/2
upload.wikimedia.org/wikipedia/commons/6/6c/Facebook_Logo_2023.png
IP
185.15.59.240:443
ASN
#14907 WIKIMEDIA

Requested by
https://violating-condtion.glitch.me/help.html
Certificate
IssuerDigiCert Inc
Subject*.wikipedia.org
Fingerprint48:3F:0C:71:F3:4A:E0:EA:30:D9:9B:D6:04:63:DC:DA:A8:F4:9D:FB
ValidityWed, 18 Oct 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
PNG image data, 2084 x 2084, 8-bit/color RGBA, non-interlaced
Size
55 kB (54771 bytes)
Hash
e4da23704f27c9df07e6c21a13e28bfd
af6f06778b34a6b7844168f257fff50611bc7dd9
2adfd474d91fd20c51084309ed000c1ae6cc7f5f70af14d375930f5a71301308

HTTP Headers

GET /wikipedia/commons/6/6c/Facebook_Logo_2023.png HTTP/1.1
Host: upload.wikimedia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://violating-condtion.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 09:49:56 GMT
etag: e4da23704f27c9df07e6c21a13e28bfd
server: ATS/9.1.4
content-type: image/png
x-object-meta-sha1base36: khqfbdm55vq0s0y0eqr5onb4hjn6qc9
last-modified: Wed, 11 Oct 2023 12:15:27 GMT
content-length: 54771
age: 21348
x-cache: cp3078 hit, cp3078 hit/82
x-cache-status: hit-front
server-timing: cache;desc="hit-front", host;desc="cp3078"
strict-transport-security: max-age=106384710; includeSubDomains; preload
report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] }
nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0}
x-client-ip: 91.90.42.154
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache
timing-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (8)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2