Report - clouds-frog-f374.yralecaeaghnrsn.workers.dev/21bc9ee2-80a7-41f9-abb1-190ac45cbfe1

Report Overview

Submitted URL
clouds-frog-f374.yralecaeaghnrsn.workers.dev/21bc9ee2-80a7-41f9-abb1-190ac45cbfe1
IP
172.67.137.79
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-27 05:10:59
Access
public
Website Title
blob:https://clouds-frog-f374.yralecaeaghnrsn.workers.dev/6f590c46-7cd1-4e08-9cdd-1c66de262e6f
Final URL
clouds-frog-f374.yralecaeaghnrsn.workers.dev/6f590c46-7cd1-4e08-9cdd-1c66de262e6f
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-26	438 B	31 kB	151.101.2.137
clouds-frog-f374.yralecaeaghnrsn.workers.dev	unknown	2019-02-08	2023-08-21	2024-04-17	1.1 kB	4.7 MB	172.67.137.79

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-26	medium	clouds-frog-f374.yralecaeaghnrsn.workers.dev/21bc9ee2-80a7-41f9-abb1-190ac45cbfe1	Office365
2024-04-06	medium	clouds-frog-f374.yralecaeaghnrsn.workers.dev/	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	clouds-frog-f374.yralecaeaghnrsn.workers.dev/6f590c46-7cd1-4e08-9cdd-1c66de262e6f	1.7 MB	2023-09-07	2024-05-07
Pretty URL clouds-frog-f374.yralecaeaghnrsn.workers.dev/6f590c46-7cd1-4e08-9cdd-1c66de262e6f IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-09-07 02:31:37 Last Seen2024-05-07 19:55:51 Times Seen638 Hash f81f3e5a90328189cc147587ae455321 d153ce4b8f106f5bfedb62b42556899dffcc2c73 ff49cb7c66fd9f114470499d2517c1b29611595bfdf31ce4640d32ceab46af95 Loading...

	unknown	141 kB	2023-07-23	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-23 04:14:01 Last Seen2024-05-07 19:56:30 Times Seen4257 Hash e912ea3e9c1ad34e52f1a4093d1e0399 faec3a83fccbbae090e6c391fc4962c085f8181c 925e9cc12990a4c045cf7c28409e650f96381683a504217d8d8f2b71152a8cab Loading...

	unknown	1.2 MB	2023-09-07	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-07 02:31:37 Last Seen2024-05-07 19:55:51 Times Seen638 Hash 303313549a336aa62709233dcde55eb0 6b678cd7e2f254f407da7d9eda9a83c76b26d2c0 d9d45d02b7a88063d2b77d2bea7031e293c038cea182286902af0b819267ebb2 Loading...

	unknown	34 B	2023-04-11	2024-05-09
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-09 00:47:37 Times Seen76525 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	unknown	1.7 MB	2023-09-07	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-07 02:31:36 Last Seen2024-05-07 19:55:51 Times Seen638 Hash 80f8f9ac9dea5a9ffc19e78248b7f313 6e44d13e64bd6f15cfe8ce95d32a70676723feb8 8ce95085574bac1389250595ed5d4eef40ead387ac6a54837ebeb7574aa8c4a2 Loading...

	unknown	1.2 MB	2023-09-07	2024-05-07
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-07 02:31:36 Last Seen2024-05-07 19:55:51 Times Seen637 Hash fac50a1f10f3fc396ced6916a9cca01d 11daa00a22ad8e18a2f1d4ed5abea4235fc6498e 68409d1a91f3bc368a86cf7e14a193786579addd9408d92598f1b22a2b24a094 Loading...

		Size	First Seen	Last Seen
	#1 Eval - daac1bc3c235362470a6caafa4d801ce	1.3 MB	2023-09-07	2024-05-07
Pretty Observations First Seen2023-09-07 02:31:37 Last Seen2024-05-07 19:55:51 Times Seen629 Hash daac1bc3c235362470a6caafa4d801ce 12a30c3335f92581490f142385ac0157439d1cd6 f6cbd411d904d8026bc631695a59f22459b53f1de9f79220bc602fa9028d58d2 Loading...

	#2 Eval - d41d8cd98f00b204e9800998ecf8427e	0 B	2023-03-07	2024-05-09
Pretty Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-09 00:53:38 Times Seen37453573 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

		Size	First Seen	Last Seen
	#1 Write - ccafe47bf818829feec9af9cdd0a224f	1.2 MB	2023-09-07	2024-05-07
Pretty Observations First Seen2023-09-07 02:31:37 Last Seen2024-05-07 19:55:51 Times Seen638 Hash ccafe47bf818829feec9af9cdd0a224f 6c93e6ba959f7399d0b20b377f527fc394dfe2e2 9abf07232e581cfafd8235805eac59b523c1d2a9b264fcb58c30ec884c7d48d4 Loading...

	#2 Write - 0c0600124d333b668c31f62fb9629f30	1.2 MB	2023-09-07	2024-05-07
Pretty Observations First Seen2023-09-07 02:31:37 Last Seen2024-05-07 19:55:51 Times Seen638 Hash 0c0600124d333b668c31f62fb9629f30 b2ec2f45437fa51bf9d6109dae5157d7eb18c285 ace4fa80b030aa17bb09045dbf3ca1ced22851b99abe17bffc27cdccb54d48f6 Loading...

	#3 Write - 6e053ca34a6cb20f77d698a78a842bf9	326 kB	2023-08-29	2024-05-08
Pretty Observations First Seen2023-08-29 15:04:16 Last Seen2024-05-08 19:12:19 Times Seen991 Hash 6e053ca34a6cb20f77d698a78a842bf9 42606e746b9ef1beca7188c9e3c719acd8ac8f5d e2603e0abcbebf5c272e7050dabab203f6225e8381c2663aae4dbb48f7d92b16 Loading...

	#4 Write - 5e20344e9a688eb7a40f18f71f0fc191	1.7 MB	2023-09-07	2024-05-07
Pretty Observations First Seen2023-09-07 02:31:37 Last Seen2024-05-07 19:55:51 Times Seen633 Hash 5e20344e9a688eb7a40f18f71f0fc191 06a679b22436162af8fc990be536e64a1c19da07 3be358b76839bb342e49bf622dbaeccbc85a5b8cc69011b3e3dce6cf732a288d Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://clouds-frog-f374.yralecaeaghnrsn.workers.dev/21bc9ee2-80a7-41f9-abb1-190ac45cbfe1
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clouds-frog-f374.yralecaeaghnrsn.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 27 Apr 2024 05:10:32 GMT
age: 6113130
x-served-by: cache-lga21965-LGA, cache-hel1410031-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 83853
x-timer: S1714194632.088182,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

clouds-frog-f374.yralecaeaghnrsn.workers.dev/21bc9ee2-80a7-41f9-abb1-190ac45cbfe1

172.67.137.79

200 OK

2.3 MB

URL User Request GET HTTP/2
clouds-frog-f374.yralecaeaghnrsn.workers.dev/21bc9ee2-80a7-41f9-abb1-190ac45cbfe1
IP
172.67.137.79:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectyralecaeaghnrsn.workers.dev
FingerprintA4:27:56:D6:04:27:B5:41:8A:45:E3:7D:FB:FC:7D:A9:9B:8F:83:C9
ValiditySat, 13 Apr 2024 20:36:55 GMT - Fri, 12 Jul 2024 20:36:54 GMT

File type

Size
2.3 MB (2326028 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /21bc9ee2-80a7-41f9-abb1-190ac45cbfe1 HTTP/1.1
Host: clouds-frog-f374.yralecaeaghnrsn.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 27 Apr 2024 05:10:31 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9wXXmFYOYUotewiRr5c2HB46JPIo4F3uG1QgyD%2BywhZcsayn0QtkvF%2F%2BjfBmJ9slKbxFK13MzSbnV%2B8Bhg9WxF%2FXEsahwK1SwzD0WksWBSS%2BK%2B%2Bi%2F7%2BGr%2Bnv3VBlvah59hXsS25fomfNK6T6vupsrnjDuBNWSG%2F0zSByu%2B6ezw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ac4e804fdc0b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

clouds-frog-f374.yralecaeaghnrsn.workers.dev/favicon.ico

172.67.137.79

200 OK

2.3 MB

URL GET HTTP/3
clouds-frog-f374.yralecaeaghnrsn.workers.dev/favicon.ico
IP
172.67.137.79:443
ASN
#13335 CLOUDFLARENET

Requested by
https://clouds-frog-f374.yralecaeaghnrsn.workers.dev/21bc9ee2-80a7-41f9-abb1-190ac45cbfe1
Certificate
IssuerGoogle Trust Services LLC
Subjectyralecaeaghnrsn.workers.dev
FingerprintA4:27:56:D6:04:27:B5:41:8A:45:E3:7D:FB:FC:7D:A9:9B:8F:83:C9
ValiditySat, 13 Apr 2024 20:36:55 GMT - Fri, 12 Jul 2024 20:36:54 GMT

File type

Size
2.3 MB (2326028 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: clouds-frog-f374.yralecaeaghnrsn.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clouds-frog-f374.yralecaeaghnrsn.workers.dev/21bc9ee2-80a7-41f9-abb1-190ac45cbfe1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 27 Apr 2024 05:10:32 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kbml7WRyaIMbFYXrcIBDxGlRli3ZFbY1znbSUOiKrO9Vrc5onhDsi2OlJ5uM337Ed0g13rErzwHuv3jVOtQylGbxiHPem%2BQrPv6%2Ff4PGyOMZhxy8HejAKAeeBk3YhTKrb0qJ8qnluJnB9mIkDlyQl7cIz01iTWA1tFgTj8a%2FTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87ac4e83d8790b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type