| GET screeching-lime-attraction.glitch.me/ | 151.101.2.59 | 403 Forbidden | 1.9 kB |
URL User Request GET screeching-lime-attraction.glitch.me/ IP 151.101.2.59:443
CertificateIssuerCertainly Subject*.glitch.me Fingerprint54:78:22:0C:83:C9:B6:36:AD:D3:37:D5:56:73:99:D9:9B:0E:52:50 ValidityWed, 21 May 2025 18:38:06 GMT - Fri, 20 Jun 2025 18:38:05 GMT
File typeHTML document, ASCII text Hash70a44e56932ecf40a58e17a82154557b 9173bd8b69e7098c78205d15ff3ab96fc23a4f04 a18a7cf911eebd51019cee20c595c81d968fb91d68322131e7f08a3aa737ff05
NIDS | Severity | Alert | suricata | medium | ET HUNTING Suspicious Glitch Hosted GET Request - Possible Phishing Landing |
GET / HTTP/1.1
Host: screeching-lime-attraction.glitch.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
content-type: text/html; charset=utf-8
etag: W/"79b-kXO9i2nnCYx4IF0V/zq5b8I6TwQ"
cache-control: max-age=0
accept-ranges: bytes
date: Fri, 06 Jun 2025 15:55:31 GMT
via: 1.1 varnish
x-served-by: cache-hel1410030-HEL, cache-hel1410030-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1749225331.444749,VS0,VE131
content-length: 1947
X-Firefox-Spdy: h2
|
|
| GET screeching-lime-attraction.glitch.me/ | 151.101.2.59 | 403 Forbidden | 1.9 kB |
URL User Request GET screeching-lime-attraction.glitch.me/ IP 151.101.2.59:80
File typeHTML document, ASCII text Hash70a44e56932ecf40a58e17a82154557b 9173bd8b69e7098c78205d15ff3ab96fc23a4f04 a18a7cf911eebd51019cee20c595c81d968fb91d68322131e7f08a3aa737ff05
NIDS | Severity | Alert | suricata | medium | ET HUNTING Suspicious Glitch Hosted GET Request - Possible Phishing Landing |
GET / HTTP/1.1
Host: screeching-lime-attraction.glitch.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Connection: keep-alive
Content-Length: 1947
content-type: text/html; charset=utf-8
cache-control: max-age=0
etag: W/"79b-kXO9i2nnCYx4IF0V/zq5b8I6TwQ"
Accept-Ranges: bytes
Date: Fri, 06 Jun 2025 15:55:31 GMT
Via: 1.1 varnish
X-Served-By: cache-hel1410033-HEL, cache-hel1410032-HEL
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1749225332.807890,VS0,VE133
|
|
| GET cloud.webtype.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css | 172.67.72.90 | 301 Moved Permanently | 889 B |
URL GET cloud.webtype.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css IP 172.67.72.90:443
Requested byhttp://screeching-lime-attraction.glitch.me/ CertificateIssuerGoogle Trust Services Subjectwebtype.com Fingerprint7E:CA:B9:A2:E9:EC:4F:F8:27:1B:FE:38:D7:09:50:ED:A6:91:3E:82 ValiditySat, 12 Apr 2025 17:10:51 GMT - Fri, 11 Jul 2025 18:10:45 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css HTTP/1.1
Host: cloud.webtype.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://screeching-lime-attraction.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Fri, 06 Jun 2025 15:55:32 GMT
content-type: text/html
content-length: 167
location: https://cloud.typenetwork.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css
cf-ray: 94b918360cf056a3-OSL
server: cloudflare
cache-control: max-age=3600
expires: Fri, 06 Jun 2025 16:55:32 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u7j6p30MeY65hehoK8IlNQzrZrJuPKfuLRHR5%2FIyArpE3Yc8GI7fu9l9RfijvNospEZGj7Kh05xw7V%2F3E%2F6Bj6Ac3KGklZHbNcPStLY%2FAvf2booC1nRU1N71advt6GPN%2FijC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server-timing: cfL4;desc="?proto=TCP&rtt=600&min_rtt=425&rtt_var=376&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3272&recv_bytes=1246&delivery_rate=7375212&cwnd=253&unsent_bytes=0&cid=f8c9f7d5e6fa2df8&ts=52&x=0"
X-Firefox-Spdy: h2
|
|
| GET cdn.glitch.com/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png?v=1595481653593 | 54.240.174.105 | 301 Moved Permanently | 170 kB |
URL GET cdn.glitch.com/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png?v=1595481653593 IP 54.240.174.105:443
Requested byhttp://screeching-lime-attraction.glitch.me/ CertificateIssuerAmazon Subjectglitch.com Fingerprint15:9B:79:14:84:30:B4:F1:9A:CB:C7:83:42:3D:1C:AF:D3:41:02:81 ValiditySun, 03 Nov 2024 00:00:00 GMT - Wed, 03 Dec 2025 23:59:59 GMT
Size170 kB (170377 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png?v=1595481653593 HTTP/1.1
Host: cdn.glitch.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://screeching-lime-attraction.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Date: Fri, 06 Jun 2025 04:38:52 GMT
Location: https://cdn.glitch.me/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9atZiAsnieYywsUBDaSH53JmuXQUKvOyPKCFSZN0rTV74cqWBqeyeg==
Age: 40601
Vary: Origin
|
|
| GET cloud.typenetwork.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css | 151.101.129.91 | 301 Moved Permanently | 889 B |
URL GET cloud.typenetwork.com/css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css IP 151.101.129.91:443
Requested byhttp://screeching-lime-attraction.glitch.me/ CertificateIssuerLet's Encrypt Subjectcloud.typenetwork.com Fingerprint1C:41:D2:D1:FC:46:AD:75:4C:F3:9D:1A:E1:B3:2E:41:A4:C2:EF:FE ValidityThu, 10 Apr 2025 11:43:03 GMT - Wed, 09 Jul 2025 11:43:02 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /css/3a8e55c6-b1f3-4659-99eb-125ae72bd084.css HTTP/1.1
Host: cloud.typenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://screeching-lime-attraction.glitch.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
content-type: text/html; charset=utf-8
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
cf-ray: 94b9179738a3c346-EWR
location: ../projects/5027/fontface.css/
x-content-type-options: nosniff
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
x-frame-options: DENY
cache-control: max-age=28800
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fk57%2F%2BNelO7caLwzmEX%2BRrNvtb0tBLVOSziJZA7qPD8dCXINSsHRYJqXGsHqHjDea8iVC7YJ31CZtWL9l%2B%2B56LxfKK5nsSItTlLJ0NT%2FI9bugrh1xzHwMzP%2FGpetEMFiKvc5ols%3D"}],"group":"cf-nel","max_age":604800}
server-timing: cfL4;desc="?proto=TCP&rtt=753&min_rtt=725&rtt_var=236&sent=5&recv=8&lost=0&retrans=0&sent_bytes=1365&recv_bytes=3069&delivery_rate=3476590&cwnd=252&unsent_bytes=0&cid=c6f3cd49d9fd6f22&ts=43488&x=0"
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
age: 2683
date: Fri, 06 Jun 2025 15:55:32 GMT
x-served-by: cache-ewr-kewr1740081-EWR, cache-hel1410026-HEL
x-cache: HIT, MISS
x-cache-hits: 7, 0
x-timer: S1749225332.263616,VS0,VE123
vary: origin, Accept-Encoding
access-control-allow-origin: *
content-length: 0
X-Firefox-Spdy: h2
|
|
| GET cdn.glitch.me/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png | 54.240.174.80 | 200 OK | 170 kB |
URL GET cdn.glitch.me/d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png IP 54.240.174.80:443
Requested byhttp://screeching-lime-attraction.glitch.me/ CertificateIssuerAmazon Subjectglitch.com Fingerprint15:9B:79:14:84:30:B4:F1:9A:CB:C7:83:42:3D:1C:AF:D3:41:02:81 ValiditySun, 03 Nov 2024 00:00:00 GMT - Wed, 03 Dec 2025 23:59:59 GMT
File typePNG image data, 2064 x 1247, 8-bit/color RGB, non-interlaced Size170 kB (170377 bytes) Hasha002b1fa4cf220520bebb230b1b68a80 54498b85a95b9c3e118234471c390e7ba8d92f8e 22906a0f005949f275550013b9308673372a120f6c5e49145ac520658114f158
GET /d7f4f279-e13b-4330-8422-00b2d9211424%2FGlitch-Error-Rainbow-Mug-hires.png HTTP/1.1
Host: cdn.glitch.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://screeching-lime-attraction.glitch.me/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 170377
Connection: keep-alive
Date: Thu, 19 Sep 2024 00:14:39 GMT
Cache-Control: max-age=31536000
Last-Modified: Thu, 23 Jul 2020 05:20:52 GMT
ETag: "a002b1fa4cf220520bebb230b1b68a80"
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lIROeQOCfQ2pxVqltsamsbQFJeRG1XPnuoenUHMSqV1ciUFcRdLGVA==
Age: 22520454
Content-Security-Policy: script-src 'none'
Vary: Origin
|
|
| GET screeching-lime-attraction.glitch.me/favicon.ico | 151.101.2.59 | 403 Forbidden | 1.9 kB |
URL GET screeching-lime-attraction.glitch.me/favicon.ico IP 151.101.2.59:80
Requested byhttp://screeching-lime-attraction.glitch.me/
File typeHTML document, ASCII text Hash70a44e56932ecf40a58e17a82154557b 9173bd8b69e7098c78205d15ff3ab96fc23a4f04 a18a7cf911eebd51019cee20c595c81d968fb91d68322131e7f08a3aa737ff05
GET /favicon.ico HTTP/1.1
Host: screeching-lime-attraction.glitch.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://screeching-lime-attraction.glitch.me/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 403 Forbidden
Connection: keep-alive
Content-Length: 1947
content-type: text/html; charset=utf-8
cache-control: max-age=0
etag: W/"79b-kXO9i2nnCYx4IF0V/zq5b8I6TwQ"
Accept-Ranges: bytes
Date: Fri, 06 Jun 2025 15:55:32 GMT
Via: 1.1 varnish
X-Served-By: cache-hel1410032-HEL, cache-hel1410032-HEL
X-Cache: MISS, MISS
X-Cache-Hits: 0, 0
X-Timer: S1749225332.466507,VS0,VE137
|
|
| GET cloud.typenetwork.com/projects/5027/fontface.css/ | 151.101.129.91 | 200 OK | 889 B |
URL GET cloud.typenetwork.com/projects/5027/fontface.css/ IP 151.101.129.91:443
Requested byhttp://screeching-lime-attraction.glitch.me/ CertificateIssuerLet's Encrypt Subjectcloud.typenetwork.com Fingerprint1C:41:D2:D1:FC:46:AD:75:4C:F3:9D:1A:E1:B3:2E:41:A4:C2:EF:FE ValidityThu, 10 Apr 2025 11:43:03 GMT - Wed, 09 Jul 2025 11:43:02 GMT
Hashc1f564683671e119787de2d62eaa0be6 49f8c0714f2c9241805f5bd7c3ee62d8c93eea30 f6fbbd2d1d1f778b41193cd8aaae3c6dca6a6071d429d1f87a005370e958511e
GET /projects/5027/fontface.css/ HTTP/1.1
Host: cloud.typenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
last-modified: Thu, 06 Apr 2023 18:24:07 GMT
x-rgw-object-type: Normal
etag: W/"c1f564683671e119787de2d62eaa0be6"
x-amz-meta-surrogate-control: max-age=604800
x-amz-meta-surrogate-keys: license-248733 license-248734 license-248735 projectlicense-26551 projectlicense-26552 projectlicense-26553 project-5027
x-amz-meta-tn-allowed-domains: hyperweb.space localhost hw-dev cdnjs.cloudflare.com hyperdev.com hyperdev.space hyper.dev hyperdev.localhost hyper.development hyperdev.development gomix.com gomix.me gomix.development glitch.com glitch.me glitch.development manuscript.com
x-amz-request-id: tx000009f8a990a0a630bba-00682637d5-102bbb12c-nyc3c
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-do-cdn-uuid: e0b8e117-600f-44bb-8bea-69893ced3820
cache-control: max-age=600
cf-cache-status: REVALIDATED
set-cookie: __cf_bm=86W_SMR75BItuU4fELeQX_kNM2cevicbi74prT96UDI-1748900585-1.0.1.1-MMcb6ji62yvKsT3qF9qdLFSnrh4lK7Hbb7AQEluLQ3siOOp4qWBTwikI5TUohIJq.wYph6qJe8y8gOMk.L6_63qKqO9yvI19aGe.eTmG9Cw; path=/; expires=Mon, 02-Jun-25 22:13:05 GMT; domain=.digitaloceanspaces.com; HttpOnly; Secure
server: cloudflare
cf-ray: 949a1fcfcf83d8fe-HEL
content-encoding: gzip
accept-ranges: bytes
date: Fri, 06 Jun 2025 15:55:32 GMT
via: 1.1 varnish
age: 324747
x-served-by: cache-hel1410026-HEL
x-cache: HIT
x-cache-hits: 265
x-timer: S1749225332.499532,VS0,VE0
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
access-control-allow-origin: *
content-length: 338
X-Firefox-Spdy: h2
|
|