Report - cloudl-191c.aoapuulz.workers.dev/122573cc-a6db-48b5-9ab7-b977a1a93330

Report Overview

Submitted URL
cloudl-191c.aoapuulz.workers.dev/122573cc-a6db-48b5-9ab7-b977a1a93330
IP
172.67.129.251
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-08 15:46:04
Access
public
Website Title
blob:https://cloudl-191c.aoapuulz.workers.dev/5b425539-3b6d-4da9-a2d7-aa028e69568e
Final URL
cloudl-191c.aoapuulz.workers.dev/5b425539-3b6d-4da9-a2d7-aa028e69568e
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-08	426 B	31 kB	151.101.130.137
cloudl-191c.aoapuulz.workers.dev	unknown	2019-02-08	2023-12-12	2024-03-24	1.0 kB	3.7 MB	104.21.3.6

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-08	medium	cloudl-191c.aoapuulz.workers.dev/122573cc-a6db-48b5-9ab7-b977a1a93330	Office365
2024-04-11	medium	cloudl-191c.aoapuulz.workers.dev/	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2024-02-22	medium	cloudl-191c.aoapuulz.workers.dev/122573cc-a6db-48b5-9ab7-b977a1a93330	Adobe
2024-02-22	medium	cloudl-191c.aoapuulz.workers.dev/favicon.ico	Adobe

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (10)

	URL	Size	First Seen	Last Seen
	unknown	141 kB	2024-01-01	2024-05-18
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-01 15:40:29 Last Seen2024-05-18 07:18:16 Times Seen108 Hash c06a8d2d806200a7cf8d26dfbc5ce809 0ee711275a142da3ebe3470873fff536a1893708 d845b252e662d472623613bc2207ab4b1e7cdabe493c9f6ccb7637828f166b67 Loading...

	cloudl-191c.aoapuulz.workers.dev/5b425539-3b6d-4da9-a2d7-aa028e69568e	1.4 MB	2024-01-21	2024-05-13
Pretty URL cloudl-191c.aoapuulz.workers.dev/5b425539-3b6d-4da9-a2d7-aa028e69568e IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-21 16:16:56 Last Seen2024-05-13 18:40:35 Times Seen23 Hash 267333cbe53c1939e617abdb32ab3418 7b3128d467a7a60004954ab3100093f9ce614756 3590c5c4bc95b4477ae4dace5aea98a29846948be90ab3aeb21727ff0fd3e2d5 Loading...

	unknown	1.3 MB	2024-01-21	2024-05-13
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-21 16:16:56 Last Seen2024-05-13 18:40:35 Times Seen23 Hash 11e2579af3e0feeacb1148a9c111dbde 24af35e81e268df1dbef6885a7528a69c29c7e76 100ca0a910bf6866fceac625015aea3f95f832f2070559a71f11f6d50e9fbd05 Loading...

	unknown	1.2 MB	2024-01-21	2024-05-13
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-21 16:16:56 Last Seen2024-05-13 18:40:35 Times Seen23 Hash 55d59bd98b9d6b4f3b76b5793cc541c7 742888c0c9f2b43134a74f3f5aeae67ffb53f029 2d4fed5fb1a43a267dd6de1221870eb9fd6160b6318c89eaf40599538704f30d Loading...

	unknown	34 B	2023-04-11	2024-05-20
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-20 01:32:03 Times Seen77716 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 5c749f8d5f93d178f6047874e4afa071	1.3 MB	2024-01-21	2024-05-13
Pretty Observations First Seen2024-01-21 16:16:57 Last Seen2024-05-13 18:40:35 Times Seen23 Hash 5c749f8d5f93d178f6047874e4afa071 33d29b6ea83c0bde76a41d9762d8a64aff895aa9 7ce1e3b7fc4e81b85fb02026577086f6065dfcae1dac922f77b6dac484cce40f Loading...

	#2 Eval - 9d998f183fb46e42ad59b9c7312f3542	1.3 MB	2024-01-21	2024-05-08
Pretty Observations First Seen2024-01-21 16:16:57 Last Seen2024-05-08 17:46:05 Times Seen22 Hash 9d998f183fb46e42ad59b9c7312f3542 7cb171da0fb2a307ac2d44cfbd9ba5bc8ee5e27c 4cb3872f49d84c626e7a60dd39b7836ef3d3c05d5e1362090ab73ce15b09805d Loading...

		Size	First Seen	Last Seen
	#1 Write - 82205699e1ad57cb01921a2e17243a0e	1.2 MB	2024-01-21	2024-05-13
Pretty Observations First Seen2024-01-21 16:16:57 Last Seen2024-05-13 18:40:35 Times Seen23 Hash 82205699e1ad57cb01921a2e17243a0e 8db7a6d41e2ed1a70af26dc54de669028cfd7e3b 0a30fd3162ea48ef401ef7b61911dec1ca626aad1741c718157cfef28d20df90 Loading...

	#2 Write - 44708cf52fd57a9915fe879d2048aa37	1.3 MB	2024-01-21	2024-05-13
Pretty Observations First Seen2024-01-21 16:16:57 Last Seen2024-05-13 18:40:35 Times Seen23 Hash 44708cf52fd57a9915fe879d2048aa37 0b93675d1b2ffc4b6d862c18ddd36bed0dba00f6 428196fd1d58e000ae7b57e2f7ddb8fd42a774cb8de86f4ae6346911ac7b12df Loading...

	#3 Write - 5a87cd0e102c24f8323e320ca9fdcb37	293 kB	2023-10-25	2024-05-19
Pretty Observations First Seen2023-10-25 02:31:39 Last Seen2024-05-19 06:52:56 Times Seen230 Hash 5a87cd0e102c24f8323e320ca9fdcb37 b2590bf4a6caf6d5655d75f7034b7cd594322214 afc053ce6c4122551a2d330c344f25eaaa70715caeede8b0d561eb1b72ebf041 Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.130.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://cloudl-191c.aoapuulz.workers.dev/122573cc-a6db-48b5-9ab7-b977a1a93330
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudl-191c.aoapuulz.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 08 May 2024 15:45:37 GMT
age: 7101635
x-served-by: cache-lga21965-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 559060
x-timer: S1715183137.252728,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

cloudl-191c.aoapuulz.workers.dev/122573cc-a6db-48b5-9ab7-b977a1a93330

104.21.3.6

200 OK

1.8 MB

URL User Request GET HTTP/2
cloudl-191c.aoapuulz.workers.dev/122573cc-a6db-48b5-9ab7-b977a1a93330
IP
104.21.3.6:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectaoapuulz.workers.dev
Fingerprint19:67:4C:27:4C:E5:EE:38:F7:37:17:44:76:07:2C:1B:92:89:A0:32
ValiditySun, 07 Apr 2024 12:52:07 GMT - Sat, 06 Jul 2024 12:52:06 GMT

File type

Size
1.8 MB (1831615 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /122573cc-a6db-48b5-9ab7-b977a1a93330 HTTP/1.1
Host: cloudl-191c.aoapuulz.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 08 May 2024 15:45:36 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rN41YV1GpF0aGP8EV0EaV4EJ4pTyGM2p70Val%2FraDSwkaeM8ZvnYb0yzpQAX1cjVDLUzrBnFSfm3yWkrgxDlAj8hh3CXd92OjD4hlAbJ3SPx0TcP3nyRnoJK%2BHK8sDbGneiaHmZD8ulqG7HMcuwMF8qPTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880a93ecd8251c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cloudl-191c.aoapuulz.workers.dev/favicon.ico

104.21.3.6

200 OK

1.8 MB

URL GET HTTP/3
cloudl-191c.aoapuulz.workers.dev/favicon.ico
IP
104.21.3.6:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloudl-191c.aoapuulz.workers.dev/122573cc-a6db-48b5-9ab7-b977a1a93330
Certificate
IssuerGoogle Trust Services LLC
Subjectaoapuulz.workers.dev
Fingerprint19:67:4C:27:4C:E5:EE:38:F7:37:17:44:76:07:2C:1B:92:89:A0:32
ValiditySun, 07 Apr 2024 12:52:07 GMT - Sat, 06 Jul 2024 12:52:06 GMT

File type

Size
1.8 MB (1831615 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: cloudl-191c.aoapuulz.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloudl-191c.aoapuulz.workers.dev/122573cc-a6db-48b5-9ab7-b977a1a93330
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 08 May 2024 15:45:37 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4F5zLQR7e8nNkYipkfVH%2Fb4Bljq%2BydNISaws9UO5JhbW8teWTVNQd5t4390AERXVZTWzf5sGa%2BTv8e8g4LLlo9ro%2Fnslejb9H4qFBjwGmJDjthLT4%2FN0uAYp4crf47LiKF5a%2F9cq7vibYEhTDRMWLNtLWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 880a93f1dc0db503-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL GET HTTP/3

IP