Report Overview
Visitedpublic
2023-11-26 07:44:09
Tags
Submit Tags
URL
fine-panoramic-houseboat.glitch.me/public/hkadhw.HTM
Finishing URL
fine-panoramic-houseboat.glitch.me/public/hkadhw.HTM
IP / ASN
52.2.151.71
Title
Navy Federal Credit Union - Our Members are the Mission®
Suspicious - Suspicious Javascript code
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
fine-panoramic-houseboat.glitch.me | unknown | unknown | No data | No data | 518 B | 2.9 MB | 54.84.157.136 | |
i.ibb.co | 13485 | 2010-07-20 | 2018-11-25 11:13:48 | 2023-11-25 15:39:45 | 458 B | 3.6 kB |  162.19.58.156 | |
l2.io | 163527 | 2012-05-12 | 2015-06-25 03:31:26 | 2023-11-25 03:28:42 | 427 B | 226 B | 195.80.159.133 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| high | Client IP | Internal IP | ET PHISHING Possible Glitch.me Phishing Domain | |
| medium | Client IP | Internal IP | ET HUNTING Suspicious Glitch Hosted DNS Request - Possible Phishing Landing | |
| high | Client IP | Internal IP | ET PHISHING Possible Glitch.me Phishing Domain | |
| medium | Client IP | Internal IP | ET HUNTING Suspicious Glitch Hosted DNS Request - Possible Phishing Landing | |
| medium | Client IP | 54.84.157.136 | ET HUNTING Suspicious Glitch Hosted TLS SNI Request - Possible Phishing Landing | |
| medium | Client IP | Internal IP | ET POLICY Observed IP Lookup Domain (l2 .io in DNS Lookup) | |
| medium | Client IP | Internal IP | ET POLICY Observed IP Lookup Domain (l2 .io in DNS Lookup) | |
| medium | Client IP | 195.80.159.133 | ET POLICY Observed IP Lookup Domain (l2 .io in TLS SNI) |
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
JavaScript (14)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| cda743c68899581f5588287426a54c36 | DocumentWrite | 953 kB | 2023-03-08 | 2024-08-21 | |
Introduced by DocumentWrite First Seen 2023-03-08 Last Seen 2024-08-21 Times Seen 6 Size 953 kB (952777 bytes) MD5 cda743c68899581f5588287426a54c36 SHA1 21740706e8f8477c503e16ebc5135c572e4a5616 Loading... | |||||
HTTP Transactions (3)
| URL | IP | Response | Size |
|---|