Report - inexpensive-absorbed-stranger.glitch.me/jam.html

Report Overview

Submitted URL
inexpensive-absorbed-stranger.glitch.me/jam.html
IP
54.234.253.124
ASN
#14618 AMAZON-AES
Submitted
2024-04-19 15:58:44
Access
public
Website Title
info
Final URL
inexpensive-absorbed-stranger.glitch.me/jam.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-04-19	935 B	16 kB	142.250.74.106
inexpensive-absorbed-stranger.glitch.me	unknown	unknown	No data	No data	995 B	7.9 kB	54.234.253.124
i.postimg.cc	23840	2016-06-11	2018-04-11	2024-04-19	1.9 kB	180 kB	162.19.88.69
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-04-18	583 B	20 kB	216.58.207.227

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-19 15:58:19	medium	Client IP	54.234.253.124	ET HUNTING Suspicious Glitch Hosted TLS SNI Request - Possible Phishing Landing
2024-04-19 15:58:19	low	Client IP	54.234.253.124	ET INFO Observed Online Application Hosting Domain (glitch .me in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	inexpensive-absorbed-stranger.glitch.me/jam.html	Coinbase

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

URL IP Response Size

inexpensive-absorbed-stranger.glitch.me/jam.html

54.234.253.124

200 OK

3.6 kB

URL User Request GET HTTP/2
inexpensive-absorbed-stranger.glitch.me/jam.html
IP
54.234.253.124:443
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.6 kB (3627 bytes)
Hash
10785ad9901d2fecdc354299259d2f6e
d10b1f8886546079d592570b340828557e9db297
bed735924f7fcbeaa54a7a8ee8dc58051de7b76c367b0fbddd48e06a8758546f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Coinbase

HTTP Headers

GET /jam.html HTTP/1.1
Host: inexpensive-absorbed-stranger.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 19 Apr 2024 15:58:19 GMT
content-type: text/html; charset=utf-8
content-length: 3627
x-amz-id-2: 2FWDNPPkfwkgRBEEozdH2blDd6PGGdahY5FJcOruG/PX75jbaipqL0viMLJS1Cu5oqzVaMcLgaY=
x-amz-request-id: 8BKSQQ5RTMK75EYY
last-modified: Wed, 24 Jan 2024 12:09:38 GMT
etag: "10785ad9901d2fecdc354299259d2f6e"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: uc30Abij5UkPNuNCTYiwKkZqANIJ37Gq
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

i.postimg.cc/zG3nVT0g/cb675.png

162.19.88.69

200 OK

5.0 kB

URL GET HTTP/2
i.postimg.cc/zG3nVT0g/cb675.png
IP
162.19.88.69:443
ASN
#16276 OVH SAS

Requested by
https://inexpensive-absorbed-stranger.glitch.me/jam.html
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
PNG image data, 455 x 111, 8-bit colormap, non-interlaced
Size
5.0 kB (4966 bytes)
Hash
2a1532e76ca86d27bae34bee7770c4b7
5f73a5e8ac448324d02bc6fc4af90d8a5c88733d
47f11b95f73135f7bc623be4083187d4d6343d17f9672214515576be46f81fdf

HTTP Headers

GET /zG3nVT0g/cb675.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inexpensive-absorbed-stranger.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 15:58:19 GMT
content-type: image/png
content-length: 4966
last-modified: Tue, 24 Oct 2023 01:26:10 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/7Lq0Kw64/subm.png

162.19.88.69

200 OK

58 kB

URL GET HTTP/2
i.postimg.cc/7Lq0Kw64/subm.png
IP
162.19.88.69:443
ASN
#16276 OVH SAS

Requested by
https://inexpensive-absorbed-stranger.glitch.me/jam.html
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
PNG image data, 490 x 65, 8-bit/color RGBA, non-interlaced
Size
58 kB (58469 bytes)
Hash
08f9803352bbff7e87a8cfd0909cd117
13e3cef2d2be9b5e0934ba7ec228eac06b12cfd8
66ab896095eccacb8caf2edb5d80f0323bfcb1f7959a070ea5c35f5da108406d

HTTP Headers

GET /7Lq0Kw64/subm.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inexpensive-absorbed-stranger.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 15:58:19 GMT
content-type: image/png
content-length: 58469
last-modified: Fri, 22 Dec 2023 09:20:24 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/pTVT25MJ/phras1.png

162.19.88.69

200 OK

60 kB

URL GET HTTP/2
i.postimg.cc/pTVT25MJ/phras1.png
IP
162.19.88.69:443
ASN
#16276 OVH SAS

Requested by
https://inexpensive-absorbed-stranger.glitch.me/jam.html
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
PNG image data, 407 x 40, 8-bit/color RGBA, non-interlaced
Size
60 kB (59561 bytes)
Hash
4c965640e32a882876ea8fb7ab698914
a455cc9314a173ae6ef88dc28ba98083a70e8b94
82c9139c3b633aa13219e17e7bf63c5d4f95292ebffe3e7fca8f174e8ca30b3e

HTTP Headers

GET /pTVT25MJ/phras1.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inexpensive-absorbed-stranger.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 15:58:19 GMT
content-type: image/png
content-length: 59561
last-modified: Fri, 22 Dec 2023 12:03:18 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/3NsrHVT2/sum.png

162.19.88.69

200 OK

56 kB

URL GET HTTP/2
i.postimg.cc/3NsrHVT2/sum.png
IP
162.19.88.69:443
ASN
#16276 OVH SAS

Requested by
https://inexpensive-absorbed-stranger.glitch.me/jam.html
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
FingerprintF9:1B:A9:B2:AB:2D:30:75:4E:44:3F:7A:6F:40:77:77:39:CE:1B:13
ValidityWed, 21 Feb 2024 07:13:33 GMT - Tue, 21 May 2024 07:13:32 GMT

File type
PNG image data, 309 x 34, 8-bit/color RGBA, non-interlaced
Size
56 kB (55544 bytes)
Hash
7c0a9c2b62659dc41bfbdd6e83e095d8
8a87e2bdb63ac278a18ab71c5b55e7d275e286b9
6497ba6f1ea322123029052050f3cc3178be7934362e3d9b332431a3cba8b4bf

HTTP Headers

GET /3NsrHVT2/sum.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inexpensive-absorbed-stranger.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Fri, 19 Apr 2024 15:58:19 GMT
content-type: image/png
content-length: 55544
last-modified: Fri, 22 Dec 2023 09:38:52 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2

216.58.207.227

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://inexpensive-absorbed-stranger.glitch.me/jam.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9
ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Size
19 kB (18668 bytes)
Hash
8655d20bbcc8cdbfab17b6be6cf55df3
90edbfa9a7dabb185487b4774076f82eb6412270
e7af9d60d875eb1c1b1037bbbfdec41fcb096d0ebcf98a48717ad8b07906ced6

HTTP Headers

GET /s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://inexpensive-absorbed-stranger.glitch.me
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18668
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 18 Apr 2024 02:34:50 GMT
expires: Fri, 18 Apr 2025 02:34:50 GMT
cache-control: public, max-age=31536000
age: 134610
last-modified: Thu, 14 Dec 2023 02:00:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

inexpensive-absorbed-stranger.glitch.me/favicon.ico

54.234.253.124

404 Not Found

3.7 kB

URL GET HTTP/2
inexpensive-absorbed-stranger.glitch.me/favicon.ico
IP
54.234.253.124:443
ASN
#14618 AMAZON-AES

Requested by
https://inexpensive-absorbed-stranger.glitch.me/jam.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: inexpensive-absorbed-stranger.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inexpensive-absorbed-stranger.glitch.me/jam.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Fri, 19 Apr 2024 15:58:20 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;700&display=swap

142.250.74.106

200 OK

9.3 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://inexpensive-absorbed-stranger.glitch.me/jam.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
gzip compressed data, max compression
Size
9.3 kB (9306 bytes)
Hash
7e34db1f7ef8f887deb9c884ded37f59
a635d06ce5d8264a2c6b6ecaa5c1035124029c77
c10ce604bfdbba5978a6448992f59d827110ca18e3464a8f4d2d1231dc19e52a

HTTP Headers

GET /css2?family=DM+Sans:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inexpensive-absorbed-stranger.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 15:58:19 GMT
date: Fri, 19 Apr 2024 15:58:19 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans

142.250.74.106

200 OK

5.0 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://inexpensive-absorbed-stranger.glitch.me/jam.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E
ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT

File type
gzip compressed data, max compression
Size
5.0 kB (5040 bytes)
Hash
8b9e993f3359dd27d880328fd7d9a652
eae6c2c89aaa848090e8445b9f179b98c80f1eab
72bb2cb48122e705bdd169adb1df7134d50cb74a1b8d7978d0b75109efee6572

HTTP Headers

GET /css?family=Open+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inexpensive-absorbed-stranger.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 19 Apr 2024 15:58:19 GMT
date: Fri, 19 Apr 2024 15:58:19 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash