Report - inv-shee-0d26.ieislnqveulte.workers.dev/d0c008dc-d1b3-4126-97ca-5a1b5ca5c0a7

Report Overview

Submitted URL
inv-shee-0d26.ieislnqveulte.workers.dev/d0c008dc-d1b3-4126-97ca-5a1b5ca5c0a7
IP
104.21.79.12
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 05:59:01
Access
public
Website Title
blob:https://inv-shee-0d26.ieislnqveulte.workers.dev/fc89bcc8-aebe-4f07-92ff-c0250e55f69b
Final URL
inv-shee-0d26.ieislnqveulte.workers.dev/fc89bcc8-aebe-4f07-92ff-c0250e55f69b
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-17	433 B	31 kB	151.101.2.137
inv-shee-0d26.ieislnqveulte.workers.dev	unknown	2019-02-08	2023-11-07	2024-04-09	1.1 kB	2.3 MB	104.21.79.12

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-15	medium	inv-shee-0d26.ieislnqveulte.workers.dev/	Office365
2024-04-17	medium	inv-shee-0d26.ieislnqveulte.workers.dev/d0c008dc-d1b3-4126-97ca-5a1b5ca5c0a7	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-11-10	medium	inv-shee-0d26.ieislnqveulte.workers.dev/favicon.ico	Other
2023-11-10	medium	inv-shee-0d26.ieislnqveulte.workers.dev/d0c008dc-d1b3-4126-97ca-5a1b5ca5c0a7	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	unknown	141 kB	2023-09-22	2024-04-30
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-22 18:19:02 Last Seen2024-04-30 08:14:44 Times Seen3764 Hash 2d1ca53ddb15fad7b6aa22984e09279e 45e7d33fa315a972d79fbe7d808a331145b1a6ac 43bf605d529c0a1a0ef298030d6c93ffd8d34a44163eba37928591b29abe8763 Loading...

	unknown	34 B	2023-04-11	2024-05-01
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-01 11:54:10 Times Seen75786 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	unknown	1.3 MB	2023-11-11	2024-04-21
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-11 14:00:14 Last Seen2024-04-21 06:52:23 Times Seen149 Hash 0f328d9d9773bb076dfe5ac055f7d163 0d84b89d5a9d9eaf746ad61461a49649cd102282 0604b4f09c802a108ba591db64755a137fa1523894fe713b7176a6c126c524f1 Loading...

	unknown	1.2 MB	2023-11-11	2024-04-21
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-11 14:00:14 Last Seen2024-04-21 06:52:24 Times Seen149 Hash dc65ac8c187d169dacfa8c91ab387e1f 1113a17c3139102839fcf362806f765bcc7b1cdd e3470a260de4d7a7dca177ffad1f20e01874d8a17e7ed0ed18569b0df28cdc02 Loading...

	inv-shee-0d26.ieislnqveulte.workers.dev/fc89bcc8-aebe-4f07-92ff-c0250e55f69b	1.2 MB	2023-11-11	2024-04-21
Pretty URL inv-shee-0d26.ieislnqveulte.workers.dev/fc89bcc8-aebe-4f07-92ff-c0250e55f69b IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-11 14:00:14 Last Seen2024-04-21 06:52:24 Times Seen148 Hash a93bbfc3e961559f3def4136f6faab83 e1dd03147f15522c1961b5ca89c79046af2d4e34 321fd36cc310ae8a80125a7dc3a5a7441cbde0baeb82f4d42888e798aa4b7b1b Loading...

	unknown	1.2 MB	2023-11-11	2024-04-21
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-11 14:00:14 Last Seen2024-04-21 06:52:23 Times Seen149 Hash b90c153ca572e342982d770be1105f11 0afc07455f59db12d93c8f5f0749188b84601856 5c63005bff3850ecde0162da7871bf7eb591dd2fd6256b3e2d964dcc48438fec Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9127849ca1640094b98ab9222fd5773b	1.3 MB	2023-11-11	2024-04-21
Pretty Observations First Seen2023-11-11 14:00:15 Last Seen2024-04-21 06:52:24 Times Seen148 Hash 9127849ca1640094b98ab9222fd5773b db2048acb5b259b3f27a37bb35d06889b77f3981 275328c09023de6fb98a90d420638b8a8d782fbac3c23acb2d3b2bdab889f477 Loading...

	#2 Eval - 556e79e1f4d4042388cfbbac2d7a8710	1.2 MB	2023-11-11	2024-04-21
Pretty Observations First Seen2023-11-11 14:00:15 Last Seen2024-04-21 06:52:24 Times Seen149 Hash 556e79e1f4d4042388cfbbac2d7a8710 9b7f040bfb78566bd64d262d8e8e4ff2d386d474 04c49930f953def26c16318fa71d5e06118791ff7135584fb6b155508b15f92c Loading...

		Size	First Seen	Last Seen
	#1 Write - 7674b730cc849af1955bb7381fd99583	1.2 MB	2023-11-11	2024-04-21
Pretty Observations First Seen2023-11-11 14:00:15 Last Seen2024-04-21 06:52:24 Times Seen148 Hash 7674b730cc849af1955bb7381fd99583 6481848337fc84100eee173360e29ae9db9d6da1 d9b9e66bf1d9efa44ce8c0db4c98f3736643362efc48ce4c2b2377c6e552e862 Loading...

	#2 Write - c27f533b34a018a0de0f5d72f8bec3db	1.2 MB	2023-11-11	2024-04-21
Pretty Observations First Seen2023-11-11 14:00:15 Last Seen2024-04-21 06:52:24 Times Seen149 Hash c27f533b34a018a0de0f5d72f8bec3db d57c1ef4b5f313062fff65ed1d9e4dacefc57a9a 24f8c7efb926bc58a2b9a20c6bd0febb897eb3733cf99a13a8b1f59d647ca150 Loading...

	#3 Write - ce4578e27bbba4f67251b3e08ab366d7	295 kB	2023-11-08	2024-04-30
Pretty Observations First Seen2023-11-08 07:46:03 Last Seen2024-04-30 07:30:02 Times Seen1293 Hash ce4578e27bbba4f67251b3e08ab366d7 08037ab85e666020d3be2d450798fead572d2749 5a41f85e717a3dcc0553e70b53dcedff91ed903d7c7ccad4dd85eb40cba04422 Loading...

	#4 Write - dcc74962af7d29557d41b48cde00206a	1.3 MB	2023-11-11	2024-04-21
Pretty Observations First Seen2023-11-11 14:00:15 Last Seen2024-04-21 06:52:24 Times Seen147 Hash dcc74962af7d29557d41b48cde00206a 11ca2d1b44b178c1c91a17aed040665fa85a2ad0 4be4852774346ca551e38533592e4a0b036f4f37de41fd582de4ce7be4529230 Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://inv-shee-0d26.ieislnqveulte.workers.dev/d0c008dc-d1b3-4126-97ca-5a1b5ca5c0a7
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inv-shee-0d26.ieislnqveulte.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 18 Apr 2024 05:58:32 GMT
age: 5338411
x-served-by: cache-lga21965-LGA, cache-hel1410033-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 399853
x-timer: S1713419913.863430,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

inv-shee-0d26.ieislnqveulte.workers.dev/favicon.ico

104.21.79.12

200 OK

632 kB

URL GET HTTP/3
inv-shee-0d26.ieislnqveulte.workers.dev/favicon.ico
IP
104.21.79.12:443
ASN
#13335 CLOUDFLARENET

Requested by
https://inv-shee-0d26.ieislnqveulte.workers.dev/d0c008dc-d1b3-4126-97ca-5a1b5ca5c0a7
Certificate
IssuerGoogle Trust Services LLC
Subjectieislnqveulte.workers.dev
FingerprintDB:17:9D:12:EB:93:DF:72:3C:61:6C:17:1C:9F:42:C3:DE:8F:66:E6
ValidityMon, 04 Mar 2024 18:10:21 GMT - Sun, 02 Jun 2024 18:10:20 GMT

File type
JavaScript source, ASCII text, with very long lines (64862)
Size
632 kB (631538 bytes)
Hash
1502a0c4779c08cbebfb6244521f626b
d2dda250d3f971e2f2514677b2780028dcfe0a25
54a21627ea12914d4931dcb0e0e44224d567e9f81ecd02d43e421f8fe65ff623

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: inv-shee-0d26.ieislnqveulte.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://inv-shee-0d26.ieislnqveulte.workers.dev/d0c008dc-d1b3-4126-97ca-5a1b5ca5c0a7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:58:33 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i0nW1f%2FEcjCBQYjeLB7jfI95dkA3SlMIjD1%2BAy%2B9SYxxVBqdVEHk%2BzO%2BAvv%2F3S3%2Fw7mAehyGEK0YaotyFuc6MoY3SD6r9V42cUj%2BMyS4WydVbs5HmkkT83moS%2Bigqz1XgibvpXdkd7QhBc7cVCsHKLbQZSnHXH47Ss4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87626c78c83556c5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

inv-shee-0d26.ieislnqveulte.workers.dev/d0c008dc-d1b3-4126-97ca-5a1b5ca5c0a7

104.21.79.12

200 OK

1.6 MB

URL User Request GET HTTP/2
inv-shee-0d26.ieislnqveulte.workers.dev/d0c008dc-d1b3-4126-97ca-5a1b5ca5c0a7
IP
104.21.79.12:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectieislnqveulte.workers.dev
FingerprintDB:17:9D:12:EB:93:DF:72:3C:61:6C:17:1C:9F:42:C3:DE:8F:66:E6
ValidityMon, 04 Mar 2024 18:10:21 GMT - Sun, 02 Jun 2024 18:10:20 GMT

File type

Size
1.6 MB (1646057 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /d0c008dc-d1b3-4126-97ca-5a1b5ca5c0a7 HTTP/1.1
Host: inv-shee-0d26.ieislnqveulte.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:58:32 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CEkIMaXTEPcUsRAEEtPgwz%2BP%2BkXJeHrXnsmX5iRIDZfbPDCYC8Brv5tHmPxszPHyzWtUi9qyCR9uj3v73qZcYxDvDHy9X%2Ft1l6PhoNiUOnuPxc4hr2xXh8SgBgZRKplIHpu67dJ8vnuzd6E8FnroHmo9QfgDNMswQ%2Fw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87626c7528981bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate