Report - projeeect-sunset-27f3.citlaliheck.workers.dev/34372e90-b106-467d-a97b-32beddbff513

Report Overview

Submitted URL
projeeect-sunset-27f3.citlaliheck.workers.dev/34372e90-b106-467d-a97b-32beddbff513
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 17:47:43
Access
public
Website Title
blob:https://projeeect-sunset-27f3.citlaliheck.workers.dev/a7aa6057-88ea-46c7-bcb1-9d76477bb5c3
Final URL
projeeect-sunset-27f3.citlaliheck.workers.dev/a7aa6057-88ea-46c7-bcb1-9d76477bb5c3
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-08	439 B	31 kB	151.101.130.137
projeeect-sunset-27f3.citlaliheck.workers.dev	unknown	2019-02-08	2023-07-18	2024-04-17	1.1 kB	4.3 MB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-12	medium	projeeect-sunset-27f3.citlaliheck.workers.dev/	Office365
2024-04-12	medium	projeeect-sunset-27f3.citlaliheck.workers.dev/	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-08-06	medium	projeeect-sunset-27f3.citlaliheck.workers.dev/favicon.ico	Adobe
2023-08-06	medium	projeeect-sunset-27f3.citlaliheck.workers.dev/34372e90-b106-467d-a97b-32beddbff513	Adobe

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (15)

	URL	Size	First Seen	Last Seen
	unknown	141 kB	2023-05-13	2024-05-19
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-13 20:14:50 Last Seen2024-05-19 07:23:38 Times Seen4591 Hash 0280dda4590da433693ba3c1a2ebfeff cd2a9d01bc2076db50060e216009939a637a78c4 64a86ac78a3f27afd28930b94279340750a5a5ae1e78f44648dc7ea0a1386295 Loading...

	projeeect-sunset-27f3.citlaliheck.workers.dev/a7aa6057-88ea-46c7-bcb1-9d76477bb5c3	1.6 MB	2023-07-22	2024-05-18
Pretty URL projeeect-sunset-27f3.citlaliheck.workers.dev/a7aa6057-88ea-46c7-bcb1-9d76477bb5c3 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-07-22 09:19:14 Last Seen2024-05-18 08:16:00 Times Seen337 Hash 07eecc62c76f8fc8993865c4a7237313 771d16f833e2cd50531ea90dc74cba99d5d7698a bba453a22fa6b4b3227c44f3658a693064820d9522f2af45be41a9fd3d9d0fe4 Loading...

	unknown	1.4 MB	2023-07-22	2024-05-18
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-22 09:19:14 Last Seen2024-05-18 08:16:00 Times Seen337 Hash 5ebda8795a9dce9b4a7a356ab62fb798 afce473f534da81cb4502245d76f91b6e302bd41 a5db7b7a18cf6e609cb4a6f0c6f371c56452a8e3741f5d747071fbf51497dc96 Loading...

	unknown	1.1 MB	2023-07-22	2024-05-18
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-22 09:19:14 Last Seen2024-05-18 08:16:00 Times Seen337 Hash 8c414ce0a4c2de11f25fb096a6a2fa77 868cf6921d74b0ba927166bb504469b2ab54481e 16897f6812a03fe4bca6c9c7e06769e1e323a68782a5f756120ed3baee97700d Loading...

	unknown	1.2 MB	2023-07-22	2024-05-18
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-22 09:19:14 Last Seen2024-05-18 08:16:00 Times Seen337 Hash 943f67a91ed78680a286104ca0b953c6 8422fca5dac4920d31ba15fdfafe121e1a5c804c c0c2092d88deb89c692879401e6a20e8794ddeb276bbb53e6fbf1ac7ceb4ebd4 Loading...

	unknown	1.6 MB	2023-07-22	2024-05-18
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-22 09:19:14 Last Seen2024-05-18 08:16:00 Times Seen337 Hash 53d5c8d48b30aee3d07003215eec39be 51fb9a7c3b721941e3618147f8e29fae6bcb3b3b 5f2490f2ebd2b6e7aaa12532869c72ade654c1c80eb2e1a8ae0c4e30c9839721 Loading...

	unknown	34 B	2023-04-11	2024-05-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-20 01:50:11 Times Seen77717 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 5bf5299f6d40451664323e61a1454429	1.4 MB	2023-07-22	2024-05-18
Pretty Observations First Seen2023-07-22 09:19:15 Last Seen2024-05-18 08:16:00 Times Seen334 Hash 5bf5299f6d40451664323e61a1454429 4c79ccca38fddea7336431965c2d467b369df20a 189e7c665fe73dc445219c17eb1ff162c29af7983c54b26b5a7cc5569e75d106 Loading...

	#2 Eval - 6c46669bddc0b3a30b46ac11103aa93d	1.2 MB	2023-07-22	2024-05-18
Pretty Observations First Seen2023-07-22 09:19:15 Last Seen2024-05-18 08:16:00 Times Seen337 Hash 6c46669bddc0b3a30b46ac11103aa93d c55a4d33d0a7ca02273d9a79932288c403413c97 f789f3dda437a7fafb646a1089f3a28099fd15e04cbb4f744c325120fec6adb3 Loading...

	#3 Eval - 9a042ce3189cdba8861add850ff8f6d3	1.1 MB	2023-07-22	2024-05-18
Pretty Observations First Seen2023-07-22 09:19:15 Last Seen2024-05-18 08:16:00 Times Seen331 Hash 9a042ce3189cdba8861add850ff8f6d3 9e84340af27e5955eaf59ea96225d9eecb6e12ce 822b965081ec7b1a1fa9d94954a6b782e1c19fd912cc8d9599dab498b2d68e32 Loading...

		Size	First Seen	Last Seen
	#1 Write - 6375c721ad3df89d25952829bdf64c43	1.6 MB	2023-07-22	2024-05-18
Pretty Observations First Seen2023-07-22 09:19:15 Last Seen2024-05-18 08:16:00 Times Seen332 Hash 6375c721ad3df89d25952829bdf64c43 efb06296ed30aea765d032627f1a2ca747b065fc b2fd4ba4fe0feeb4f0a38a080720b076ef88e2ea1ae35035180c1a14c5484d85 Loading...

	#2 Write - ef6726c54e818a9afec06e2fb11bf7ba	1.4 MB	2023-07-22	2024-05-18
Pretty Observations First Seen2023-07-22 09:19:15 Last Seen2024-05-18 08:16:00 Times Seen331 Hash ef6726c54e818a9afec06e2fb11bf7ba c249fb1a56b06dbfdc461b6622355ebb614464f5 d1865877dffda9d15bdda4ef9de1aed4fca0fcce7996c7172474eaca050ecc8b Loading...

	#3 Write - 8464122163d875569693d48ac5d57a39	1.1 MB	2023-07-22	2024-05-18
Pretty Observations First Seen2023-07-22 09:19:15 Last Seen2024-05-18 08:16:00 Times Seen337 Hash 8464122163d875569693d48ac5d57a39 5a8b0d5ef574f0dd6cb55325dd94783064573e6d 217100ee70bf11f821e964c744ba4fc44015ebb25ccb650d0339e733e509c430 Loading...

	#4 Write - 160399677146ec23bb4906d0c317d20c	1.2 MB	2023-07-22	2024-05-18
Pretty Observations First Seen2023-07-22 09:19:15 Last Seen2024-05-18 08:16:00 Times Seen337 Hash 160399677146ec23bb4906d0c317d20c ff83c9bd07479ec2203a089b48da1fab488360a4 b3fef855aa062f5e0461f840167a67e25fd8f1066ea345bf5925050bc595d182 Loading...

	#5 Write - 89f628055c234b7b6faaaa2e663cf875	315 kB	2023-07-07	2024-05-18
Pretty Observations First Seen2023-07-07 14:15:46 Last Seen2024-05-18 10:52:29 Times Seen1673 Hash 89f628055c234b7b6faaaa2e663cf875 cb78b372ff79fc384b46efd5d22b3d877e85391d 43ea3585074787e3fe818aa6df7f392c56c4c1d9e3960d3b967f2133bde77f02 Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.130.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://projeeect-sunset-27f3.citlaliheck.workers.dev/34372e90-b106-467d-a97b-32beddbff513
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projeeect-sunset-27f3.citlaliheck.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 17:47:07 GMT
age: 7108926
x-served-by: cache-lga21965-LGA, cache-hel1410025-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 50732
x-timer: S1715190427.393248,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

projeeect-sunset-27f3.citlaliheck.workers.dev/favicon.ico

188.114.96.1

200 OK

2.1 MB

URL GET HTTP/3
projeeect-sunset-27f3.citlaliheck.workers.dev/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://projeeect-sunset-27f3.citlaliheck.workers.dev/34372e90-b106-467d-a97b-32beddbff513
Certificate
IssuerGoogle Trust Services LLC
Subjectcitlaliheck.workers.dev
Fingerprint30:F0:14:2E:A2:84:B8:4C:E2:89:94:AE:1F:2B:E5:77:08:9E:28:BF
ValidityThu, 25 Apr 2024 13:35:19 GMT - Wed, 24 Jul 2024 13:35:18 GMT

File type

Size
2.1 MB (2147128 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: projeeect-sunset-27f3.citlaliheck.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://projeeect-sunset-27f3.citlaliheck.workers.dev/34372e90-b106-467d-a97b-32beddbff513
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 17:47:07 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EylaAEZ7jyvbagUShyuiI%2BT6dxVOtLpbcpATK264kUaOqePnQd6bedWpeVufMQ827aYk8cX%2FIZZO1t9kJwI5xjHI8Bg5lH5vwMyvLbyrDEt4Bi0FmnTAVpMY65PwYl064P2Sz4UYmpvJ7LKd39x7xRoqx0OdPeLOmkRQfXIy%2FSk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b45ed3df27127-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

projeeect-sunset-27f3.citlaliheck.workers.dev/34372e90-b106-467d-a97b-32beddbff513

188.114.96.1

200 OK

2.1 MB

URL User Request GET HTTP/2
projeeect-sunset-27f3.citlaliheck.workers.dev/34372e90-b106-467d-a97b-32beddbff513
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectcitlaliheck.workers.dev
Fingerprint30:F0:14:2E:A2:84:B8:4C:E2:89:94:AE:1F:2B:E5:77:08:9E:28:BF
ValidityThu, 25 Apr 2024 13:35:19 GMT - Wed, 24 Jul 2024 13:35:18 GMT

File type

Size
2.1 MB (2147128 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /34372e90-b106-467d-a97b-32beddbff513 HTTP/1.1
Host: projeeect-sunset-27f3.citlaliheck.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 17:47:06 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GhytFRknxl%2FyI5j68ReEYrOGZtixFRnnz%2BpdQtXn9nkwbsa4odou4zfhe%2BDwN3k2WXMH4PcTe9OAxeObgbdQq9InwnPs0gXimKjny5DD2Milp0CKKAHKRZjIsHy8G5dnGZkMVF3MNOZcj4hwGRmtRzy4fonVWoFyPRCAxCGiVWE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b45e80ed2568d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type