Report - clous-lab-662a.tlavaeonryersvs.workers.dev/03076ce1-7441-4494-9b6c-c6311d88e918

Report Overview

Submitted URL
clous-lab-662a.tlavaeonryersvs.workers.dev/03076ce1-7441-4494-9b6c-c6311d88e918
IP
104.21.70.68
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 05:51:59
Access
public
Website Title
blob:https://clous-lab-662a.tlavaeonryersvs.workers.dev/b678fbbb-f3f0-4ad9-8f54-43debc2b8646
Final URL
clous-lab-662a.tlavaeonryersvs.workers.dev/b678fbbb-f3f0-4ad9-8f54-43debc2b8646
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-17	436 B	31 kB	151.101.66.137
clous-lab-662a.tlavaeonryersvs.workers.dev	unknown	2019-02-08	2023-10-06	2024-04-13	1.1 kB	853 kB	172.67.221.19

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-17	medium	clous-lab-662a.tlavaeonryersvs.workers.dev/03076ce1-7441-4494-9b6c-c6311d88e918	Office365
2024-04-11	medium	clous-lab-662a.tlavaeonryersvs.workers.dev/	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-12-06	medium	clous-lab-662a.tlavaeonryersvs.workers.dev/03076ce1-7441-4494-9b6c-c6311d88e918	Other
2023-12-06	medium	clous-lab-662a.tlavaeonryersvs.workers.dev/favicon.ico	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	unknown	141 kB	2023-05-13	2024-04-30
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-13 20:14:50 Last Seen2024-04-30 20:15:00 Times Seen4523 Hash 0280dda4590da433693ba3c1a2ebfeff cd2a9d01bc2076db50060e216009939a637a78c4 64a86ac78a3f27afd28930b94279340750a5a5ae1e78f44648dc7ea0a1386295 Loading...

	unknown	1.3 MB	2023-12-12	2024-04-21
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-12 15:29:23 Last Seen2024-04-21 06:53:08 Times Seen56 Hash e5dce7a12fe5fa4932d53277ccf481f0 cd35a6fd05ff00b50b7a84796e1187b94c03a3cf 2a5f02cc20e38814844e524a0e99fb8db40f580f80b52b61ef434252d635fcd4 Loading...

	unknown	1.3 MB	2023-12-12	2024-04-21
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-12 15:29:24 Last Seen2024-04-21 06:53:08 Times Seen56 Hash 0de307cf13352ca96ea2700b959579d8 ddef0c3c854dd2a419c51007be9300801bf0622e 4fa75980f67860cdc33c891fab2a65f77abd9365c9eec29275b5891309dbe90b Loading...

	unknown	34 B	2023-04-11	2024-05-01
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-01 01:30:13 Times Seen75765 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	clous-lab-662a.tlavaeonryersvs.workers.dev/b678fbbb-f3f0-4ad9-8f54-43debc2b8646	1.6 MB	2023-12-12	2024-04-21
Pretty URL clous-lab-662a.tlavaeonryersvs.workers.dev/b678fbbb-f3f0-4ad9-8f54-43debc2b8646 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-12 15:29:24 Last Seen2024-04-21 06:53:08 Times Seen56 Hash 04e788212a7397b3a0f389a256e1377d cd233f309e2aed6da2c8ef4d54cb8de56d321893 9754f36f399be7e27757f4e5ad917ec9f410311aa494a2e4addfae57e654a16b Loading...

	unknown	1.4 MB	2023-12-12	2024-04-21
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-12 15:29:23 Last Seen2024-04-21 06:53:08 Times Seen56 Hash 7ce7ccf572f4ba6e776048f43a9a01d7 1d67556e541931a5b6ff1a70b04515f8b13ec46f a6dd921706bc00bcda106932b223fdf19f02622bbe59788bee952cdbc452e6f1 Loading...

		Size	First Seen	Last Seen
	#1 Eval - b152cb836b376b6a82f7e1ef6a6fbfdf	1.4 MB	2023-12-12	2024-04-21
Pretty Observations First Seen2023-12-12 15:29:24 Last Seen2024-04-21 06:53:08 Times Seen53 Hash b152cb836b376b6a82f7e1ef6a6fbfdf dfe4b68dabde51dfdbe870385e8333686d74a40d f4059b2a222f3c41128d98e3d70573bfca24a5ee479d8921202564cb41128548 Loading...

	#2 Eval - 1d7b66f8735a7296d85d97c16ff8c0b6	1.5 MB	2023-12-12	2024-04-21
Pretty Observations First Seen2023-12-12 15:29:24 Last Seen2024-04-21 06:53:08 Times Seen56 Hash 1d7b66f8735a7296d85d97c16ff8c0b6 49f3d7b81ff43330a2c6fc0d821679c83bbbc3e4 03d026665a7e08be467f2ef0404d9889e8771170515281882486619c551d0c22 Loading...

	#3 Eval - 6748bacddce65aad2fa84e092532232d	1.3 MB	2023-12-12	2024-04-21
Pretty Observations First Seen2023-12-12 15:29:24 Last Seen2024-04-21 06:53:08 Times Seen56 Hash 6748bacddce65aad2fa84e092532232d c7e9424859ed43015b9c12456e0b6f3a014cfa48 2e6cd3fed285908d65e13904f4ae10f9575ae1e219e5e13e8b05d4ab170e1eef Loading...

		Size	First Seen	Last Seen
	#1 Write - a4367bf75e69fb1a053686b720f10afd	1.3 MB	2023-12-12	2024-04-21
Pretty Observations First Seen2023-12-12 15:29:24 Last Seen2024-04-21 06:53:08 Times Seen56 Hash a4367bf75e69fb1a053686b720f10afd 6a4620c93757ab17138ac144dc3b5f1f32f998b4 495474e58cbea0e0ad96f136f1ddce5731e0313fe58eb54ff45ced7f63b18bd2 Loading...

	#2 Write - 30d0cba7047b95f8fbac9bc6dfeb7e52	293 kB	2023-10-19	2024-04-30
Pretty Observations First Seen2023-10-19 11:30:25 Last Seen2024-04-30 20:15:00 Times Seen2244 Hash 30d0cba7047b95f8fbac9bc6dfeb7e52 2efe2a8ef46b1283e30b689ef4e69a701621dd5f aa965e28f8debb25cd16cc26ee07db6f4da11358cebb2fd1f25b0a0356f1f2d2 Loading...

	#3 Write - 798f44f5f67112d59598960b9b0df2ae	1.3 MB	2023-12-12	2024-04-21
Pretty Observations First Seen2023-12-12 15:29:24 Last Seen2024-04-21 06:53:08 Times Seen56 Hash 798f44f5f67112d59598960b9b0df2ae 071628c734987fd946694018b3088b1223114a8d 9161e2f3ae6932b760c3fa2c7f50999336f25c5f150ac6fd6bbd43f838840527 Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.66.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://clous-lab-662a.tlavaeonryersvs.workers.dev/03076ce1-7441-4494-9b6c-c6311d88e918
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clous-lab-662a.tlavaeonryersvs.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 18 Apr 2024 05:51:31 GMT
age: 5337990
x-served-by: cache-lga21965-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 40227
x-timer: S1713419491.388891,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

clous-lab-662a.tlavaeonryersvs.workers.dev/03076ce1-7441-4494-9b6c-c6311d88e918

172.67.221.19

200 OK

847 kB

URL User Request GET HTTP/2
clous-lab-662a.tlavaeonryersvs.workers.dev/03076ce1-7441-4494-9b6c-c6311d88e918
IP
172.67.221.19:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttlavaeonryersvs.workers.dev
FingerprintA8:33:88:C4:2B:9A:88:92:E4:00:2E:01:98:55:64:7D:47:72:D9:12
ValiditySun, 31 Mar 2024 12:51:02 GMT - Sat, 29 Jun 2024 12:51:01 GMT

File type
HTML document, ASCII text, with very long lines (64864)
Size
847 kB (847432 bytes)
Hash
30932d776f4be99147d4365d544f328b
3589699637cacf30635aa46d3066417d6f928a73
2b7a319c8f1d926f2796493b985c4a14720cc6afb17ac1aa21e876962eeae7ef

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /03076ce1-7441-4494-9b6c-c6311d88e918 HTTP/1.1
Host: clous-lab-662a.tlavaeonryersvs.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:51:30 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wx29qeCGFXoIppZMlEoM%2Bjdv1T81DjSGZ3SlXPDnJYKtstDF1KX6gxpQsYSx1%2BP2hLJlsyI99m8M0rg6W1w1U7fhWfkQA0q6xedeYbNUrGJt1kO2oU8Dozw28uiyHYJ2uLAh4hnUgDLtC26DXSnWS80JloSH%2F6qtTZq7rRA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762622a0ba056b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

clous-lab-662a.tlavaeonryersvs.workers.dev/favicon.ico

172.67.221.19

200 OK

4.2 kB

URL GET HTTP/3
clous-lab-662a.tlavaeonryersvs.workers.dev/favicon.ico
IP
172.67.221.19:443
ASN
#13335 CLOUDFLARENET

Requested by
https://clous-lab-662a.tlavaeonryersvs.workers.dev/03076ce1-7441-4494-9b6c-c6311d88e918
Certificate
IssuerGoogle Trust Services LLC
Subjecttlavaeonryersvs.workers.dev
FingerprintA8:33:88:C4:2B:9A:88:92:E4:00:2E:01:98:55:64:7D:47:72:D9:12
ValiditySun, 31 Mar 2024 12:51:02 GMT - Sat, 29 Jun 2024 12:51:01 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3
Size
4.2 kB (4190 bytes)
Hash
62026f04ce5d8fdd655c35cc30dad87b
39fa4bc63d11a05caf6c7f6d62fe10fe0452a583
491f667cebcc5f7a26e08203d7930cfbf231f9159f8abec7fe6fabf76a425589

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: clous-lab-662a.tlavaeonryersvs.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clous-lab-662a.tlavaeonryersvs.workers.dev/03076ce1-7441-4494-9b6c-c6311d88e918
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:51:31 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e0G4tbgMfMhvWXs1iLMTJwZZjM0UAP8WATDk1mTMI7qxjkcUyRG6wquDlm55tx8Yyv5vGV0btbXT7VH9pUDamIy8kk4gzP2FURHGYwWB2spLrZJbN%2BQh9RJaWrcxIloXVANVQMJWCPZV%2BlRMmn1cTFODR0dykW6XoCcdWQI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8762622e3f65b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type