Report - complete-grey-monitor.glitch.me/public/NFCU.html

Report Overview

Visited public
2025-04-06 09:14:19
Tags
URL
complete-grey-monitor.glitch.me/public/NFCU.html
Finishing URL
complete-grey-monitor.glitch.me/public/NFCU.html
IP / ASN
151.101.2.59
#54113 FASTLY
Title
Navy Federal Credit Union - Our Members are the Mission®

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
l2.io	163527	2012-05-12	2015-06-25	2025-03-30	414 B	228 B	195.80.159.133
complete-grey-monitor.glitch.me	unknown	2008-07-18	2025-04-06	2025-04-06	504 B	944 kB	151.101.2.59
i.ibb.co	13485	2010-07-20	2018-11-25	2025-04-05	445 B	3.6 kB	91.134.82.79

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-04-06 09:13:56	medium	Client IP	151.101.2.59	ET HUNTING Suspicious Glitch Hosted TLS SNI Request - Possible Phishing Landing
2025-04-06 09:13:56	low	Client IP	151.101.2.59	ET INFO Observed Online Application Hosting Domain (glitch .me in TLS SNI)
2025-04-06 09:13:57	medium	Client IP	195.80.159.133	ET POLICY Observed IP Lookup Domain (l2 .io in TLS SNI)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2025-04-05	medium	complete-grey-monitor.glitch.me/public/NFCU.html	Navy Federal Credit Union

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-04-06	medium	complete-grey-monitor.glitch.me	Sinkholed

ThreatFox

No alerts detected

JavaScript (11)

	URL	From	Size	First Seen	Last Seen
	complete-grey-monitor.glitch.me/public/NFCU.html	ScriptElement	2.1 kB	2023-03-07	2025-05-06
Pretty URL complete-grey-monitor.glitch.me/public/NFCU.html IP 151.101.2.59 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:03 Last Seen2025-05-06 15:15 Times Seen178 Hash f614f20afbf576b484daff8f1cd754e9 1638b3a4fd33b596e4f2c0b34fb4dfda7ea5b419 b706e7f259717a7f26145ad3877f817c14b281f2fb6698998dd967cfe45304ef Loading...

	complete-grey-monitor.glitch.me/public/NFCU.html	ScriptElement	1.4 kB	2025-04-06	2025-05-02
Pretty URL complete-grey-monitor.glitch.me/public/NFCU.html IP 151.101.2.59 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2025-04-06 09:14 Last Seen2025-05-02 15:19 Times Seen3 Hash d7fe4bd00a26c3c141d0dfa81f3c849f f303f20b646732a4f61c442f969b72139a3d43c0 56c1f94df50598486ca74a288ecbe7d8ec5419b7a10ea4f4c9fc02fd62fe9571 Loading...

	complete-grey-monitor.glitch.me/public/NFCU.html	ScriptElement	1.9 kB	2023-03-07	2025-05-06
Pretty URL complete-grey-monitor.glitch.me/public/NFCU.html IP 151.101.2.59 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:38 Last Seen2025-05-06 15:15 Times Seen96 Hash b81269e186b77f5500eb8316b8dab69f f8c2b54bac0660aa442c2b0c971a811735c09b86 079f71d93dc83f160ca03e1b816f9d1b24981f768a81723a98de8ff2d3055139 Loading...

	complete-grey-monitor.glitch.me/public/NFCU.html	ScriptElement	1.2 kB	2023-03-07	2025-05-06
Pretty URL complete-grey-monitor.glitch.me/public/NFCU.html IP 151.101.2.59 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:39 Last Seen2025-05-06 15:15 Times Seen97 Hash 38c257a23df6f583d7ac1032fbbe19de 9ae3937559866937033f958304b1407c994d5e2e d26c40c76b8666080a64f559f8a0e873a8d7df2f6e23ae54049e1bcb7f054be4 Loading...

	complete-grey-monitor.glitch.me/public/NFCU.html	ScriptElement	1.3 kB	2023-03-07	2025-05-06
Pretty URL complete-grey-monitor.glitch.me/public/NFCU.html IP 151.101.2.59 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:39 Last Seen2025-05-06 15:15 Times Seen96 Hash e8fda04bd98519987fdd1e09767e291a 0939e467e42e83c1bb4176f203a7eaea46401737 47b3fdf6adffeda47b604f6282672c5bf80be9960ab7df0542f6971d0925ada7 Loading...

	complete-grey-monitor.glitch.me/public/NFCU.html	ScriptElement	398 B	2023-03-07	2025-05-06
Pretty URL complete-grey-monitor.glitch.me/public/NFCU.html IP 151.101.2.59 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:03 Last Seen2025-05-06 15:15 Times Seen177 Hash 50a892b9a1594bbdffb3091e0c4c290a f764e97d3742b9ae4be7471d4c89998f83425f3f d1615b4612803995f82464f714e82ba84a7471fb6607b68080401140ceda4eb2 Loading...

	l2.io/ip.js?var=userip	ScriptElement	24 B	2023-03-07	2025-05-09
Pretty URL l2.io/ip.js?var=userip IP 195.80.159.133 ASN #29152 Decknet SARL Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02 Last Seen2025-05-09 07:36 Times Seen1137 Hash f9dc91b3feea65bd389a2f5b57306c32 147d1c9ae79ae948a34c5f1254bdcbf7af9caf8e d88923af30873abcf4cde709062c3d2e9ded181f9e2552c7fbcc983b3796ff77 Loading...

	complete-grey-monitor.glitch.me/public/NFCU.html	ScriptElement	1.4 kB	2023-03-07	2025-05-06
Pretty URL complete-grey-monitor.glitch.me/public/NFCU.html IP 151.101.2.59 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:38 Last Seen2025-05-06 15:15 Times Seen95 Hash 448be6cccb8dc545fc78717ce80435dd 8a147e342d2f643c196d601534238f6deb999c6d 06e3026569bde580035ebe870c64b5efefb1643d5d3e1cb7ce8ba36839e5adeb Loading...

	complete-grey-monitor.glitch.me/public/NFCU.html	ScriptElement	1.1 kB	2023-03-07	2025-05-06
Pretty URL complete-grey-monitor.glitch.me/public/NFCU.html IP 151.101.2.59 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 12:38 Last Seen2025-05-06 15:15 Times Seen91 Hash e67628a0a4b6689737bb8d99673ca4b1 7a3974308c5475c246ca20048df656b86f0ee35a 9d1228f474914e0a75a8f08994a976636097bdff1d7263c0568011021f360aa9 Loading...

	complete-grey-monitor.glitch.me/public/NFCU.html	ScriptElement	15 B	2023-03-07	2025-05-07
Pretty URL complete-grey-monitor.glitch.me/public/NFCU.html IP 151.101.2.59 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:06 Last Seen2025-05-07 16:02 Times Seen319 Hash a6334981a8bbe29aa5c1dc2edd2640b2 4c0fb8f501dfb048b93102fccc8976cd1ce14f34 5dedb26ee87d110b89e97198b67b2a79dc14359cfda2d56ff91af5f460b6a4a0 Loading...

	complete-grey-monitor.glitch.me/public/NFCU.html	ScriptElement	65 B	2023-03-07	2025-05-07
Pretty URL complete-grey-monitor.glitch.me/public/NFCU.html IP 151.101.2.59 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:06 Last Seen2025-05-07 16:02 Times Seen316 Hash 2bd60c5b14d66a418d7acfdb28bbbdce d2281051c147d3ba68c9cdf1048cf1d49408aa39 7ebe893f5ae6a45f490e5b51841c7ba938425832b0326aad21a13106b52d8675 Loading...

HTTP Transactions (3)

URL IP Response Size

complete-grey-monitor.glitch.me/public/NFCU.html

151.101.2.59

200 OK

944 kB

URL User Request GET
complete-grey-monitor.glitch.me/public/NFCU.html
IP
151.101.2.59:443
ASN
#54113 FASTLY

Certificate
IssuerCertainly
Subject*.glitch.me
Fingerprint97:AE:38:66:3D:A4:DF:39:E3:02:0E:99:02:5B:C4:DD:7A:E0:6D:60
ValiditySat, 22 Mar 2025 21:21:47 GMT - Mon, 21 Apr 2025 21:21:46 GMT

File type

Size
944 kB (943520 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Navy Federal Credit Union
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /public/NFCU.html HTTP/1.1
Host: complete-grey-monitor.glitch.me
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: AmazonS3
etag: "b43f77fa71db98c50858abdcb81df8f2"
x-amz-version-id: null
x-amz-server-side-encryption: AES256
content-type: text/html; charset=utf-8
x-amz-id-2: qiNDQ9dve65C0B8WZn8FxjXJDVGAsJsvpgyAL+pQFuQT0+LzFku6mO4VbLBkQ//eQYYi4k69NIY=
cache-control: no-cache
last-modified: Sat, 29 Mar 2025 14:09:44 GMT
x-amz-request-id: 5TGZXQ1MYBEXBGXT
accept-ranges: bytes
date: Sun, 06 Apr 2025 09:13:56 GMT
via: 1.1 varnish
x-served-by: cache-hel1410028-HEL, cache-hel1410028-HEL
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1743930836.178470,VS0,VE214
content-length: 943520
X-Firefox-Spdy: h2

i.ibb.co/RpLNy4f/ajax-loader.gif

91.134.82.79

200 OK

3.2 kB

URL GET
i.ibb.co/RpLNy4f/ajax-loader.gif
IP
91.134.82.79:443
ASN
#16276 OVH SAS

Requested by
https://complete-grey-monitor.glitch.me/public/NFCU.html
Certificate
IssuerLet's Encrypt
Subjectibb.co
FingerprintF8:55:93:A2:23:0E:9F:7C:B4:90:E7:20:13:F4:0E:A8:FD:00:95:EA
ValidityTue, 18 Feb 2025 22:30:01 GMT - Mon, 19 May 2025 22:30:00 GMT

File type
GIF image data, version 89a, 32 x 32
Size
3.2 kB (3208 bytes)
Hash
be1cede97289c13920048f238fd37b85
313b867d11fc0dd6bc6ca47c334bbcf18956ca76
fd29b3b084cf11160bfc4e99d98a261f2b36bff29113b07367c5204563c5d355

HTTP Headers

GET /RpLNy4f/ajax-loader.gif HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://complete-grey-monitor.glitch.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sun, 06 Apr 2025 09:13:57 GMT
content-type: image/gif
content-length: 3208
last-modified: Tue, 02 Mar 2021 22:27:30 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2

l2.io/ip.js?var=userip

195.80.159.133

200 OK

24 B

URL GET
l2.io/ip.js?var=userip
IP
195.80.159.133:443
ASN
#29152 Decknet SARL

Requested by
https://complete-grey-monitor.glitch.me/public/NFCU.html
Certificate
IssuerLet's Encrypt
Subjectl2.io
Fingerprint45:65:26:DB:67:D9:94:8A:B5:6C:87:29:58:09:3D:04:A3:29:59:EE
ValiditySat, 01 Mar 2025 18:23:38 GMT - Fri, 30 May 2025 18:23:37 GMT

File type
ASCII text, with no line terminators
Size
24 B (24 bytes)
Hash
00223cd49174075ef7e695320510154e
6c12057c97d08e18244eda510d04ea1a9036f2b2
8bb7166612cada3cdf6ad7e929123f70653cd67c8cd512041310a4562736018c

HTTP Headers

GET /ip.js?var=userip HTTP/1.1
Host: l2.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://complete-grey-monitor.glitch.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 06 Apr 2025 09:13:57 GMT
Server: Apache/2.4.59 (Debian)
Content-Length: 24
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

JavaScript (11)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML