Report - www.alyaanfinance.com/brain/next.php

Report Overview

Submitted URL
www.alyaanfinance.com/brain/next.php
IP
92.204.218.59
ASN
#21499 Host Europe GmbH
Submitted
2024-04-24 01:28:08
Access
public
Website Title
WeTransfer
Final URL
google-drive-activate.glitch.me/index2.html?email=
Tags
wetransfer phishing financial
urlquery detections
Phishing - WeTransfer

Detections

urlquery
19
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdn.glitch.global	282615	2021-09-09	2022-01-13	2024-04-18	559 B	312 kB	151.101.194.132
www.alyaanfinance.com	unknown	2021-12-28	2022-07-19	2023-02-15	490 B	292 B	92.204.218.59
google-drive-activate.glitch.me	unknown	unknown	No data	No data	8.6 kB	531 kB	44.214.198.122
florentine-brave-principle.glitch.me	unknown	unknown	No data	No data	413 B	401 kB	44.214.198.122
cutt.ly	33038	2018-01-13	2018-01-24	2024-04-20	420 B	4.3 kB	172.67.8.238

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (5)

	URL	Size	First Seen	Last Seen
	google-drive-activate.glitch.me/index2.html?email=	397 B	2023-03-07	2024-04-24
Pretty URL google-drive-activate.glitch.me/index2.html?email= IP 44.214.198.122 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 14:00:08 Last Seen2024-04-24 20:07:47 Times Seen50 Hash a9b94a61b5b3e79d2a04ed5239ab426a 4565ef6887a52bba818cda3b5dbe8814d72dfab0 0cc3dd241ed71094531431ae2eafc4d84ee1b6963cbd15927a0eb6b2f129286a Loading...

	google-drive-activate.glitch.me/1.js	90 kB	2023-03-07	2024-05-05
Pretty URL google-drive-activate.glitch.me/1.js IP 44.214.198.122 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:17 Last Seen2024-05-05 23:59:23 Times Seen9569 Hash b6f7093369a0e8b83703914ce731b13c d1889f5c173c2a4b20288f1f84758599afd346ef 60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827 Loading...

	google-drive-activate.glitch.me/2.js	77 kB	2023-03-10	2024-04-24
Pretty URL google-drive-activate.glitch.me/2.js IP 44.214.198.122 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-10 13:10:00 Last Seen2024-04-24 20:07:47 Times Seen13 Hash 46d5d43b6f75fd3fe4c0d0db009ed5dd dc3cdd49bffaab83d3a9f575db72f055f92dda0e 7a32a6e4c5e81f0d51cb97466aa442a2342f5ab5c62ff62c3094296fabdda734 Loading...

	google-drive-activate.glitch.me/1.html	2.2 kB	2023-03-07	2024-04-24
Pretty URL google-drive-activate.glitch.me/1.html IP 44.214.198.122 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 13:44:15 Last Seen2024-04-24 20:07:47 Times Seen5 Hash 00e2ab3f5e1b2ead632e1b168938f372 3dadc2a99f51407139e5f2518c63b082a4338372 d382cc2df843ec39a9858e806415dfec6c53824ab3af30d1299203a0c947b768 Loading...

		Size	First Seen	Last Seen
	#1 Eval - ac6a1e06ab2e9bf97ce510f160729129	5.3 kB	2023-03-07	2024-04-28
Pretty Observations First Seen2023-03-07 12:01:54 Last Seen2024-04-28 22:29:16 Times Seen265 Hash ac6a1e06ab2e9bf97ce510f160729129 09e58b6ebcc943908f3a1a59ba37f8ebe60303db 843ca2f693e4f6bd737d3805d24a24b2aafc3c629d9477671b1f123d12734dd5 Loading...

HTTP Transactions (22)

URL IP Response Size

www.alyaanfinance.com/brain/next.php

92.204.218.59

302 Found

1 B

URL User Request GET HTTP/2
www.alyaanfinance.com/brain/next.php
IP
92.204.218.59:443
ASN
#21499 Host Europe GmbH

Certificate
IssuerSectigo Limited
Subjectalyaanfinance.com
Fingerprint3D:F0:ED:49:2E:55:CC:60:CF:CB:3B:7D:FF:D2:5F:42:14:AF:74:D0
ValidityFri, 19 Apr 2024 00:00:00 GMT - Tue, 20 May 2025 23:59:59 GMT

File type
very short file (no magic)
Size
1 B (1 bytes)
Hash
eccbc87e4b5ce2fe28308fd9f2a7baf3
77de68daecd823babbb58edb1c8e14d7106e83bb
4e07408562bedb8b60ce05c1decfe3ad16b72230967de01f640b7e4729b49fce

HTTP Headers

GET /brain/next.php HTTP/1.1
Host: www.alyaanfinance.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
x-powered-by: PHP/7.4.33
location: https://google-drive-activate.glitch.me/index2.html?email=
vary: Accept-Encoding
content-encoding: br
content-length: 1
content-type: text/html; charset=UTF-8
date: Wed, 24 Apr 2024 01:27:42 GMT
server: Apache
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/index2.html?email=

44.214.198.122

200 OK

126 kB

URL User Request GET HTTP/2
google-drive-activate.glitch.me/index2.html?email=
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (55497)
Size
126 kB (125675 bytes)
Hash
5695f18e124f07b890eed45bc2e2e5d5
01b35ef1593fe7c192f4b41c8f9e9c8307daaeca
e0c4c504e262ad216d3a03ddd8c5d1b62bac9022a8a2c28ecdbe2fbe6848312b

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /index2.html?email= HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 01:27:43 GMT
content-type: text/html; charset=utf-8
content-length: 125675
x-amz-id-2: Gyf+Kek37dgu8vXGr+ZilU7ajNTEQRVDVtVHnOV631g2zEloW2CyWWTqHm7+sf52I3FFJjTk4Ak=
x-amz-request-id: 3MA7NQ728GXRBEGT
last-modified: Tue, 23 Apr 2024 23:22:17 GMT
etag: "5695f18e124f07b890eed45bc2e2e5d5"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: 8pRfk_C_zLMn.jE5NcAMcAFKhf2NN31y
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/bWqOLA69nu2fsMi45LjA.js.download

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/bWqOLA69nu2fsMi45LjA.js.download
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/index2.html?email=
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /bWqOLA69nu2fsMi45LjA.js.download HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/index2.html?email=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/gtm.js.download

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/gtm.js.download
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/index2.html?email=
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /gtm.js.download HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/index2.html?email=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/analytics.js.download

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/analytics.js.download
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/index2.html?email=
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /analytics.js.download HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/index2.html?email=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/1.js

44.214.198.122

200 OK

90 kB

URL GET HTTP/2
google-drive-activate.glitch.me/1.js
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
90 kB (89496 bytes)
Hash
b6f7093369a0e8b83703914ce731b13c
d1889f5c173c2a4b20288f1f84758599afd346ef
60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /1.js HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/index2.html?email=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 01:27:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 89496
x-amz-id-2: jzJURtH7j3UVkb2H3tf5EWILKcSq+Ar8T4/shE0ElKArvcWY9VkUwpkpqsl6kIu3DG6xco+45uk=
x-amz-request-id: 3MA6KNAN31ECJAVC
last-modified: Tue, 23 Apr 2024 23:22:16 GMT
etag: "b6f7093369a0e8b83703914ce731b13c"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: _Mlyf9Fjszk2prNWqBy39kI8P0CQKS7X
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/2.js

44.214.198.122

200 OK

77 kB

URL GET HTTP/2
google-drive-activate.glitch.me/2.js
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/index2.html?email=
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (22173)
Size
77 kB (77445 bytes)
Hash
46d5d43b6f75fd3fe4c0d0db009ed5dd
dc3cdd49bffaab83d3a9f575db72f055f92dda0e
7a32a6e4c5e81f0d51cb97466aa442a2342f5ab5c62ff62c3094296fabdda734

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /2.js HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/index2.html?email=
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 01:27:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 77445
x-amz-id-2: chRgtGXx7aWrx491U8xptAjmiUIGTb4O9mw+H1XuSEil6FmUXE9Yoc10pDEVCl4db/ceGoaIPn0=
x-amz-request-id: 3MAAXJ9DYS5KHXYK
last-modified: Tue, 23 Apr 2024 23:22:16 GMT
etag: "46d5d43b6f75fd3fe4c0d0db009ed5dd"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: FtLqO0fVs21HEHo_hbb5wBxBbtzaP_3j
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/1.html

44.214.198.122

200 OK

13 kB

URL GET HTTP/2
google-drive-activate.glitch.me/1.html
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/index2.html?email=
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (4958)
Size
13 kB (13059 bytes)
Hash
585c9bc03f105ef794fb5e84e1e5e2f3
d7139aee88bf6bb3a5f2367838f2554d5b50a695
a6486876c855573dd67a0eb2b6af3310326e884e18a2bac2526d6dc53c5c487c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /1.html HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/index2.html?email=
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 01:27:43 GMT
content-type: text/html; charset=utf-8
content-length: 13059
x-amz-id-2: UdVarO8w0XvkIvedhHbqHWw8JyXloyXP0Ic0zR6nF0mfo/zJz3qiQv4ze9e/PwzJEJXdxkrnMufmnoMON0Xqbw==
x-amz-request-id: 3MACZHD848EZYXC8
last-modified: Tue, 23 Apr 2024 23:22:16 GMT
etag: "585c9bc03f105ef794fb5e84e1e5e2f3"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: ndi_c71jlOhjVbAK830MMeTW7swQkIRQ
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

florentine-brave-principle.glitch.me/kjlmk.css

44.214.198.122

200 OK

401 kB

URL GET HTTP/2
florentine-brave-principle.glitch.me/kjlmk.css
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/index2.html?email=
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
401 kB (400623 bytes)
Hash
74acefad72f0016dcfb1e747dff5a9a7
1794f1e911852e7fb2525f418078a913131d3965
7650cccb518dc3993c51d7a477c1676cf331e22856d2a5456178e5dc96f0ac39

HTTP Headers

GET /kjlmk.css HTTP/1.1
Host: florentine-brave-principle.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 01:27:43 GMT
content-type: text/css; charset=utf-8
content-length: 400623
x-amz-id-2: WQ/wslM6NsUe88csHqRgMEZuyyPVuOrbFX+k/RGYxnDVVDJrJVYPRiEK4Hz/FTTfrbnA7lUFUek=
x-amz-request-id: 3MA1PHGR4P6VY4QM
last-modified: Fri, 11 Aug 2023 10:29:48 GMT
etag: "74acefad72f0016dcfb1e747dff5a9a7"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: 0wiCZMX7bst_JIyXIchPNKoPB0U63pYx
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/wallpaper-toolbox-2.css

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/wallpaper-toolbox-2.css
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /wallpaper-toolbox-2.css HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/1.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/dom4.js

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/dom4.js
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /dom4.js HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/anime.js

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/anime.js
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /anime.js HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/wallpaper-api-2.js

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/wallpaper-api-2.js
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /wallpaper-api-2.js HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/2.js

44.214.198.122

200 OK

77 kB

URL GET HTTP/2
google-drive-activate.glitch.me/2.js
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/index2.html?email=
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (22173)
Size
77 kB (77445 bytes)
Hash
46d5d43b6f75fd3fe4c0d0db009ed5dd
dc3cdd49bffaab83d3a9f575db72f055f92dda0e
7a32a6e4c5e81f0d51cb97466aa442a2342f5ab5c62ff62c3094296fabdda734

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /2.js HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 01:27:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 77445
x-amz-id-2: uzMHN+PZYhtZr7PNRQaLwXxH7WUpTnM/FENvfv0aD8LdwBQnMr1Ve3ceervhBGAzW7AEzJH0OfHJLSzZ8Ut/v4mnLFKOSccT
x-amz-request-id: 3MABSYVCCW5GSZZ5
last-modified: Tue, 23 Apr 2024 23:22:16 GMT
etag: "46d5d43b6f75fd3fe4c0d0db009ed5dd"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: FtLqO0fVs21HEHo_hbb5wBxBbtzaP_3j
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

cutt.ly/AwfGdyLa

172.67.8.238

301 Moved Permanently

3.7 kB

URL GET HTTP/2
cutt.ly/AwfGdyLa
IP
172.67.8.238:443
ASN
#13335 CLOUDFLARENET

Requested by
https://google-drive-activate.glitch.me/index2.html?email=
Certificate
IssuerDigiCert Inc
Subjectwww.cutt.ly
Fingerprint9D:AF:D2:85:8A:E8:35:E5:D6:16:D0:E7:69:EC:33:99:A4:42:55:07
ValidityFri, 29 Mar 2024 00:00:00 GMT - Mon, 14 Apr 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

HTTP Headers

GET /AwfGdyLa HTTP/1.1
Host: cutt.ly
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Wed, 24 Apr 2024 01:27:43 GMT
content-type: text/html; charset=UTF-8
location: https://florentine-brave-principle.glitch.me/kjlmk.css
set-cookie: PHPSESSID=633cmmpk28tghm7kngu2arsbqb; path=/; secure
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
strict-transport-security: max-age=15552000; includeSubDomains; preload
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 87925000d958569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/1.js

44.214.198.122

200 OK

90 kB

URL GET HTTP/2
google-drive-activate.glitch.me/1.js
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
90 kB (89496 bytes)
Hash
b6f7093369a0e8b83703914ce731b13c
d1889f5c173c2a4b20288f1f84758599afd346ef
60240d5a27ede94fd35fea44bd110b88c7d8cfc08127f032d13b0c622b8be827

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /1.js HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 01:27:43 GMT
content-type: application/javascript; charset=utf-8
content-length: 89496
x-amz-id-2: WN9iHg0ONkMM7NWuqrbDcFShOlmYGRL1A0cBqZ6T3mQ46GdXvgcd0kXZQEfHPrmuqrHRrNqlnT+XTj6rZO8MCA==
x-amz-request-id: 3MAC61MDYZ9DZTG7
last-modified: Tue, 23 Apr 2024 23:22:16 GMT
etag: "b6f7093369a0e8b83703914ce731b13c"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: _Mlyf9Fjszk2prNWqBy39kI8P0CQKS7X
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/assets/fonts/DINNextW1G-Regular.woff

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/assets/fonts/DINNextW1G-Regular.woff
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /assets/fonts/DINNextW1G-Regular.woff HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/1.html
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/assets/images/next-button.png

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/assets/images/next-button.png
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /assets/images/next-button.png HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/1.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/assets/fonts/DINNextW1G-Bold.woff

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/assets/fonts/DINNextW1G-Bold.woff
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /assets/fonts/DINNextW1G-Bold.woff HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/1.html
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/1.html

18.235.65.101

200 OK

13 kB

URL GET HTTP/2
google-drive-activate.glitch.me/1.html
IP
18.235.65.101:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/index2.html?email=
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (4958)
Size
13 kB (13059 bytes)
Hash
585c9bc03f105ef794fb5e84e1e5e2f3
d7139aee88bf6bb3a5f2367838f2554d5b50a695
a6486876c855573dd67a0eb2b6af3310326e884e18a2bac2526d6dc53c5c487c

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /1.html HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 01:28:05 GMT
content-type: text/html; charset=utf-8
content-length: 13059
x-amz-id-2: 8wZcnhICEp8gnErZCnMPuz1RfdI8UaJg6I3Ghzl7RK9uZXSv3S3acnZuwU3anYxtQIsygPIsHbc=
x-amz-request-id: AJRG3XJT3JZ55D6W
last-modified: Tue, 23 Apr 2024 23:22:16 GMT
etag: "585c9bc03f105ef794fb5e84e1e5e2f3"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: ndi_c71jlOhjVbAK830MMeTW7swQkIRQ
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

google-drive-activate.glitch.me/wallpaper-toolbox-2.js

44.214.198.122

404 Not Found

3.7 kB

URL GET HTTP/2
google-drive-activate.glitch.me/wallpaper-toolbox-2.js
IP
44.214.198.122:443
ASN
#14618 AMAZON-AES

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text, with very long lines (3860), with no line terminators
Size
3.7 kB (3674 bytes)
Hash
8278f4a50baab9058328953010197d7a
9544556ac5ec4d08e25f399ccebc12699a0ecc28
5c78d9c99aced916130e4a9b5987a69236186cec610894cc070bd98b4467ae1e

Detections

Analyzer	Verdict	Alert
urlquery	phishing	Phishing - WeTransfer

HTTP Headers

GET /wallpaper-toolbox-2.js HTTP/1.1
Host: google-drive-activate.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/1.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
date: Wed, 24 Apr 2024 01:27:43 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

cdn.glitch.global/9ed4c623-bd1b-4310-adb3-cf24b8807ba1/video-04.mp4?v=1673277070960

151.101.194.132

206 Partial Content

311 kB

URL GET HTTP/2
cdn.glitch.global/9ed4c623-bd1b-4310-adb3-cf24b8807ba1/video-04.mp4?v=1673277070960
IP
151.101.194.132:443
ASN
#54113 FASTLY

Requested by
https://google-drive-activate.glitch.me/1.html
Certificate
IssuerLet's Encrypt
Subjectcdn.glitch.global
FingerprintF2:EB:85:15:C1:89:0D:2A:EF:A5:2E:07:1E:4F:69:31:EF:1C:8C:06
ValiditySun, 31 Mar 2024 19:31:34 GMT - Sat, 29 Jun 2024 19:31:33 GMT

File type
ISO Media, MP4 v2 [ISO 14496-14]
Size
311 kB (311269 bytes)
Hash
0b3b55675f07a806605894884b3c4678
7559724907020063722cdd586aabc2ab55abd9f4
bc52dcb01ae60e4bd9c08083b845046eb1861180a933403df488968a08bf7f0e

HTTP Headers

GET /9ed4c623-bd1b-4310-adb3-cf24b8807ba1/video-04.mp4?v=1673277070960 HTTP/1.1
Host: cdn.glitch.global
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://google-drive-activate.glitch.me/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 206 Partial Content
x-amz-id-2: H7ipujkl/nGqPmf8uoUY7eIwddA29oqEiA1b+nyQrwaONVgJbrqHbgkWuzX0tzRs0TSTVBxYysY=
x-amz-request-id: J7CW48AP62SX0TCJ
last-modified: Mon, 09 Jan 2023 15:11:00 GMT
etag: "6fd59cf63aa3165809a31a4e64187c8a"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-type: video/mp4
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
access-control-allow-methods: GET, HEAD, POST
access-control-allow-origin: *
content-security-policy: script-src 'none'
accept-ranges: bytes
age: 175631
content-range: bytes 0-1862641/1862642
date: Wed, 24 Apr 2024 01:27:44 GMT
x-served-by: cache-iad-kjyo7100122-IAD, cache-hel1410020-HEL
x-cache: HIT, MISS
x-cache-hits: 163, 0
x-timer: S1713922064.861344,VS0,VE416
content-length: 1862642
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (22)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type