Report - tb-tw-code.glitch.me/

Report Overview

Visited public
2023-09-24 11:51:46
Tags
URL
tb-tw-code.glitch.me/
Finishing URL
tb-tw-code.glitch.me/
IP / ASN
54.237.151.112
#14618 AMAZON-AES
Title
TB 2fa

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.r2m01.amazontrust.com	unknown	2007-05-11	2022-10-12 22:43:53	2023-09-24 00:31:38	340 B	942 B	143.204.48.16
tb-tw-code.glitch.me	unknown	unknown	No data	No data	914 B	8.4 kB	54.210.31.14
unpkg.com	11693	2016-01-06	2016-01-08 00:26:01	2023-09-23 18:12:18	1.7 kB	135 kB	104.16.126.175

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-09-24 11:51:29	medium	Client IP	Internal IP	ET HUNTING Suspicious Glitch Hosted DNS Request - Possible Phishing Landing
2023-09-24 11:51:29	medium	Client IP	Internal IP	ET HUNTING Suspicious Glitch Hosted DNS Request - Possible Phishing Landing
2023-09-24 11:51:29	medium	Client IP	Internal IP	ET HUNTING Suspicious Glitch Hosted DNS Request - Possible Phishing Landing
2023-09-24 11:51:29	medium	Client IP	Internal IP	ET HUNTING Suspicious Glitch Hosted DNS Request - Possible Phishing Landing
2023-09-24 11:51:29	medium	Client IP	54.210.31.14	ET HUNTING Suspicious Glitch Hosted TLS SNI Request - Possible Phishing Landing
2023-09-24 11:51:30	medium	Client IP	Internal IP	ET HUNTING Suspicious Glitch Hosted DNS Request - Possible Phishing Landing

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	From	Size	First Seen	Last Seen
	unpkg.com/@otplib/preset-browser@%5E12.0.0/buffer.js	ScriptElement	44 kB	2023-09-24	2024-12-27
Pretty URL unpkg.com/@otplib/preset-browser@%5E12.0.0/buffer.js IP 104.16.126.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-24 13:51 Last Seen2024-12-27 02:43 Times Seen4 Hash 45199672cbd05c7085b060c09f66956b df801b2738ad5efbd83ec8aa1904ee39a74c86f1 4d6143b26c053145ae78722af399f890f1f97868d993b3e7684dad48b5a62a12 Loading...

	unpkg.com/@otplib/preset-browser@%5E12.0.0/index.js	ScriptElement	31 kB	2023-09-24	2023-09-24
Pretty URL unpkg.com/@otplib/preset-browser@%5E12.0.0/index.js IP 104.16.126.175 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-24 13:51 Last Seen2023-09-24 13:51 Times Seen1 Hash cd041c4940fd1f131554bf24031360ff b8851d05704e6ba47f0d1e07ecd1c672bc9ed14c 509e59b540f6bd235b7dd0dbc2b91deb7122b345c09e5a429245f4ba6fdb94fe Loading...

	tb-tw-code.glitch.me/	ScriptElement	0 B	0001-01-01	2025-04-28
Pretty URL tb-tw-code.glitch.me/ IP 54.210.31.14 ASN #14618 AMAZON-AES Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-04-28 08:24 Times Seen4562431 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (7)

	URL	IP	Response	Size
	ocsp.r2m01.amazontrust.com/	143.204.48.16		471 B
URL ocsp.r2m01.amazontrust.com/ IP 143.204.48.16:0 ASN #16509 AMAZON-02 File type data Size 471 B (471 bytes) Hash 006a1f9dade9c202e3177a6639ed768e ed3d23ebb5955684a9ab11a5bd0b3af4c7287bda 6768acb36939e5e1a60bcac18d90bf431852e4253d7a6ccab3deec862079f2fe HTTP Headers `POST / HTTP/1.1 Host: ocsp.r2m01.amazontrust.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Content-Type: application/ocsp-response Content-Length: 471 Connection: keep-alive Accept-Ranges: bytes Cache-Control: max-age=7200 Date: Sun, 24 Sep 2023 11:51:29 GMT Last-Modified: Sun, 24 Sep 2023 10:08:47 GMT Server: ECAcc (ska/F7A7) X-Cache: Miss from cloudfront Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: Q1o3BGFj4mvwmtFGoSVdqe1Pq2oo3uOoxR6C3lKX-tFLZoS4K-nDng== Age: 6162`

	tb-tw-code.glitch.me/	54.210.31.14	200 OK	4.1 kB
URL User Request GET HTTP/2 tb-tw-code.glitch.me/ IP 54.210.31.14:443 ASN #14618 AMAZON-AES Certificate IssuerAmazon Subjectglitch.com Fingerprint13:93:2D:E4:50:7E:CE:BA:BC:F9:6D:7E:86:7F:43:5D:8E:63:45:3E ValidityWed, 22 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3063) Size 4.1 kB (4107 bytes) Hash 6aaedc10b8cf2b2337b6bcfc7525a7aa d9a03db0c06f30fe2ba78b42062ce32261087512 51670dfb960ab3c9cb0f2879bca7efd9d07a024b9bb489baac3166f338f05bac HTTP Headers `GET / HTTP/1.1 Host: tb-tw-code.glitch.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Sun, 24 Sep 2023 11:51:29 GMT content-type: text/html; charset=utf-8 content-length: 4107 x-amz-id-2: f1bAoV97A2d3FSjBc796nCOmfvA0/J+ExEOqA1KmIV+7UWCPbu6iGJe8+4KNZCkcfOpmATt/29I= x-amz-request-id: QNDTT3E38BSJ1YY6 last-modified: Sat, 22 Jul 2023 15:32:51 GMT etag: "6aaedc10b8cf2b2337b6bcfc7525a7aa" x-amz-server-side-encryption: AES256 cache-control: no-cache x-amz-version-id: CbXSDTvwvWFw1FcFH1FdUC0cIBVCyXEW accept-ranges: bytes server: AmazonS3 X-Firefox-Spdy: h2`

	unpkg.com/@otplib/preset-browser@%5E12.0.0/index.js	104.16.126.175	302 Found	13 kB
URL GET HTTP/2 unpkg.com/@otplib/preset-browser@%5E12.0.0/index.js IP 104.16.126.175:443 ASN #13335 CLOUDFLARENET Requested by https://tb-tw-code.glitch.me/ Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT File type data Size 13 kB (13383 bytes) Hash 8e30e7470d1254a3fd44eb533f448c5d 99a50860af6bfba85025241476ce25a91f557c95 69253a9741866ed48465a8e48951662ab7eb5b90cdff690b76a615f74a022d14 HTTP Headers `GET /@otplib/preset-browser@%5E12.0.0/index.js HTTP/1.1 Host: unpkg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://tb-tw-code.glitch.me/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found date: Sun, 24 Sep 2023 11:51:30 GMT content-type: text/plain; charset=utf-8 access-control-allow-origin: * cache-control: public, s-maxage=600, max-age=60 location: /@otplib/preset-browser@12.0.1/index.js vary: Accept, Accept-Encoding via: 1.1 fly.io fly-request-id: 01HB3GFHKYNN5B49MYYY4D0HM4-fra cf-cache-status: EXPIRED strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 80bad0dd6fec569b-OSL X-Firefox-Spdy: h2

	unpkg.com/@otplib/preset-browser@%5E12.0.0/buffer.js	104.16.126.175	302 Found	44 kB
URL GET HTTP/2 unpkg.com/@otplib/preset-browser@%5E12.0.0/buffer.js IP 104.16.126.175:443 ASN #13335 CLOUDFLARENET Requested by https://tb-tw-code.glitch.me/ Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT File type Size 44 kB (44106 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `GET /@otplib/preset-browser@%5E12.0.0/buffer.js HTTP/1.1 Host: unpkg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://tb-tw-code.glitch.me/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found date: Sun, 24 Sep 2023 11:51:30 GMT content-type: text/plain; charset=utf-8 access-control-allow-origin: * cache-control: public, s-maxage=600, max-age=60 location: /@otplib/preset-browser@12.0.1/buffer.js vary: Accept, Accept-Encoding via: 1.1 fly.io fly-request-id: 01HB3GFHKVDS0J79V41QC4Z06J-fra cf-cache-status: EXPIRED strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 80bad0dd6fd2569b-OSL X-Firefox-Spdy: h2

	unpkg.com/@otplib/preset-browser@12.0.1/buffer.js	104.16.126.175	200 OK	44 kB
URL GET HTTP/2 unpkg.com/@otplib/preset-browser@12.0.1/buffer.js IP 104.16.126.175:443 ASN #13335 CLOUDFLARENET Requested by https://tb-tw-code.glitch.me/ Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT File type ASCII text, with very long lines (44106), with no line terminators Size 44 kB (44106 bytes) Hash 45199672cbd05c7085b060c09f66956b df801b2738ad5efbd83ec8aa1904ee39a74c86f1 4d6143b26c053145ae78722af399f890f1f97868d993b3e7684dad48b5a62a12 HTTP Headers `GET /@otplib/preset-browser@12.0.1/buffer.js HTTP/1.1 Host: unpkg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://tb-tw-code.glitch.me/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Sun, 24 Sep 2023 11:51:30 GMT content-type: application/javascript; charset=utf-8 access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"ac4a-34AbJzitXvvYPsiqGQTuOadMhvE" via: 1.1 fly.io fly-request-id: 01H9BFEG0AVYVCFSZPC6WMQPY2-fra cf-cache-status: HIT age: 1880129 vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 80bad0ddc8e6569b-OSL content-encoding: br X-Firefox-Spdy: h2

	unpkg.com/@otplib/preset-browser@12.0.1/index.js	104.16.126.175	200 OK	31 kB
URL GET HTTP/2 unpkg.com/@otplib/preset-browser@12.0.1/index.js IP 104.16.126.175:443 ASN #13335 CLOUDFLARENET Requested by https://tb-tw-code.glitch.me/ Certificate IssuerCloudflare, Inc. Subjectsni.cloudflaressl.com FingerprintF7:B6:41:CA:15:FD:D1:0C:27:39:55:5D:C5:CE:3F:1C:A6:BB:9D:6F ValidityTue, 02 May 2023 00:00:00 GMT - Wed, 01 May 2024 23:59:59 GMT File type ASCII text, with very long lines (30973) Size 31 kB (31131 bytes) Hash cd041c4940fd1f131554bf24031360ff b8851d05704e6ba47f0d1e07ecd1c672bc9ed14c 509e59b540f6bd235b7dd0dbc2b91deb7122b345c09e5a429245f4ba6fdb94fe HTTP Headers `GET /@otplib/preset-browser@12.0.1/index.js HTTP/1.1 Host: unpkg.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://tb-tw-code.glitch.me/ DNT: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Sun, 24 Sep 2023 11:51:30 GMT content-type: application/javascript; charset=utf-8 access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"799b-uIUdBXBOa6R/DR4H7NHGcrye0Uw" via: 1.1 fly.io fly-request-id: 01HAKF079RC3XW1SNFM6M48Y12-fra cf-cache-status: HIT age: 538421 vary: Accept-Encoding strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff server: cloudflare cf-ray: 80bad0dde939569b-OSL content-encoding: br X-Firefox-Spdy: h2

	tb-tw-code.glitch.me/favicon.ico	54.210.31.14	404 Not Found	3.7 kB
URL GET HTTP/2 tb-tw-code.glitch.me/favicon.ico IP 54.210.31.14:443 ASN #14618 AMAZON-AES Requested by https://tb-tw-code.glitch.me/ Certificate IssuerAmazon Subjectglitch.com Fingerprint13:93:2D:E4:50:7E:CE:BA:BC:F9:6D:7E:86:7F:43:5D:8E:63:45:3E ValidityWed, 22 Feb 2023 00:00:00 GMT - Thu, 01 Feb 2024 23:59:59 GMT File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3860), with no line terminators Size 3.7 kB (3674 bytes) Hash 8278f4a50baab9058328953010197d7a 9544556ac5ec4d08e25f399ccebc12699a0ecc28 5c78d9c99aced916130e4a9b5987a69236186cec610894cc070bd98b4467ae1e HTTP Headers `GET /favicon.ico HTTP/1.1 Host: tb-tw-code.glitch.me User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://tb-tw-code.glitch.me/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found date: Sun, 24 Sep 2023 11:51:30 GMT content-length: 3674 cache-control: max-age=0 X-Firefox-Spdy: h2`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN