Report - hero-thunder-ef0c.lexiegamboa.workers.dev/22ba7cc2-51f9-4e9e-9964-a929b08503dd

Report Overview

Submitted URL
hero-thunder-ef0c.lexiegamboa.workers.dev/22ba7cc2-51f9-4e9e-9964-a929b08503dd
IP
104.21.43.13
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-17 05:30:36
Access
public
Website Title
blob:https://hero-thunder-ef0c.lexiegamboa.workers.dev/847231d6-8650-4a31-bad4-ec450b98fb65
Final URL
hero-thunder-ef0c.lexiegamboa.workers.dev/847231d6-8650-4a31-bad4-ec450b98fb65
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-16	435 B	31 kB	151.101.130.137
hero-thunder-ef0c.lexiegamboa.workers.dev	unknown	2019-02-08	2023-07-18	2024-04-08	1.0 kB	1.9 MB	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-08	medium	hero-thunder-ef0c.lexiegamboa.workers.dev/	Office365
2024-04-16	medium	hero-thunder-ef0c.lexiegamboa.workers.dev/22ba7cc2-51f9-4e9e-9964-a929b08503dd	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-11-17	medium	hero-thunder-ef0c.lexiegamboa.workers.dev/favicon.ico	Other
2023-11-17	medium	hero-thunder-ef0c.lexiegamboa.workers.dev/22ba7cc2-51f9-4e9e-9964-a929b08503dd	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (16)

	URL	Size	First Seen	Last Seen
	unknown	1.4 MB	2023-11-19	2024-04-30
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-19 15:45:34 Last Seen2024-04-30 08:10:44 Times Seen185 Hash 757350b8c47d13807af44abb1b94a593 237a76879884b4086a6bb9f76b7f4702f28d51af 5b802c0de68045acabcf55c33b9bdad06790959118989c751545b658eeea4eaf Loading...

	unknown	1.2 MB	2023-11-19	2024-04-30
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-19 15:45:33 Last Seen2024-04-30 08:10:44 Times Seen185 Hash 12369e7c9098f1196f3455ea27238f1d db01c25581a0a28aa4e0b90562bc19211fde7de1 30e2a57a5a6c9a504e1f3546a0cdb07199252d7ab3becbaff4b24b768d294433 Loading...

	unknown	1.3 MB	2023-11-19	2024-04-30
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-19 15:45:33 Last Seen2024-04-30 08:10:44 Times Seen185 Hash 2e14b76544b8ca9eab3ba1ba562418d5 ff19acdd0b7f8eb838aa9869f8b33a83bb08ffb6 3c1d74f10ebadee7e6913772ee888d0876f437b24a448469ea6decaecd490a5f Loading...

	unknown	141 kB	2023-07-23	2024-04-30
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-23 04:14:01 Last Seen2024-04-30 08:10:44 Times Seen4247 Hash e912ea3e9c1ad34e52f1a4093d1e0399 faec3a83fccbbae090e6c391fc4962c085f8181c 925e9cc12990a4c045cf7c28409e650f96381683a504217d8d8f2b71152a8cab Loading...

	hero-thunder-ef0c.lexiegamboa.workers.dev/847231d6-8650-4a31-bad4-ec450b98fb65	1.4 MB	2023-11-19	2024-04-30
Pretty URL hero-thunder-ef0c.lexiegamboa.workers.dev/847231d6-8650-4a31-bad4-ec450b98fb65 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-19 15:45:33 Last Seen2024-04-30 08:10:44 Times Seen185 Hash 685327a46681257e63143b57843df1c2 2d8a0074a5c2f97b30a026165e015890d0ad05eb 3e2a0576440bbce7929be9d01f687a45e2c37e50c9e236dc14b777d03cd33942 Loading...

	unknown	1.3 MB	2023-11-19	2024-04-30
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-19 15:45:33 Last Seen2024-04-30 08:10:44 Times Seen185 Hash cf8b8754b0cd9daa0ad165e1ec3fb2f1 1906ce0a886ec86ee64799efb587ee45846a70e1 58d4bd465db8a556b1da7e5893e489e52e1749516e17d91c8db71748d6c979aa Loading...

	unknown	1.3 MB	2023-11-19	2024-04-30
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-19 15:45:34 Last Seen2024-04-30 08:10:44 Times Seen184 Hash d722c14844aace2873aec7d62bf22145 039f21e5dc5ff3e2a9cc8553deb8f02eff345656 766511f16a1cbc9a86e029e553b0d9bd4bdb6eb13f87976edead6a00387e7e74 Loading...

	unknown	34 B	2023-04-11	2024-05-02
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-02 08:50:20 Times Seen75866 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

		Size	First Seen	Last Seen
	#1 Eval - bb98167f9218ae4904052abf93afbcf6	1.3 MB	2023-11-19	2024-04-30
Pretty Observations First Seen2023-11-19 15:45:34 Last Seen2024-04-30 08:10:45 Times Seen179 Hash bb98167f9218ae4904052abf93afbcf6 99d3930ee09597973916467c5a6fae03c6a901e3 cf3513c507c9652907a239c00f4d4d156eea95e56a76a7c69cfd26e4e03bd32f Loading...

	#2 Eval - fbaa06fa25c4b1e3378d9065524b2933	1.3 MB	2023-11-19	2024-04-30
Pretty Observations First Seen2023-11-19 15:45:34 Last Seen2024-04-30 08:10:45 Times Seen185 Hash fbaa06fa25c4b1e3378d9065524b2933 c2f083e536333e3f6a749883b87eff6fb42b5472 1e92a7f7e4fa7b2bf1924974185a148fc9d290f96d9120e4275d26e4acc5475a Loading...

		Size	First Seen	Last Seen
	#1 Write - 7116eee666fc2999e3cd470d94aa9890	1.4 MB	2023-11-19	2024-04-30
Pretty Observations First Seen2023-11-19 15:45:34 Last Seen2024-04-30 08:10:45 Times Seen179 Hash 7116eee666fc2999e3cd470d94aa9890 82804ae0d359cbc58bfe557f38d80e5aa5295078 4a7360e6de99c5d0a4aa546f1166f509de13076bc76fae5254d67d3df31346ed Loading...

	#2 Write - 661d967730ad1b280ff0942c01a173fa	1.3 MB	2023-11-19	2024-04-30
Pretty Observations First Seen2023-11-19 15:45:34 Last Seen2024-04-30 08:10:45 Times Seen184 Hash 661d967730ad1b280ff0942c01a173fa b35aa502e79bc597df134baf645b485e2ac04c36 7c3b7ff32aab9364d7be92be2c0d48d0b0920df9ef7fed5afd1f1cc92604650b Loading...

	#3 Write - 1a7b4fedfec5dd008dc55851bd70481f	1.2 MB	2023-11-19	2024-04-30
Pretty Observations First Seen2023-11-19 15:45:34 Last Seen2024-04-30 08:10:45 Times Seen185 Hash 1a7b4fedfec5dd008dc55851bd70481f 617499be3e6460b69c03bc5745ed848e0c0c7612 82980ad6ba0af073de44b223cc998ea924b94ef5f0da5e6df8aad49ce4a497d2 Loading...

	#4 Write - c11eaf6273e0ee76b5e0c4c6c1537ec8	1.3 MB	2023-11-19	2024-04-30
Pretty Observations First Seen2023-11-19 15:45:35 Last Seen2024-04-30 08:10:45 Times Seen185 Hash c11eaf6273e0ee76b5e0c4c6c1537ec8 f912e165ef755138d0c0314415fea685ea66ea9f 2b293986a8a89e090709e6768d9623a2a77b494a8166e7985b177ae50eadfd1e Loading...

	#5 Write - e6f94178f36170321313688e48f5e4b9	1.3 MB	2023-11-19	2024-04-30
Pretty Observations First Seen2023-11-19 15:45:35 Last Seen2024-04-30 08:10:45 Times Seen185 Hash e6f94178f36170321313688e48f5e4b9 1c986a9a808b9d3e1a008834a01ae0bdf3e632f0 f5a470e9032ba7696b31ee407b071795bddb132d73d2004a1118edff5fa04c56 Loading...

	#6 Write - 4b2ef14212f569e565710fb58354883c	315 kB	2023-11-19	2024-04-30
Pretty Observations First Seen2023-11-19 15:45:35 Last Seen2024-04-30 08:10:45 Times Seen224 Hash 4b2ef14212f569e565710fb58354883c 45155a3888413c98096c2caa7096c90c1cacd510 e3ade61c339b6c159edb2163e06780b535450fb48990166e06395dda12073868 Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.130.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://hero-thunder-ef0c.lexiegamboa.workers.dev/22ba7cc2-51f9-4e9e-9964-a929b08503dd
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hero-thunder-ef0c.lexiegamboa.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 17 Apr 2024 05:30:07 GMT
age: 5250305
x-served-by: cache-lga21965-LGA, cache-hel1410025-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 386721
x-timer: S1713331807.154176,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

hero-thunder-ef0c.lexiegamboa.workers.dev/favicon.ico

0.0.0.0

0 B

URL GET
hero-thunder-ef0c.lexiegamboa.workers.dev/favicon.ico
IP
0.0.0.0:0
ASN
#0

Requested by
https://hero-thunder-ef0c.lexiegamboa.workers.dev/22ba7cc2-51f9-4e9e-9964-a929b08503dd
Certificate
IssuerLet's Encrypt
Subjectlexiegamboa.workers.dev
FingerprintFC:B1:84:EA:15:60:AE:CF:C8:F1:20:28:FF:86:2C:38:18:72:B4:46
ValidityMon, 11 Mar 2024 03:04:46 GMT - Sun, 09 Jun 2024 03:04:45 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: hero-thunder-ef0c.lexiegamboa.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hero-thunder-ef0c.lexiegamboa.workers.dev/22ba7cc2-51f9-4e9e-9964-a929b08503dd
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

hero-thunder-ef0c.lexiegamboa.workers.dev/22ba7cc2-51f9-4e9e-9964-a929b08503dd

172.67.215.180

200 OK

1.9 MB

URL User Request GET HTTP/2
hero-thunder-ef0c.lexiegamboa.workers.dev/22ba7cc2-51f9-4e9e-9964-a929b08503dd
IP
172.67.215.180:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectlexiegamboa.workers.dev
FingerprintFC:B1:84:EA:15:60:AE:CF:C8:F1:20:28:FF:86:2C:38:18:72:B4:46
ValidityMon, 11 Mar 2024 03:04:46 GMT - Sun, 09 Jun 2024 03:04:45 GMT

File type

Size
1.9 MB (1905986 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /22ba7cc2-51f9-4e9e-9964-a929b08503dd HTTP/1.1
Host: hero-thunder-ef0c.lexiegamboa.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 17 Apr 2024 05:30:06 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gj2StjIBsp0uI%2F%2FMc5qQKjYB7bMyTjs%2FN671pBM8B6CanqZPiKOghMuMITzdi%2BDvUueDyYj%2FoAp6URZZ2u6AbBITsx4zHlKDYtg3AqFX4DYTtH%2BYsXHxKvEMcg38SgNx4CJNC5ez%2BOzsp%2BH%2BLiGPVdK9VoEefFVYkQeosw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875a05702b57abc9-CPH
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (16)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP