Report - to-review-page-violation-92.glitch.me/

Report Overview

Submitted URL
to-review-page-violation-92.glitch.me/
IP
18.235.65.101
ASN
#14618 AMAZON-AES
Submitted
2024-04-24 16:07:39
Access
public
Website Title
Request Form
Final URL
to-review-page-violation-92.glitch.me/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
to-review-page-violation-92.glitch.me	unknown	unknown	No data	No data	964 B	28 kB	18.235.65.101
cdn.glitch.global	282615	2021-09-09	2022-01-13	2024-04-18	1.0 kB	19 kB	151.101.130.132
upload.wikimedia.org	2215	2003-03-16	2012-05-21	2024-04-23	483 B	56 kB	185.15.59.240

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-24	medium	to-review-page-violation-92.glitch.me/	Facebook, Inc.
2024-04-24	medium	to-review-page-violation-92.glitch.me/	Facebook, Inc.

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (5)

URL IP Response Size

to-review-page-violation-92.glitch.me/

18.235.65.101

2.9 kB

URL
to-review-page-violation-92.glitch.me/
IP
18.235.65.101:0
ASN
#14618 AMAZON-AES

File type
HTML document, ASCII text
Size
2.9 kB (2924 bytes)
Hash
61e9d7a7bf64e0f0648f003c508b7192
aefaea99285977c7de17b9fe195361a413c7e1e5
e231abeaec14a1d2a47923d04f443966adb321cfcb4c32f7d29df8f858237f64

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET / HTTP/1.1
Host: to-review-page-violation-92.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:07:14 GMT
content-type: text/html; charset=utf-8
content-length: 2924
x-amz-id-2: HNUK03o+u5q1aBhFxh+UWGZZX3A2pMZcRf4lLYP7Eo551qF1wUoW3FEBMdnIR9kpuRmlraAXXYE=
x-amz-request-id: SJ0D7P2055QKC7M2
last-modified: Sat, 20 Apr 2024 11:02:00 GMT
etag: "61e9d7a7bf64e0f0648f003c508b7192"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: T3AJEBXnMduulyRPGCwTxHAhrtUi6Rzs
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

cdn.glitch.global/3b9c0936-6e58-4ace-bab9-026d99a84875/video-logo.jpg?v=1710497688611

151.101.130.132

200 OK

4.3 kB

URL GET HTTP/2
cdn.glitch.global/3b9c0936-6e58-4ace-bab9-026d99a84875/video-logo.jpg?v=1710497688611
IP
151.101.130.132:443
ASN
#54113 FASTLY

Requested by
https://to-review-page-violation-92.glitch.me/
Certificate
IssuerLet's Encrypt
Subjectcdn.glitch.global
FingerprintF2:EB:85:15:C1:89:0D:2A:EF:A5:2E:07:1E:4F:69:31:EF:1C:8C:06
ValiditySun, 31 Mar 2024 19:31:34 GMT - Sat, 29 Jun 2024 19:31:33 GMT

File type
RIFF (little-endian) data, Web/P image
Size
4.3 kB (4294 bytes)
Hash
11866df30cf7d0b1b4fd22c64bd29efd
d61d3538d79584cedd1246e2ff6b4b80d968cbb3
fc59f3622770b4b99411b55860b6631dd3b75cb3c7ce090a014b4486ef1c13de

HTTP Headers

GET /3b9c0936-6e58-4ace-bab9-026d99a84875/video-logo.jpg?v=1710497688611 HTTP/1.1
Host: cdn.glitch.global
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://to-review-page-violation-92.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: MN+91tJAg7z5Ze3LcXpRQ8g6O5B0WVQt7ZeMbjGiGJeJhZuIvDgiV/esYpw3/5hNkGx+82gHgOzUAQi9eO/9NA==
x-amz-request-id: N4YQTQ90SQTK6Y9R
last-modified: Fri, 15 Mar 2024 10:14:49 GMT
etag: "11866df30cf7d0b1b4fd22c64bd29efd"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-type: image/jpeg
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
access-control-allow-methods: GET, HEAD, POST
access-control-allow-origin: *
content-security-policy: script-src 'none'
accept-ranges: bytes
date: Wed, 24 Apr 2024 16:07:14 GMT
age: 1599469
x-served-by: cache-iad-kcgs7200036-IAD, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 2202, 2
x-timer: S1713974834.470698,VS0,VE0
content-length: 4294
X-Firefox-Spdy: h2

cdn.glitch.global/0c92fe91-f6a5-4eb7-85f9-57f29912d3f4/IMG_20240316_125232.jpg?v=1710575596406

151.101.130.132

13 kB

URL
cdn.glitch.global/0c92fe91-f6a5-4eb7-85f9-57f29912d3f4/IMG_20240316_125232.jpg?v=1710575596406
IP
151.101.130.132:0
ASN
#54113 FASTLY

Certificate
IssuerLet's Encrypt
Subjectcdn.glitch.global
FingerprintF2:EB:85:15:C1:89:0D:2A:EF:A5:2E:07:1E:4F:69:31:EF:1C:8C:06
ValiditySun, 31 Mar 2024 19:31:34 GMT - Sat, 29 Jun 2024 19:31:33 GMT

File type
JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=4, height=109, orientation=upper-left, width=328], baseline, precision 8, 328x109, components 3
Size
13 kB (12724 bytes)
Hash
d1064fbad13f0250dc186edf6d5017c8
3b069c4c1eb9228d5f50c987774df490d461cd7e
83cdef6fb443c85a249211df67b2ac4c7a1f90ccdd81b5c38117798f58132063

HTTP Headers

GET /0c92fe91-f6a5-4eb7-85f9-57f29912d3f4/IMG_20240316_125232.jpg?v=1710575596406 HTTP/1.1
Host: cdn.glitch.global
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://to-review-page-violation-92.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-amz-id-2: 4s7FF4+fye1VQce09EbI1ZvA1NdEVDYbOlzmmNcJffBAWW1Ey+RPJsqwcwLtawqiakLnwJtm6r71VA2cp/ScE70KkRY5TtrTV9rfFdVZpqI=
x-amz-request-id: T7FAMW26DN046PBX
last-modified: Sat, 16 Mar 2024 07:53:17 GMT
etag: "d1064fbad13f0250dc186edf6d5017c8"
x-amz-server-side-encryption: AES256
cache-control: max-age=31536000
content-type: image/jpeg
server: AmazonS3
via: 1.1 varnish, 1.1 varnish
access-control-allow-methods: GET, HEAD, POST
access-control-allow-origin: *
content-security-policy: script-src 'none'
accept-ranges: bytes
date: Wed, 24 Apr 2024 16:07:14 GMT
age: 1496782
x-served-by: cache-iad-kjyo7100145-IAD, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 2043, 2
x-timer: S1713974834.471842,VS0,VE0
content-length: 12724
X-Firefox-Spdy: h2

to-review-page-violation-92.glitch.me/style.css

18.235.65.101

24 kB

URL
to-review-page-violation-92.glitch.me/style.css
IP
18.235.65.101:0
ASN
#14618 AMAZON-AES

File type
ASCII text
Size
24 kB (24479 bytes)
Hash
f564d7659ab285b06ea58e27b74c4d58
8c37f3124eac5cd684126169d13277380c166c5c
2ea26483bd7f9d0dd3624b29e6b36b499cd8414ae9e5cd2c3165523866129701

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Facebook, Inc.

HTTP Headers

GET /style.css HTTP/1.1
Host: to-review-page-violation-92.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://to-review-page-violation-92.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 24 Apr 2024 16:07:14 GMT
content-type: text/css; charset=utf-8
content-length: 24479
x-amz-id-2: NxI3t2TOMzbGsU1Ludo55s/kAskyhfMTdVXRAX1Qfj79uM/oCjhQjG5Eve/yHZzY8SKLGrVNl8E=
x-amz-request-id: SJ03QRBYPM9AD7HV
last-modified: Sat, 20 Apr 2024 11:02:00 GMT
etag: "f564d7659ab285b06ea58e27b74c4d58"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: 4yuT1_gQcExF1NKiyvaF1u9FRWe4dEyu
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

upload.wikimedia.org/wikipedia/commons/6/6c/Facebook_Logo_2023.png

185.15.59.240

200 OK

55 kB

URL GET HTTP/2
upload.wikimedia.org/wikipedia/commons/6/6c/Facebook_Logo_2023.png
IP
185.15.59.240:443
ASN
#14907 WIKIMEDIA

Requested by
https://to-review-page-violation-92.glitch.me/
Certificate
IssuerDigiCert Inc
Subject*.wikipedia.org
Fingerprint48:3F:0C:71:F3:4A:E0:EA:30:D9:9B:D6:04:63:DC:DA:A8:F4:9D:FB
ValidityWed, 18 Oct 2023 00:00:00 GMT - Wed, 16 Oct 2024 23:59:59 GMT

File type
PNG image data, 2084 x 2084, 8-bit/color RGBA, non-interlaced
Size
55 kB (54771 bytes)
Hash
e4da23704f27c9df07e6c21a13e28bfd
af6f06778b34a6b7844168f257fff50611bc7dd9
2adfd474d91fd20c51084309ed000c1ae6cc7f5f70af14d375930f5a71301308

HTTP Headers

GET /wikipedia/commons/6/6c/Facebook_Logo_2023.png HTTP/1.1
Host: upload.wikimedia.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://to-review-page-violation-92.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 24 Apr 2024 06:20:32 GMT
etag: e4da23704f27c9df07e6c21a13e28bfd
server: ATS/9.1.4
content-type: image/png
x-object-meta-sha1base36: khqfbdm55vq0s0y0eqr5onb4hjn6qc9
last-modified: Wed, 11 Oct 2023 12:15:27 GMT
content-length: 54771
age: 35202
x-cache: cp3078 hit, cp3078 hit/164
x-cache-status: hit-front
server-timing: cache;desc="hit-front", host;desc="cp3078"
strict-transport-security: max-age=106384710; includeSubDomains; preload
report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] }
nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0}
x-client-ip: 91.90.42.154
x-content-type-options: nosniff
access-control-allow-origin: *
access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache
timing-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (5)

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers