Report - workers-playground-small-poetry-36fa.omociga.workers.dev/

Report Overview

Submitted URL
workers-playground-small-poetry-36fa.omociga.workers.dev/
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 17:32:58
Access
public
Website Title
workers-playground-small-poetry-36fa.omociga.workers.dev/
Final URL
workers-playground-small-poetry-36fa.omociga.workers.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
api.lachach.ru	unknown	2023-06-24	2023-12-14	2024-02-28	463 B	16 kB	188.114.97.1
workers-playground-small-poetry-36fa.omociga.workers.dev	unknown	2019-02-08	2023-12-24	2024-03-20	1.0 kB	14 kB	188.114.97.1
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-05-08	402 B	21 kB	104.17.24.14
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-08	450 B	31 kB	151.101.194.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-14	medium	workers-playground-small-poetry-36fa.omociga.workers.dev/favicon.ico	Office365
2024-05-08	medium	workers-playground-small-poetry-36fa.omociga.workers.dev/	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (9)

	URL	Size	First Seen	Last Seen
	unknown	1.2 kB	2024-03-20	2024-05-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-03-20 05:41:28 Last Seen2024-05-08 19:32:59 Times Seen2 Hash 2e3eb0b08dd989936e0443f64e2e4948 adeb0c3f430cc1b635beeafe3619a17e6cebbfd7 79c1cbab8e035bf4d090b25eb90509bf960590d5a1380d9fc9e30c33b2e65a69 Loading...

	api.lachach.ru/attachment/js.php?_=1715189553886	22 kB	2024-05-08	2024-05-08
Pretty URL api.lachach.ru/attachment/js.php?_=1715189553886 IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-05-08 19:32:59 Last Seen2024-05-08 19:32:59 Times Seen2 Hash 2715ba86495db8491b2433ca394f8cda 6c869b6d0b417140de4833e60320fbd9bea65431 93812ff12c25d1cf13f36ca44aaed8292407e0c6573aabb99419ad029b26b00f Loading...

	unknown	79 B	2023-04-11	2024-05-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:38:58 Last Seen2024-05-20 01:56:06 Times Seen126669 Hash aa049e2749b8531cb8f233c2f64fc2b2 b611a5a62c1813ae5b4763378b3a4a565556530a e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2 Loading...

	unknown	37 B	2023-04-11	2024-05-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:31:25 Last Seen2024-05-20 02:53:17 Times Seen238410 Hash 29d0c84b9d1d8da446a6062c6a840ad9 6d6b3a6065667c7c50d92f3889c85ed65a9ad784 3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1 Loading...

	unknown	34 B	2023-04-11	2024-05-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-20 01:50:11 Times Seen77717 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	workers-playground-small-poetry-36fa.omociga.workers.dev/	8.5 kB	2024-03-20	2024-05-08
Pretty URL workers-playground-small-poetry-36fa.omociga.workers.dev/ IP 188.114.97.1 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-20 05:41:28 Last Seen2024-05-08 19:32:59 Times Seen2 Hash 52c861e7c42b4718bbc7fd4761cafde8 193b09fe204537380dfcd20e27f59a0802e65513 6bcd6dffd7c91a45b1ca5d2841a9a2106913263f908ca95cb8a644b9802f5f2d Loading...

	cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js	61 kB	2023-11-02	2024-05-19
Pretty URL cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js IP 104.17.24.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-02 21:20:28 Last Seen2024-05-19 16:12:04 Times Seen251 Hash d9c6de0df2bf028d93924aff92487904 6596050516dd12af52d9b0e7b18ed837f1d81300 769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc Loading...

	code.jquery.com/jquery-3.1.1.min.js	87 kB	2023-03-07	2024-05-20
Pretty URL code.jquery.com/jquery-3.1.1.min.js IP 151.101.194.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:34 Last Seen2024-05-20 02:04:36 Times Seen269849 Hash e071abda8fe61194711cfc2ab99fe104 f647a6d37dc4ca055ced3cf64bbc1f490070acba 85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf Loading...

		Size	First Seen	Last Seen
	#1 Write - f525a4280b96b9a0c8421cb666880eab	1.7 kB	2024-03-20	2024-05-08
Pretty Observations First Seen2024-03-20 05:41:28 Last Seen2024-05-08 19:32:59 Times Seen2 Hash f525a4280b96b9a0c8421cb666880eab 8fa1dbb8771deb38a3a0cd6e59767b53c7a5617d fef4473c27a96d2bf094e9ed81b4e77d0647dc96bc16e97533a90ea6f4e4bbad Loading...

HTTP Transactions (5)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js

104.17.24.14

200 OK

20 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js
IP
104.17.24.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://workers-playground-small-poetry-36fa.omociga.workers.dev/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (60819), with no line terminators
Size
20 kB (19621 bytes)
Hash
d9c6de0df2bf028d93924aff92487904
6596050516dd12af52d9b0e7b18ed837f1d81300
769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc

HTTP Headers

GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 17:32:33 GMT
content-type: application/javascript; charset=utf-8
content-length: 19621
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "65384d58-4ca5"
last-modified: Tue, 24 Oct 2023 23:03:52 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 4233
expires: Mon, 28 Apr 2025 17:32:33 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VJdHbbFUHDSOV%2FACI00YPG7h2BmWWIdppOg80vDWAbJmXo7eQQvI6k3PVInH0YzaJrcDQZhT22U%2BB40klmUg8vPlY8z7R8yBYtMIczxYV2xj7modrxE%2F8NbjERX3RcROxN0%2BmnZs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 880b3096bdccb4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.1.1.min.js

151.101.194.137

200 OK

30 kB

URL GET HTTP/2
code.jquery.com/jquery-3.1.1.min.js
IP
151.101.194.137:443
ASN
#54113 FASTLY

Requested by
https://workers-playground-small-poetry-36fa.omociga.workers.dev/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32030)
Size
30 kB (30070 bytes)
Hash
e071abda8fe61194711cfc2ab99fe104
f647a6d37dc4ca055ced3cf64bbc1f490070acba
85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

HTTP Headers

GET /jquery-3.1.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workers-playground-small-poetry-36fa.omociga.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-152b5"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 17:32:33 GMT
age: 20388954
x-served-by: cache-lga21947-LGA, cache-hel1410022-HEL
x-cache: HIT, HIT
x-cache-hits: 118, 4697
x-timer: S1715189554.787737,VS0,VE0
vary: Accept-Encoding
content-length: 30070
X-Firefox-Spdy: h2

api.lachach.ru/attachment/js.php?_=1715189553886

188.114.97.1

15 kB

URL GET
api.lachach.ru/attachment/js.php?_=1715189553886
IP
188.114.97.1:0
ASN
#13335 CLOUDFLARENET

Requested by
https://workers-playground-small-poetry-36fa.omociga.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectlachach.ru
Fingerprint15:F7:99:6C:E7:CF:D0:0B:AA:91:39:AF:2F:85:DB:FA:E5:C0:0E:42
ValiditySat, 13 Apr 2024 23:38:28 GMT - Fri, 12 Jul 2024 23:38:27 GMT

File type
JavaScript source, ASCII text, with very long lines (22328), with no line terminators
Size
15 kB (15214 bytes)
Hash
2715ba86495db8491b2433ca394f8cda
6c869b6d0b417140de4833e60320fbd9bea65431
93812ff12c25d1cf13f36ca44aaed8292407e0c6573aabb99419ad029b26b00f

HTTP Headers

GET /attachment/js.php?_=1715189553886 HTTP/1.1
Host: api.lachach.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workers-playground-small-poetry-36fa.omociga.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 17:32:34 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wnCLMwZFt8FN5DEwkdbjTMelsg8MKZcf0Kq2ptolDcNGpg5x9imG2vmrVy8qmq7WepOndPKmhjgsidRopqV%2F7%2FJ2p8dJdQxh8rSkYhCBMSR5mXC6vhJ1iXytGAopkz7m3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 880b30986c7d568e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

workers-playground-small-poetry-36fa.omociga.workers.dev/favicon.ico

188.114.97.1

200 OK

6.0 kB

URL GET HTTP/3
workers-playground-small-poetry-36fa.omociga.workers.dev/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://workers-playground-small-poetry-36fa.omociga.workers.dev/
Certificate
IssuerLet's Encrypt
Subjectomociga.workers.dev
Fingerprint30:CE:64:EE:BD:3C:FD:FF:3F:76:4E:D9:BC:E6:C4:0D:3E:93:FE:4C
ValiditySat, 20 Apr 2024 10:25:44 GMT - Fri, 19 Jul 2024 10:25:43 GMT

File type
HTML document, ASCII text, with very long lines (6883)
Size
6.0 kB (5960 bytes)
Hash
daae9d7d32d1ff5fda79b73a3dc36995
9dafdcf553b11046d634de9a8a1eeebba258ea31
0583677338d886e51e13fb34bb25d0bd2fac70ad803e2b1ca31d9659ee47bce0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: workers-playground-small-poetry-36fa.omociga.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://workers-playground-small-poetry-36fa.omociga.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Wed, 08 May 2024 17:32:34 GMT
content-type: text/html
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YR8pDukqvr9h4tsoHhJmWgbZfvnvOmEzXmPOIYMM8pJn967Mtsc%2FZWzoEnDi%2F2B2xH6Lp6eo%2BnQ%2BPudAvGv%2Bg81mlGTMleU6pj2XV3%2BNVRk%2BxKxWxD8EAXq5m9TmFt4W2H1Lv%2FFBP%2FPoufELGnKeXwB5MadXiwxYmhYrTZfjJajMioXz%2FqIwAKq%2ByA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b30988a1856b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

workers-playground-small-poetry-36fa.omociga.workers.dev/

188.114.97.1

200 OK

6.9 kB

URL User Request GET HTTP/2
workers-playground-small-poetry-36fa.omociga.workers.dev/
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectomociga.workers.dev
Fingerprint30:CE:64:EE:BD:3C:FD:FF:3F:76:4E:D9:BC:E6:C4:0D:3E:93:FE:4C
ValiditySat, 20 Apr 2024 10:25:44 GMT - Fri, 19 Jul 2024 10:25:43 GMT

File type
HTML document, ASCII text, with very long lines (8646), with no line terminators
Size
6.9 kB (6932 bytes)
Hash
b1e84da1e30c513f0ae1e679aafb6a5c
143cb049a902fa0765e4ee53e984915dbbe68d0a
4b22bea46ac839b403834cd7dc02f48fcb9bca5e063df30df1f50c7f6c668e05

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET / HTTP/1.1
Host: workers-playground-small-poetry-36fa.omociga.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 17:32:33 GMT
content-type: text/html
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QHP1BrhclU7HrkZdp775yz34fpyXoBTFoPs4SmeUrsDK%2BA8wyyJB19sO2LZ%2BX91bKnMPvnIqA8BDhBU5mEqBPhc7QhdetmvgAaBy5GBQmG71pkP%2B6dVI%2BDOZQ7WunW%2BGdnQTujM1TZQmRmEQ%2Fv9nxoYiwXBXWMv9o14UQ%2FNmjMKxmyey3%2FEG19iDqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b30943e54568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (9)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (5)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size