Report - juniper-wonderful-flare.glitch.me/web.html

Report Overview

Submitted URL
juniper-wonderful-flare.glitch.me/web.html
IP
54.83.64.233
ASN
#14618 AMAZON-AES
Submitted
2024-05-08 15:53:57
Access
public
Website Title
info
Final URL
juniper-wonderful-flare.glitch.me/web.html
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
juniper-wonderful-flare.glitch.me	unknown	2008-07-18	2024-03-11	2024-03-27	977 B	8.0 kB	54.83.64.233
i.postimg.cc	23840	2016-06-11	2018-04-11	2024-05-07	1.8 kB	180 kB	162.19.88.69
fonts.gstatic.com	unknown	2008-02-11	2014-09-09	2024-05-08	577 B	20 kB	216.58.207.227
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-07	925 B	13 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	juniper-wonderful-flare.glitch.me/web.html	Coinbase

PhishTank

Scan Date	Severity	Indicator	Alert
2024-03-11	medium	juniper-wonderful-flare.glitch.me/web.html	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (9)

URL IP Response Size

juniper-wonderful-flare.glitch.me/web.html

54.83.64.233

200 OK

3.6 kB

URL User Request GET HTTP/2
juniper-wonderful-flare.glitch.me/web.html
IP
54.83.64.233:443
ASN
#14618 AMAZON-AES

Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.6 kB (3626 bytes)
Hash
6abcddd6f1eac01c2ddc7d91b4ac3a14
278464baf9ef89eb6b432cdcaea28135bb64c62d
d0bbddeced2795411a9190bd19d17f3a2e4c72b1c2e854e069866af815d07f2b

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Coinbase
PhishTank	phishing	Other

HTTP Headers

GET /web.html HTTP/1.1
Host: juniper-wonderful-flare.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 15:53:32 GMT
content-type: text/html; charset=utf-8
content-length: 3626
x-amz-id-2: Hzb+FWhrymXx/qSvRnzzUTHTSS7HBm4O7oA0Yo7xMDTsfm1aYgkAB2HotpWlf0XJxfFz6ytrwQ3nwfOLgbyDMLPEP4WdD5B5aFw82fDkGRI=
x-amz-request-id: 90AWG15T3S3CV1PH
last-modified: Thu, 04 Apr 2024 23:01:52 GMT
etag: "6abcddd6f1eac01c2ddc7d91b4ac3a14"
x-amz-server-side-encryption: AES256
cache-control: no-cache
x-amz-version-id: 6x3vH71hoQFWxz.zFuvK.1gBf8eRkOpG
accept-ranges: bytes
server: AmazonS3
X-Firefox-Spdy: h2

i.postimg.cc/V6yNrcWb/tok.png

162.19.88.69

200 OK

58 kB

URL GET HTTP/2
i.postimg.cc/V6yNrcWb/tok.png
IP
162.19.88.69:443
ASN
#16276 OVH SAS

Requested by
https://juniper-wonderful-flare.glitch.me/web.html
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
Fingerprint53:90:A2:AC:6E:D0:9C:56:06:D5:4F:6E:EE:C9:67:58:10:CF:9A:D6
ValidityMon, 22 Apr 2024 06:32:22 GMT - Sun, 21 Jul 2024 06:32:21 GMT

File type
PNG image data, 490 x 65, 8-bit/color RGBA, non-interlaced
Size
58 kB (58469 bytes)
Hash
08f9803352bbff7e87a8cfd0909cd117
13e3cef2d2be9b5e0934ba7ec228eac06b12cfd8
66ab896095eccacb8caf2edb5d80f0323bfcb1f7959a070ea5c35f5da108406d

HTTP Headers

GET /V6yNrcWb/tok.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://juniper-wonderful-flare.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 15:53:33 GMT
content-type: image/png
content-length: 58469
last-modified: Thu, 07 Mar 2024 13:26:56 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/KcJh5d8T/lodf.png

162.19.88.69

200 OK

5.0 kB

URL GET HTTP/2
i.postimg.cc/KcJh5d8T/lodf.png
IP
162.19.88.69:443
ASN
#16276 OVH SAS

Requested by
https://juniper-wonderful-flare.glitch.me/web.html
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
Fingerprint53:90:A2:AC:6E:D0:9C:56:06:D5:4F:6E:EE:C9:67:58:10:CF:9A:D6
ValidityMon, 22 Apr 2024 06:32:22 GMT - Sun, 21 Jul 2024 06:32:21 GMT

File type
PNG image data, 455 x 111, 8-bit colormap, non-interlaced
Size
5.0 kB (4966 bytes)
Hash
2a1532e76ca86d27bae34bee7770c4b7
5f73a5e8ac448324d02bc6fc4af90d8a5c88733d
47f11b95f73135f7bc623be4083187d4d6343d17f9672214515576be46f81fdf

HTTP Headers

GET /KcJh5d8T/lodf.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://juniper-wonderful-flare.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 15:53:33 GMT
content-type: image/png
content-length: 4966
last-modified: Thu, 07 Mar 2024 12:34:11 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/y8z12w3J/ents.png

162.19.88.69

200 OK

60 kB

URL GET HTTP/2
i.postimg.cc/y8z12w3J/ents.png
IP
162.19.88.69:443
ASN
#16276 OVH SAS

Requested by
https://juniper-wonderful-flare.glitch.me/web.html
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
Fingerprint53:90:A2:AC:6E:D0:9C:56:06:D5:4F:6E:EE:C9:67:58:10:CF:9A:D6
ValidityMon, 22 Apr 2024 06:32:22 GMT - Sun, 21 Jul 2024 06:32:21 GMT

File type
PNG image data, 407 x 40, 8-bit/color RGBA, non-interlaced
Size
60 kB (59561 bytes)
Hash
4c965640e32a882876ea8fb7ab698914
a455cc9314a173ae6ef88dc28ba98083a70e8b94
82c9139c3b633aa13219e17e7bf63c5d4f95292ebffe3e7fca8f174e8ca30b3e

HTTP Headers

GET /y8z12w3J/ents.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://juniper-wonderful-flare.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 15:53:33 GMT
content-type: image/png
content-length: 59561
last-modified: Thu, 07 Mar 2024 13:13:16 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

i.postimg.cc/zGjwF0cB/seps.png

162.19.88.69

200 OK

56 kB

URL GET HTTP/2
i.postimg.cc/zGjwF0cB/seps.png
IP
162.19.88.69:443
ASN
#16276 OVH SAS

Requested by
https://juniper-wonderful-flare.glitch.me/web.html
Certificate
IssuerLet's Encrypt
Subjectpostimg.cc
Fingerprint53:90:A2:AC:6E:D0:9C:56:06:D5:4F:6E:EE:C9:67:58:10:CF:9A:D6
ValidityMon, 22 Apr 2024 06:32:22 GMT - Sun, 21 Jul 2024 06:32:21 GMT

File type
PNG image data, 309 x 34, 8-bit/color RGBA, non-interlaced
Size
56 kB (55544 bytes)
Hash
7c0a9c2b62659dc41bfbdd6e83e095d8
8a87e2bdb63ac278a18ab71c5b55e7d275e286b9
6497ba6f1ea322123029052050f3cc3178be7934362e3d9b332431a3cba8b4bf

HTTP Headers

GET /zGjwF0cB/seps.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://juniper-wonderful-flare.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Wed, 08 May 2024 15:53:33 GMT
content-type: image/png
content-length: 55544
last-modified: Thu, 07 Mar 2024 13:25:14 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2

216.58.207.227

200 OK

19 kB

URL GET HTTP/2
fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://juniper-wonderful-flare.glitch.me/web.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD
ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT

File type
Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Size
19 kB (18668 bytes)
Hash
8655d20bbcc8cdbfab17b6be6cf55df3
90edbfa9a7dabb185487b4774076f82eb6412270
e7af9d60d875eb1c1b1037bbbfdec41fcb096d0ebcf98a48717ad8b07906ced6

HTTP Headers

GET /s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://juniper-wonderful-flare.glitch.me
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 18668
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 May 2024 01:49:21 GMT
expires: Fri, 02 May 2025 01:49:21 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:00:39 GMT
content-type: font/woff2
age: 569052
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

juniper-wonderful-flare.glitch.me/favicon.ico

54.83.64.233

404 Not Found

3.7 kB

URL GET HTTP/2
juniper-wonderful-flare.glitch.me/favicon.ico
IP
54.83.64.233:443
ASN
#14618 AMAZON-AES

Requested by
https://juniper-wonderful-flare.glitch.me/web.html
Certificate
IssuerAmazon
Subjectglitch.com
Fingerprint57:4F:13:8A:33:42:32:7C:F7:C9:C5:1F:DF:C1:35:65:F0:E9:70:EE
ValidityMon, 04 Dec 2023 00:00:00 GMT - Wed, 01 Jan 2025 23:59:59 GMT

File type
HTML document, ASCII text
Size
3.7 kB (3674 bytes)
Hash
ce0366d3c0ef2d5187efc621c5e7fb00
83f60d035e88968d24178360639a8ad6cc08dc26
2784f6ffefbd5fcae302d112e1629907deed1e36f9c2050ea6d7038eec3f649c

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: juniper-wonderful-flare.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://juniper-wonderful-flare.glitch.me/web.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 404 Not Found
date: Wed, 08 May 2024 15:53:33 GMT
content-length: 3674
cache-control: max-age=0
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Open+Sans

142.250.74.106

200 OK

9.4 kB

URL GET HTTP/2
fonts.googleapis.com/css?family=Open+Sans
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://juniper-wonderful-flare.glitch.me/web.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
gzip compressed data, max compression
Size
9.4 kB (9357 bytes)
Hash
719af29a3e97885503ec40de0a3c218b
089fdbf89e5d09a2624b7ff1bb274de2eddd09ff
41b0806ad4df616c7ffcdfab98518166bae67f6cb994b58326229a98a7ff10bd

HTTP Headers

GET /css?family=Open+Sans HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://juniper-wonderful-flare.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 15:53:33 GMT
date: Wed, 08 May 2024 15:53:33 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;700&display=swap

142.250.74.106

200 OK

2.4 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=DM+Sans:wght@400;500;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://juniper-wonderful-flare.glitch.me/web.html
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint36:49:20:36:0C:4D:DA:55:65:64:23:0F:49:3E:FA:78:87:35:A3:79
ValidityTue, 16 Apr 2024 04:17:12 GMT - Tue, 09 Jul 2024 04:17:11 GMT

File type
ASCII text, with very long lines (2496), with no line terminators
Size
2.4 kB (2442 bytes)
Hash
2fe914f1aca0f279fbb08f042011e026
d0aaf705499816c42e3f0585b5ce32b7a21172fb
97ec1c36edc47fe7a8e4e2cf47a0edfec8b32d46f91c3cd8b0a998d416658916

HTTP Headers

GET /css2?family=DM+Sans:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://juniper-wonderful-flare.glitch.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 08 May 2024 15:53:33 GMT
date: Wed, 08 May 2024 15:53:33 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (9)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash