Report - orebu-cloud-3bde.lwvemrlaensi.workers.dev/d3114992-c4fa-4319-b85c-2ea83d5f6b5d

Report Overview

Submitted URL
orebu-cloud-3bde.lwvemrlaensi.workers.dev/d3114992-c4fa-4319-b85c-2ea83d5f6b5d
IP
104.21.47.54
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-18 05:52:27
Access
public
Website Title
blob:https://orebu-cloud-3bde.lwvemrlaensi.workers.dev/79c95011-2909-42e9-bbde-98a290b5e376
Final URL
orebu-cloud-3bde.lwvemrlaensi.workers.dev/79c95011-2909-42e9-bbde-98a290b5e376
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
orebu-cloud-3bde.lwvemrlaensi.workers.dev	unknown	2019-02-08	2023-09-16	2024-04-09	1.1 kB	2.7 MB	172.67.170.96
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-17	435 B	31 kB	151.101.2.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-19	medium	orebu-cloud-3bde.lwvemrlaensi.workers.dev/	Office365
2024-04-17	medium	orebu-cloud-3bde.lwvemrlaensi.workers.dev/d3114992-c4fa-4319-b85c-2ea83d5f6b5d	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-11-18	medium	orebu-cloud-3bde.lwvemrlaensi.workers.dev/favicon.ico	Adobe
2023-11-18	medium	orebu-cloud-3bde.lwvemrlaensi.workers.dev/d3114992-c4fa-4319-b85c-2ea83d5f6b5d	Adobe

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (12)

	URL	Size	First Seen	Last Seen
	unknown	34 B	2023-04-11	2024-05-01
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-01 02:44:54 Times Seen75771 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	orebu-cloud-3bde.lwvemrlaensi.workers.dev/79c95011-2909-42e9-bbde-98a290b5e376	1.7 MB	2023-11-18	2024-04-27
Pretty URL orebu-cloud-3bde.lwvemrlaensi.workers.dev/79c95011-2909-42e9-bbde-98a290b5e376 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-18 14:34:54 Last Seen2024-04-27 07:39:41 Times Seen234 Hash a7748ff5891636f0dae18fcb37be69b4 e51d02d77fe4b614c93288325518be45e176bc5d c9d10f107343d1bad44817a43f6022b90f677650824c04bb0a95521e3c643d4f Loading...

	unknown	1.4 MB	2023-11-18	2024-04-27
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-18 14:34:54 Last Seen2024-04-27 07:39:41 Times Seen234 Hash bc647ccd35074501b3d629c2ed7f25d4 3c2bfd0b6a7ba5e55de8bdd85ddb0131ab5942fc 524d667b522d4e88e7ec0fe7eb445c2a12f1080735c6423c86b0492cc2c22464 Loading...

	unknown	141 kB	2023-05-13	2024-04-30
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-13 20:14:50 Last Seen2024-04-30 20:15:00 Times Seen4523 Hash 0280dda4590da433693ba3c1a2ebfeff cd2a9d01bc2076db50060e216009939a637a78c4 64a86ac78a3f27afd28930b94279340750a5a5ae1e78f44648dc7ea0a1386295 Loading...

	unknown	1.3 MB	2023-11-18	2024-04-27
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-18 14:34:53 Last Seen2024-04-27 07:39:41 Times Seen234 Hash a776fd02aa57a5dde497d160d3cfca41 f307550d0959d952fe50792ec3cae1ec26cb3510 12799a1aed714d81dbb4b15271060e73621486a03fe91939a4f10da1401c5bbe Loading...

	unknown	1.7 MB	2023-11-18	2024-04-27
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-18 14:34:54 Last Seen2024-04-27 07:39:42 Times Seen234 Hash 2bdeece5b66e516f4230d412c45f89f9 c3f365422b51db23540a805853498d3bd58058f4 d608fb2e97fc15c90e650354ee828b3ffd4fb5c6b8b881a41b2de00d4e5125a7 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 248a57aff5adddf6bb4ba44869fd209d	1.4 MB	2023-11-18	2024-04-27
Pretty Observations First Seen2023-11-18 14:34:54 Last Seen2024-04-27 07:39:42 Times Seen234 Hash 248a57aff5adddf6bb4ba44869fd209d 1f5b225311f92ee29ecaa30e4872dfdf98210f2f 185c9d27f1b9bca388a4635013164f35c7082b2d5775be21ee27109247b79672 Loading...

	#2 Eval - ff806f1df01f54bafc6b333f535b141c	1.5 MB	2023-11-18	2024-04-27
Pretty Observations First Seen2023-11-18 14:34:54 Last Seen2024-04-27 07:39:42 Times Seen226 Hash ff806f1df01f54bafc6b333f535b141c 89acdc774b994d660f04ecee35a666920ce841ca 47392c155b653558567e773b8406bb321429f0586218dadb9bc724d4d0a51e5d Loading...

		Size	First Seen	Last Seen
	#1 Write - 425837067a9c363546654ae1de4f48ee	1.3 MB	2023-11-18	2024-04-27
Pretty Observations First Seen2023-11-18 14:34:54 Last Seen2024-04-27 07:39:42 Times Seen234 Hash 425837067a9c363546654ae1de4f48ee f95e1881e65b41f52cd459435b002f2875ab395a 18e545ee1ac8fa8f70c009534ac5c1ffc0490d13f8848736f1af73d624d77a45 Loading...

	#2 Write - d801fac40467502cbb70448a4ea4bbb5	1.4 MB	2023-11-18	2024-04-27
Pretty Observations First Seen2023-11-18 14:34:55 Last Seen2024-04-27 07:39:42 Times Seen234 Hash d801fac40467502cbb70448a4ea4bbb5 d39ed0e015f61069ab408f9b463a924ae4798bf5 f9e9911b830eb901771d2970244c5d56e658fb7ebbc13a0f4bd16d4f13546530 Loading...

	#3 Write - e905192ffde25f4a422cd9fd2f66a0eb	293 kB	2023-08-17	2024-04-30
Pretty Observations First Seen2023-08-17 11:32:18 Last Seen2024-04-30 08:03:54 Times Seen3158 Hash e905192ffde25f4a422cd9fd2f66a0eb 11baaac0302e49d88b21935e2672015bccde7cd1 390280e7bdaa350a888e72897212a8f6336201ba2ac7646fa320b56b47c05b96 Loading...

	#4 Write - ec3ad316ec6b7d782e547a10174b2ba1	1.7 MB	2023-11-18	2024-04-27
Pretty Observations First Seen2023-11-18 14:34:55 Last Seen2024-04-27 07:39:42 Times Seen223 Hash ec3ad316ec6b7d782e547a10174b2ba1 b170ffeebd54cb117aad9eb057e607acc22ea6dd fdb7161570177457841307701fb3088c25b01fc80f2a1388d1c73e6c63b4ccfe Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://orebu-cloud-3bde.lwvemrlaensi.workers.dev/d3114992-c4fa-4319-b85c-2ea83d5f6b5d
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://orebu-cloud-3bde.lwvemrlaensi.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 18 Apr 2024 05:51:58 GMT
age: 5338017
x-served-by: cache-lga21965-LGA, cache-hel1410026-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 4278
x-timer: S1713419519.825281,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

orebu-cloud-3bde.lwvemrlaensi.workers.dev/favicon.ico

172.67.170.96

200 OK

454 kB

URL GET HTTP/3
orebu-cloud-3bde.lwvemrlaensi.workers.dev/favicon.ico
IP
172.67.170.96:443
ASN
#13335 CLOUDFLARENET

Requested by
https://orebu-cloud-3bde.lwvemrlaensi.workers.dev/d3114992-c4fa-4319-b85c-2ea83d5f6b5d
Certificate
IssuerGoogle Trust Services LLC
Subjectlwvemrlaensi.workers.dev
Fingerprint9B:84:73:C1:C5:91:E7:6D:AB:82:D6:91:D0:CB:F6:C7:D9:7C:62:A6
ValidityMon, 11 Mar 2024 10:26:42 GMT - Sun, 09 Jun 2024 10:26:41 GMT

File type
data
Size
454 kB (454147 bytes)
Hash
68445cb40ab6f18a69b005d8a0734d17
5601b668d28b0540233b0dd7b60ac6daf3896f20
17b659e8f8bc9c12474d3525031217f7318d461d9bd8ff8907affbd1f0b927c0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: orebu-cloud-3bde.lwvemrlaensi.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://orebu-cloud-3bde.lwvemrlaensi.workers.dev/d3114992-c4fa-4319-b85c-2ea83d5f6b5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Thu, 18 Apr 2024 05:51:59 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Hv94IryH%2BKIQwyDHKy9ln0tYMufwmLtMW4DtYAgnVvZtFla9D3RTTaRpp8DuoCT3%2FwKt011UXPlRGwDf4qIU%2F25qAhZqjc2x7g1pNdrQcz0JFndssH7FIwryKLag%2BBh%2FfKcquZZG9lQqjzCbDtGdVmYWvmjvZyulj0SlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876262d9feeb5696-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

orebu-cloud-3bde.lwvemrlaensi.workers.dev/d3114992-c4fa-4319-b85c-2ea83d5f6b5d

172.67.170.96

200 OK

2.3 MB

URL User Request GET HTTP/2
orebu-cloud-3bde.lwvemrlaensi.workers.dev/d3114992-c4fa-4319-b85c-2ea83d5f6b5d
IP
172.67.170.96:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectlwvemrlaensi.workers.dev
Fingerprint9B:84:73:C1:C5:91:E7:6D:AB:82:D6:91:D0:CB:F6:C7:D9:7C:62:A6
ValidityMon, 11 Mar 2024 10:26:42 GMT - Sun, 09 Jun 2024 10:26:41 GMT

File type

Size
2.3 MB (2258978 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /d3114992-c4fa-4319-b85c-2ea83d5f6b5d HTTP/1.1
Host: orebu-cloud-3bde.lwvemrlaensi.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 18 Apr 2024 05:51:58 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i3SOKjRtVYHbhm21zpDzAE2eLE4G5p2%2FluwiLtOt1BEARBkh5EoCDcylIVAFAwSIsWuC1pf3xIR0cyzzQ07LG%2BhOXO0B%2BuNA0UFQCDyZdV3eXrY3dLKroDkJCwzfEs393tfpD6gmsnHUImT0Zqyl4zkQ38JH3Ng0wamRjg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 876262d62f62b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (12)

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate