Report - private.document-projeect.workers.dev/

Report Overview

Submitted URL
private.document-projeect.workers.dev/
IP
172.67.141.106
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-20 15:54:46
Access
public
Website Title
private.document-projeect.workers.dev/
Final URL
private.document-projeect.workers.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
private.document-projeect.workers.dev	unknown	unknown	No data	No data	963 B	1.9 MB	104.21.9.33
codesandbox.io	95492	2016-11-23	2017-04-04	2024-04-18	504 B	3.4 kB	172.64.154.107

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-20 15:54:20	low	Client IP	104.21.9.33	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-20	medium	private.document-projeect.workers.dev/	Office365
2024-04-20	medium	private.document-projeect.workers.dev/	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	private.document-projeect.workers.dev/	920 kB	2024-04-20	2024-04-20
Pretty URL private.document-projeect.workers.dev/ IP 104.21.9.33 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-20 17:54:53 Last Seen2024-04-20 17:54:53 Times Seen1 Hash 49bec200771283a8e0276a2a03ecd06f ee424962792be1192455d06437b9a4ff5e89fd6a a090919e59098f1bbf5c4edaccb4ca8b21eb1403b30bffddee87f0ea5c8f036b Loading...

	unknown	678 kB	2024-04-20	2024-04-20
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-20 17:54:53 Last Seen2024-04-20 17:54:53 Times Seen1 Hash 607ec263f4fe437ae24f29e57d94944e 834089ad7d2e53b73cf0bf2ce4c13d494b19b84f af4e046e70d1b2218c6a0fbb0075ce86b1d65983f2bfa43c7d594e4cc852bea6 Loading...

	unknown	34 B	2023-04-11	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-03 20:56:12 Times Seen76058 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

		Size	First Seen	Last Seen
	#1 Write - 9609e08699766ef15ff2dcf9bc9dfbf1	678 kB	2024-04-20	2024-04-20
Pretty Observations First Seen2024-04-20 17:54:53 Last Seen2024-04-20 17:54:54 Times Seen1 Hash 9609e08699766ef15ff2dcf9bc9dfbf1 33a5ed5ebb01b099610033d58b2ac9f1bec36687 94283358aea612804e4135e8091ac2774cbe25d4ea7adc9265e36ed0e6cb4a4a Loading...

HTTP Transactions (3)

URL IP Response Size

private.document-projeect.workers.dev/

104.21.9.33

200 OK

934 kB

URL User Request GET HTTP/2
private.document-projeect.workers.dev/
IP
104.21.9.33:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectdocument-projeect.workers.dev
Fingerprint71:2B:30:DA:E1:49:F3:D8:87:E8:91:43:06:3A:11:74:D0:3A:F8:C3
ValidityMon, 01 Apr 2024 22:21:34 GMT - Sun, 30 Jun 2024 22:21:33 GMT

File type
HTML document, ASCII text, with very long lines (52435)
Size
934 kB (933511 bytes)
Hash
24a3c9b3b8dab5fb4903417cddb90108
493ad375fac7be2505ff3ed9f5ea4bb909193f3e
9a635533d1d9bce095153a1fe0866fb3452fcbc22cf3c6f84f88811d12c1ecbe

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET / HTTP/1.1
Host: private.document-projeect.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 15:54:21 GMT
content-type: text/html
cf-ray: 87764ff92a5e712e-OSL
cf-cache-status: DYNAMIC
cache-control: private, max-age=0, no-cache, no-store
set-cookie: signedIn=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; max-age=0; HttpOnly
vary: Accept-Encoding
via: 1.1 google
alt-svc: h3=":443"; ma=86400
x-request-id: F8gIAZUOjQilBBEERVQm
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YCTzlt2arvlq5UK63EA9Yw5ZGIpJ4PfS%2F9u6Hpxuewp%2BENOxgxIKNKTc3ffla8hmGQUtqJmRjFViE9q3TmbGsne2uazAC8r%2FQjK3qu%2BsrzKW9NZlpOJjt9drqKdrOtJPm4wSc0Jg5P%2FDgpRPcpcD6dk2cyMSEL0R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
X-Firefox-Spdy: h2

codesandbox.io/static/js/watermark-button.eeb14a97b.js

172.64.154.107

200 OK

2.8 kB

URL GET HTTP/2
codesandbox.io/static/js/watermark-button.eeb14a97b.js
IP
172.64.154.107:443
ASN
#13335 CLOUDFLARENET

Requested by
https://private.document-projeect.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectcodesandbox.io
Fingerprint07:3E:75:0B:F2:71:AF:23:54:EF:53:35:B2:91:F5:98:97:FB:88:A3
ValidityMon, 25 Mar 2024 01:49:20 GMT - Sun, 23 Jun 2024 01:49:19 GMT

File type
JavaScript source, ASCII text, with very long lines (2837), with no line terminators
Size
2.8 kB (2753 bytes)
Hash
6c321bcb6ebed86792e592a9c063021e
a506b755615f3f187b7b3008ee1a260cae0fbed7
92858e05b426d8584f4685f4052e467a0b0e12c6c31e436723ccf800e8dcbe61

HTTP Headers

GET /static/js/watermark-button.eeb14a97b.js HTTP/1.1
Host: codesandbox.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://private.document-projeect.workers.dev
DNT: 1
Connection: keep-alive
Referer: https://private.document-projeect.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 15:54:21 GMT
content-type: application/javascript
last-modified: Thu, 18 Apr 2024 14:11:23 GMT
vary: Accept-Encoding
etag: W/"66212a0b-ac1"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
access-control-allow-origin: *
access-control-allow-methods: GET
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
set-cookie: _cfuvid=CXVl2ZtjCUFRLKdTa4y4O3fsZI5ftJ8O3wKhTtPEKLw-1713628461586-0.0.1.1-604800000; path=/; domain=.codesandbox.io; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 87764ffc28057130-OSL
content-encoding: br
X-Firefox-Spdy: h2

private.document-projeect.workers.dev/favicon.ico

104.21.9.33

200 OK

934 kB

URL GET HTTP/3
private.document-projeect.workers.dev/favicon.ico
IP
104.21.9.33:443
ASN
#13335 CLOUDFLARENET

Requested by
https://private.document-projeect.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectdocument-projeect.workers.dev
Fingerprint71:2B:30:DA:E1:49:F3:D8:87:E8:91:43:06:3A:11:74:D0:3A:F8:C3
ValidityMon, 01 Apr 2024 22:21:34 GMT - Sun, 30 Jun 2024 22:21:33 GMT

File type
HTML document, ASCII text, with very long lines (52435)
Size
934 kB (933511 bytes)
Hash
24a3c9b3b8dab5fb4903417cddb90108
493ad375fac7be2505ff3ed9f5ea4bb909193f3e
9a635533d1d9bce095153a1fe0866fb3452fcbc22cf3c6f84f88811d12c1ecbe

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: private.document-projeect.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://private.document-projeect.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 15:54:22 GMT
content-type: text/html
cf-ray: 87765000eebcb50f-OSL
cf-cache-status: DYNAMIC
cache-control: private, max-age=0, no-cache, no-store
set-cookie: signedIn=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; max-age=0; HttpOnly
vary: Accept-Encoding
via: 1.1 google
alt-svc: h3=":443"; ma=86400
x-request-id: F8gIAdwsmiDmSfILgh5h
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OVsykRa2LHaJ36NKdJlhxBfzX4YywThMlOnjLN1pU3PEwFeNsCDPa8qXv2MuXaha5Nus3sIHrjYYi9uOxnbU5uS6YAcSUUyOlbWx1hACUj5v3SxckP34GpYYE89j6r%2BcKoLtRK0Ag%2B8LhN6ixExWmidToEqoR1nh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers