Report - rack-space-a32937.owamser.workers.dev/

Report Overview

Submitted URL
rack-space-a32937.owamser.workers.dev/
IP
104.21.59.184
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 17:56:43
Access
public
Website Title
Rackspace Webmail: Hosted Email for Business
Final URL
rack-space-a32937.owamser.workers.dev/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
12

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cp.rackspace.com	405282	1998-08-14	2012-09-29	2024-04-08	1.5 kB	12 kB	104.130.182.72
apps.rackspace.com	119514	1998-08-14	2013-06-19	2024-04-15	433 B	30 kB	69.20.91.24
rack-space-a32937.owamser.workers.dev	unknown	2019-02-08	2022-03-02	2023-11-04	963 B	93 kB	172.67.182.110
ajax.goog	unknown	unknown	No data	No data	914 B	0 B	0.0.0.0
ocsp.r2m03.amazontrust.com	unknown	2007-05-11	2023-02-21	2024-05-07	338 B	941 B	143.204.53.97
status.thawte.com	5123	1996-02-10	2017-11-27	2024-05-07	329 B	735 B	192.229.221.95
www.sitepoint.com	198954	1999-10-04	2012-06-18	2024-03-14	464 B	1.4 kB	54.230.111.54

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	rack-space-a32937.owamser.workers.dev/	Rackspace
2024-05-08	medium	rack-space-a32937.owamser.workers.dev/	Rackspace

PhishTank

Scan Date	Severity	Indicator	Alert
2022-10-26	medium	rack-space-a32937.owamser.workers.dev/favicon.ico	Other
2022-10-26	medium	rack-space-a32937.owamser.workers.dev/	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	ajax.goog	Sinkholed
2024-05-08	medium	ajax.goog	Sinkholed

ThreatFox

No alerts detected

JavaScript (8)

	URL	Size	First Seen	Last Seen
	rack-space-a32937.owamser.workers.dev/	46 kB	2023-03-08	2024-05-08
Pretty URL rack-space-a32937.owamser.workers.dev/ IP 172.67.182.110 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-08 21:14:13 Last Seen2024-05-08 19:56:49 Times Seen12 Hash bd2e1778d5678677b5d145eb7c2c40ef 42854d5af63cfcf273ffddca921568262167fcf0 efddb081f390693022bfddb74fdb5496e171aff9e7e93724e1c6cf077e3e7ccf Loading...

	unknown	48 B	2023-05-20	2024-05-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-20 14:17:44 Last Seen2024-05-08 19:56:49 Times Seen11 Hash 5a287cf209df83154895e1556576f10a 685cd47b48bf4ad58654cb03bcb4d6eb4eca2e91 67f59b9103eefbd8d93d6d700baed85c18ac892717ca3c9ae96f4e584b147316 Loading...

	apps.rackspace.com/a/js/login.js?2230	29 kB	2023-03-07	2024-05-08
Pretty URL apps.rackspace.com/a/js/login.js?2230 IP 69.20.91.24 ASN #27357 RACKSPACE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 12:10:28 Last Seen2024-05-08 19:56:50 Times Seen31 Hash 5824a1ae81fa3c66da0dc9a3bcbc8b2a da485b2798d9176afbdca97de9a7698d66dcb784 254954afb10634ad2eead14d873510c39a68c15d3bf54bf958655962cb7e1450 Loading...

	unknown	609 B	2023-05-20	2024-05-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-20 14:17:44 Last Seen2024-05-08 19:56:49 Times Seen11 Hash 6961302ac6bfbb65dc18a91ee497b0c3 2bf011b6ed883f9a013a4071c54cc9a375fe0966 71da2f429c59ab1e2f33e83353be6f1ff73a99301bac3736adc3a42b4dd10b2e Loading...

	unknown	609 B	2023-05-20	2024-05-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-20 14:17:44 Last Seen2024-05-08 19:56:49 Times Seen11 Hash af13fa58bd25626b1c233bb03571bd05 d82da40689d325b1a36927537471f5e3016ba330 641bd120b696178995b29d4eaa416ff49ec3ae6c85d7fa5346ced880ba4ec589 Loading...

	unknown	658 B	2023-05-20	2024-05-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-20 14:17:44 Last Seen2024-05-08 19:56:49 Times Seen11 Hash bc5721a2ef9c3b21c4d0e667876dca2a f8e844cd2457275e91cd7bcdf201c6ac641e6148 b47ed527a55d0f6d5aa40e0f841e6f8757a5a1d725c2a544742aadfe5005e9c7 Loading...

	unknown	706 B	2023-05-20	2024-05-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-20 14:17:44 Last Seen2024-05-08 19:56:49 Times Seen11 Hash 31ed37595265a06c02b514a6e615ac26 892a43347051dd7857487686f4052ff667a068f5 e66d7a5d47c90cf8d95cc654339e7f4c21c892767ba5445f0d9c3756d7b74c1f Loading...

		Size	First Seen	Last Seen
	#1 Write - c83db1de28220971c7a33bb1d86be5a2	15 kB	2023-03-08	2024-05-08
Pretty Observations First Seen2023-03-08 21:14:14 Last Seen2024-05-08 19:56:49 Times Seen12 Hash c83db1de28220971c7a33bb1d86be5a2 b97a123238ae68b089df772033f4d5276aa8cc3c 026328cd5645dda6845eb283b13e44d262214af8d5a63239485ebf52ebff4bc9 Loading...

HTTP Transactions (11)

URL IP Response Size

ocsp.r2m03.amazontrust.com/

143.204.53.97

471 B

URL
ocsp.r2m03.amazontrust.com/
IP
143.204.53.97:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
0874506038f2b4689b48d035105631ea
2bf09abbc5afcc67fd6cde4b95cd29fd9787074f
374fb6bcf29e51438082ee17e582cb625e1a6beebfa8af711bc1ac20cd612de5

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Wed, 08 May 2024 17:56:18 GMT
Last-Modified: Wed, 08 May 2024 17:46:19 GMT
Server: ECAcc (ska/F75B)
X-Cache: Miss from cloudfront
Via: 1.1 76c917e0bb0ba45eb834d25d76ee125e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: s-HqESYNasge_ga2zBvxDmNiwx7SLdEr5Il8UcPIQOC6_n5ZBBTHnw==
Age: 599

status.thawte.com/

192.229.221.95

471 B

URL
status.thawte.com/
IP
192.229.221.95:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
b9e32933f4d1eaaa5596e56b26bed608
a3103c2457f26243a75fe50ec7c00a8e9df0736d
086cc1827b9f2c142233f5a1571cbfb204ed9bc7646bfed19abef3daa41df006

HTTP Headers

POST / HTTP/1.1
Host: status.thawte.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6424
Cache-Control: max-age=7200
Content-Type: application/ocsp-response
Date: Wed, 08 May 2024 17:56:19 GMT
Last-Modified: Wed, 08 May 2024 16:09:15 GMT
Server: ECAcc (amb/6B53)
X-Cache: HIT
Content-Length: 471

www.sitepoint.com/examples/password/MaskedPassword/MaskedPassword.js

54.230.111.54

503 Service Unavailable

1.0 kB

URL GET HTTP/2
www.sitepoint.com/examples/password/MaskedPassword/MaskedPassword.js
IP
54.230.111.54:443
ASN
#16509 AMAZON-02

Requested by
https://rack-space-a32937.owamser.workers.dev/
Certificate
IssuerAmazon
Subjectwww.sitepoint.com
FingerprintFF:74:46:4C:A4:D3:75:AE:2E:CD:70:1A:DB:49:E0:95:C2:C6:81:D8
ValiditySun, 06 Aug 2023 00:00:00 GMT - Mon, 02 Sep 2024 23:59:59 GMT

File type
HTML document, ASCII text
Size
1.0 kB (1019 bytes)
Hash
00f96ee4035b19f0e143e1dc695636a1
534513fa969605dc08238f736c08bb55eb008a7d
fa9aeaf21098f54027262c0e0df5fd2b67913b24b56120059c22b1e2d2b81187

HTTP Headers

GET /examples/password/MaskedPassword/MaskedPassword.js HTTP/1.1
Host: www.sitepoint.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rack-space-a32937.owamser.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 503 Service Unavailable
content-type: text/html
content-length: 1019
server: CloudFront
date: Wed, 08 May 2024 17:56:19 GMT
x-cache: LambdaExecutionError from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ux0avzBO_EnEGSxyyqp1JMQWu71DWGAsjf0_gzjTm3dGN8LDFs3hAQ==
X-Firefox-Spdy: h2

cp.rackspace.com/clients/webmail/apps_rackspace_com/images/blank.gif

104.130.182.72

200 OK

43 B

URL GET HTTP/1.1
cp.rackspace.com/clients/webmail/apps_rackspace_com/images/blank.gif
IP
104.130.182.72:443
ASN
#27357 RACKSPACE

Requested by
https://rack-space-a32937.owamser.workers.dev/
Certificate
IssuerDigiCert Inc
Subjectcp.rackspace.com
FingerprintB9:8D:D6:59:7E:14:85:B1:BA:E3:2B:32:4D:01:37:8A:ED:F4:D4:63
ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
710d230ab6d70d5b4bbe1456ab8ba56b
aeee8694ace8cb587017c3d586533b5c0d3bf8c0
2894fa1d1ebe2f99a165317c3c46ea23a7de28590a1c3965508acaf802e9c9a8

HTTP Headers

GET /clients/webmail/apps_rackspace_com/images/blank.gif HTTP/1.1
Host: cp.rackspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rack-space-a32937.owamser.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 May 2024 17:56:19 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Mon, 28 Feb 2011 22:29:24 GMT
Accept-Ranges: bytes
ETag: "03a78f396d7cb1:0"
X-Powered-By: ASP.NET

apps.rackspace.com/a/js/login.js?2230

69.20.91.24

200 OK

29 kB

URL GET HTTP/1.1
apps.rackspace.com/a/js/login.js?2230
IP
69.20.91.24:443
ASN
#27357 RACKSPACE

Requested by
https://rack-space-a32937.owamser.workers.dev/
Certificate
IssuerDigiCert Inc
Subjectapps.rackspace.com
Fingerprint1C:E7:50:06:25:9C:A3:B9:23:9C:2D:8E:FF:73:7F:91:B5:EA:2A:91
ValidityTue, 08 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT

File type
ASCII text
Size
29 kB (29376 bytes)
Hash
5824a1ae81fa3c66da0dc9a3bcbc8b2a
da485b2798d9176afbdca97de9a7698d66dcb784
254954afb10634ad2eead14d873510c39a68c15d3bf54bf958655962cb7e1450

HTTP Headers

GET /a/js/login.js?2230 HTTP/1.1
Host: apps.rackspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rack-space-a32937.owamser.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 May 2024 17:56:19 GMT
Content-Type: application/x-javascript
Content-Length: 29376
Connection: keep-alive
Expires: Thu, 08 May 2025 17:56:19 +0000
X-Frame-Options: SAMEORIGIN

cp.rackspace.com/clients/webmail/apps_rackspace_com/images/logo_20141002.png

104.130.182.72

200 OK

2.1 kB

URL GET HTTP/1.1
cp.rackspace.com/clients/webmail/apps_rackspace_com/images/logo_20141002.png
IP
104.130.182.72:443
ASN
#27357 RACKSPACE

Requested by
https://rack-space-a32937.owamser.workers.dev/
Certificate
IssuerDigiCert Inc
Subjectcp.rackspace.com
FingerprintB9:8D:D6:59:7E:14:85:B1:BA:E3:2B:32:4D:01:37:8A:ED:F4:D4:63
ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT

File type
PNG image data, 130 x 32, 8-bit/color RGBA, non-interlaced
Size
2.1 kB (2080 bytes)
Hash
1a23f0a81dc5a1fe8495461a3afced86
0e87647cb2ab7ae544322d1961052598d564eeae
f167dfd881b45166119fce39b1fa639e925f80e4e7391e3cbe83f843490b7b19

HTTP Headers

GET /clients/webmail/apps_rackspace_com/images/logo_20141002.png HTTP/1.1
Host: cp.rackspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rack-space-a32937.owamser.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 May 2024 17:56:19 GMT
Content-Type: image/png
Content-Length: 2080
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Thu, 02 Oct 2014 17:24:37 GMT
Accept-Ranges: bytes
ETag: "4924cebd65decf1:0"
X-Powered-By: ASP.NET

cp.rackspace.com/clients/webmail/apps_rackspace_com/images/plus-anytime_anywhere-190x294.png

104.130.182.72

200 OK

9.2 kB

URL GET HTTP/1.1
cp.rackspace.com/clients/webmail/apps_rackspace_com/images/plus-anytime_anywhere-190x294.png
IP
104.130.182.72:443
ASN
#27357 RACKSPACE

Requested by
https://rack-space-a32937.owamser.workers.dev/
Certificate
IssuerDigiCert Inc
Subjectcp.rackspace.com
FingerprintB9:8D:D6:59:7E:14:85:B1:BA:E3:2B:32:4D:01:37:8A:ED:F4:D4:63
ValidityWed, 05 Jul 2023 00:00:00 GMT - Thu, 18 Jul 2024 23:59:59 GMT

File type
PNG image data, 190 x 294, 8-bit/color RGB, non-interlaced
Size
9.2 kB (9209 bytes)
Hash
db1fe5ca924ca5ff4a9482e114b43886
4e54b079d9addab4fd642f2295b9563adeb3c47a
db18ad437ed30b29a15bb4a394df2f29cd5073ccab904b6ed5e2cf870530dc62

HTTP Headers

GET /clients/webmail/apps_rackspace_com/images/plus-anytime_anywhere-190x294.png HTTP/1.1
Host: cp.rackspace.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rack-space-a32937.owamser.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: openresty
Date: Wed, 08 May 2024 17:56:19 GMT
Content-Type: image/png
Content-Length: 9209
Connection: keep-alive
Cache-Control: no-cache
Last-Modified: Tue, 31 Oct 2017 20:00:35 GMT
Accept-Ranges: bytes
ETag: "af449aea8252d31:0"
X-Powered-By: ASP.NET

rack-space-a32937.owamser.workers.dev/favicon.ico

172.67.182.110

200 OK

46 kB

URL GET HTTP/3
rack-space-a32937.owamser.workers.dev/favicon.ico
IP
172.67.182.110:443
ASN
#13335 CLOUDFLARENET

Requested by
https://rack-space-a32937.owamser.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectowamser.workers.dev
FingerprintE4:B8:D2:BB:96:B2:77:01:30:4B:A9:42:17:26:85:7F:EB:C6:EE:02
ValidityMon, 18 Mar 2024 03:45:02 GMT - Sun, 16 Jun 2024 03:45:01 GMT

File type
HTML document, ASCII text, with very long lines (45572)
Size
46 kB (45749 bytes)
Hash
57c9c677d1c4fe758317d85cfe01073e
a3b3a000b2fd39e7ab11a081bff5f492eac2d652
678c7bdfa334cc04afdfdbb1e3e7ebf98ecce178135ab46d4d6791bf70cf6028

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Rackspace
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: rack-space-a32937.owamser.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rack-space-a32937.owamser.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 17:56:19 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RPKRHJHpJA3xxKM8EfnuspYeTzgaI47PvUHk2utzBkwyuD5OTgm2YE1hJ13IOEC%2Brk8BKJO3%2FrLQup2cJSt%2BcWyD1iBeOhsNW2oes7ahmVcIMCJIc0uc5FRHMTkDKYj4E43eusqDxTqIcnr1jxcuqGDkH448un5t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b5365ac63712b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

rack-space-a32937.owamser.workers.dev/

172.67.182.110

200 OK

46 kB

URL User Request GET HTTP/2
rack-space-a32937.owamser.workers.dev/
IP
172.67.182.110:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectowamser.workers.dev
FingerprintE4:B8:D2:BB:96:B2:77:01:30:4B:A9:42:17:26:85:7F:EB:C6:EE:02
ValidityMon, 18 Mar 2024 03:45:02 GMT - Sun, 16 Jun 2024 03:45:01 GMT

File type
HTML document, ASCII text, with very long lines (45572)
Size
46 kB (45749 bytes)
Hash
57c9c677d1c4fe758317d85cfe01073e
a3b3a000b2fd39e7ab11a081bff5f492eac2d652
678c7bdfa334cc04afdfdbb1e3e7ebf98ecce178135ab46d4d6791bf70cf6028

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Rackspace
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: rack-space-a32937.owamser.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 17:56:18 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JcMXOcfWxYyAxUKfwniz8mE1KjRS41czYCZJD5lgYkFkTJd5v4gC4fkBKjW6unI9GdJhvf3mEWXPdknDk3dWpNMRqkSguO7Oq3M9zazreBl21FeVKBLdh00LAnHH3o9VqjrIzNMCNgK3DbudDeNWX0PHCaY12ZfX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880b535eab3a568a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ajax.goog//leapis.com/ajax/libs/jquery/1.10.2/jquery.min.js

0.0.0.0

0 B

URL GET
ajax.goog//leapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://rack-space-a32937.owamser.workers.dev/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET //leapis.com/ajax/libs/jquery/1.10.2/jquery.min.js HTTP/1.1
Host: ajax.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rack-space-a32937.owamser.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

ajax.goog//leapis.com/ajax/libs/jquery/1.10.2/jquery.min.js

0.0.0.0

0 B

URL GET
ajax.goog//leapis.com/ajax/libs/jquery/1.10.2/jquery.min.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://rack-space-a32937.owamser.workers.dev/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET //leapis.com/ajax/libs/jquery/1.10.2/jquery.min.js HTTP/1.1
Host: ajax.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://rack-space-a32937.owamser.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (8)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (11)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN