Report - coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/

Report Overview

Submitted URL
coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-07 17:50:01
Access
public
Website Title
blob:https://coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/804614b9-4508-492a-a39e-9d8b400be377
Final URL
coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/804614b9-4508-492a-a39e-9d8b400be377
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev	unknown	2019-02-08	2023-08-10	2024-04-12	993 B	4.8 MB	188.114.96.1
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-07	441 B	31 kB	151.101.2.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-07	medium	coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/	Office365
2024-05-07	medium	coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-12-06	medium	coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/	Adobe
2023-12-06	medium	coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/favicon.ico	Adobe

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	unknown	1.8 MB	2023-12-19	2024-05-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-19 17:24:44 Last Seen2024-05-17 08:08:19 Times Seen64 Hash e0efc11f5836388366beddb3052fc9c5 b4d72287e87ddcd51d052e5e952cc60f379237a8 b99e474420592a6ba255e51e2e66b7b19b856f93ff0b6ed1e83ce356acea43b3 Loading...

	unknown	1.3 MB	2023-12-19	2024-05-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-19 17:24:44 Last Seen2024-05-17 08:08:19 Times Seen64 Hash 9f8358d39fbfa30524636b0993a8efd6 77208b715cd60ae4570d08a1c2772520d0fb2094 74937b71864f5a9bc8d31d5f2ff7a38e2d366e3dbab12f131082e56121a3c7fd Loading...

	unknown	141 kB	2023-05-13	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-13 20:14:50 Last Seen2024-05-19 07:23:38 Times Seen4591 Hash 0280dda4590da433693ba3c1a2ebfeff cd2a9d01bc2076db50060e216009939a637a78c4 64a86ac78a3f27afd28930b94279340750a5a5ae1e78f44648dc7ea0a1386295 Loading...

	unknown	1.3 MB	2023-12-19	2024-05-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-19 17:24:44 Last Seen2024-05-17 08:08:19 Times Seen64 Hash e1a300030d772b5a2c03bb638fe600f8 5decf750d5053c8161a3e342dde5b8c000dff267 dffdc91b536349a6814adb0cdd0dc747959695d8f68fa5e9219b58530418e7e9 Loading...

	unknown	34 B	2023-04-11	2024-05-19
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-19 17:35:32 Times Seen77680 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/804614b9-4508-492a-a39e-9d8b400be377	1.8 MB	2023-12-19	2024-05-17
Pretty URL coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/804614b9-4508-492a-a39e-9d8b400be377 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-19 17:24:44 Last Seen2024-05-17 08:08:19 Times Seen64 Hash e95d44dfb9f0cf8684796b1e3b797978 2bb85dc9594d310b7df8353b220dbccd47bdfa68 6320e6347e5d2fa6fcd18d059abfac22b64cf4e49f53208f668ccb6d7ac24d61 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 92d01b22b3f4b6f8b1281a3d83a39cf6	1.3 MB	2023-12-19	2024-05-17
Pretty Observations First Seen2023-12-19 17:24:44 Last Seen2024-05-17 08:08:19 Times Seen64 Hash 92d01b22b3f4b6f8b1281a3d83a39cf6 efbbedc389454fc1c5fe7acd31edcdb40e8f3cf5 24258c4c9f6f623bce322d4cabbca965d92699dc3ad386cea3acbb3767466f45 Loading...

	#2 Eval - ddf52fd19c150e9385bcd52fedaeaa58	1.4 MB	2023-12-19	2024-05-17
Pretty Observations First Seen2023-12-19 17:24:44 Last Seen2024-05-17 08:08:19 Times Seen61 Hash ddf52fd19c150e9385bcd52fedaeaa58 39406b20042ded35f9eaaee658186f8c115b87d2 3e489d1b896ca8e7298be1772868e18c41b5abe4216f4312af8369de0a42f8ad Loading...

	#3 Eval - fa6dc982bea717b82976d142275bc51d	1.2 MB	2023-12-19	2024-05-17
Pretty Observations First Seen2023-12-19 17:24:44 Last Seen2024-05-17 08:08:19 Times Seen64 Hash fa6dc982bea717b82976d142275bc51d ea0968b56caaa9d5c26a21f4f9bba2e3d1f61d0e 82ca1cbf6575dd10f7fe35de9190e0d5d112ceabf1851a1bfa6004e75c8069d9 Loading...

		Size	First Seen	Last Seen
	#1 Write - d41d8cd98f00b204e9800998ecf8427e	0 B	2023-03-07	2024-05-19
Pretty Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-19 18:37:34 Times Seen37837662 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	#2 Write - da7df52e4ff7668fd0e1dead209504dc	1.3 MB	2023-12-19	2024-05-17
Pretty Observations First Seen2023-12-19 17:24:45 Last Seen2024-05-17 08:08:19 Times Seen64 Hash da7df52e4ff7668fd0e1dead209504dc a3ac53342ef4e7b17529d93401c8d2209e47da58 a137ea2dbf63023f9287b5b8df022205a73a90da00e3792af4032bde2acafe66 Loading...

	#3 Write - eebdd323bf9064cedc0e7ad217151f58	295 kB	2023-08-18	2024-05-19
Pretty Observations First Seen2023-08-18 00:03:29 Last Seen2024-05-19 07:30:19 Times Seen717 Hash eebdd323bf9064cedc0e7ad217151f58 b6c184c593b63bca8657f1392298aa067b486ad8 ac0b61ee0169a6007def4e1d1b87fd22ea176a25ca08e506e286cc8a43722283 Loading...

	#4 Write - 59e5a4f719598da2cdf977c30c2bda2b	1.8 MB	2023-12-19	2024-05-07
Pretty Observations First Seen2023-12-19 17:24:44 Last Seen2024-05-07 19:50:02 Times Seen59 Hash 59e5a4f719598da2cdf977c30c2bda2b c9a3639177876bc69eef4cd16c65c6dfdf63920a e23e5dd55b3ab7fd859aabcc98acc6aa9da9c19fbfa41291f961ac4d44bee120 Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 07 May 2024 17:49:32 GMT
age: 7022671
x-served-by: cache-lga21965-LGA, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 367006
x-timer: S1715104173.776422,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/

188.114.96.1

200 OK

2.4 MB

URL User Request GET HTTP/2
coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectleacshlenmmdgza.workers.dev
Fingerprint64:37:AC:B6:D1:C1:A8:36:56:A2:8D:7C:C2:AD:0E:F8:42:C5:BE:F7
ValidityTue, 02 Apr 2024 19:22:58 GMT - Mon, 01 Jul 2024 19:22:57 GMT

File type

Size
2.4 MB (2380512 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET / HTTP/1.1
Host: coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 07 May 2024 17:49:32 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oAIae3Wd%2FN4cjIR9nClrn%2BMAFvmEzIRgK9d9E3%2BhFvUriXpc38eGtV1Rl2Osr2p0MU2tEXX4r5K5G7453RcxrUMoGui8WHOgfwUm5uNBk9jY0GuujZqdRbpmg2Z6yGsdS4G8uRsZB%2FbPGGZXYhhInsNYeOkWFXT%2BxT%2FmyQCmeZAmXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030c151cd2b51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/favicon.ico

188.114.96.1

200 OK

2.4 MB

URL GET HTTP/3
coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectleacshlenmmdgza.workers.dev
Fingerprint64:37:AC:B6:D1:C1:A8:36:56:A2:8D:7C:C2:AD:0E:F8:42:C5:BE:F7
ValidityTue, 02 Apr 2024 19:22:58 GMT - Mon, 01 Jul 2024 19:22:57 GMT

File type

Size
2.4 MB (2380512 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://coreplesk-cake-7dbf.leacshlenmmdgza.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 07 May 2024 17:49:33 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=htENDBNCaZo6FWyTA8264cfFfF8L9mkuEVV085kith5EXb71IUHSuaJ%2FaZAGNZL1lFpqcyJLSDaxQfqVlseOoWeanCUjxI2%2B8Cxc1S0yUjD%2FAcg%2F4y02J11QYPj%2BbhlZadvQ5FEotsfTpuJUfIgnwoX%2BkyLQrIMV3q4bsoruS0M6fQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 88030c197e121bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN