Report - clouds-cake-4525.teairncakli.workers.dev/004aae84-9731-427e-9a49-fe12ee4e9644

Report Overview

Submitted URL
clouds-cake-4525.teairncakli.workers.dev/004aae84-9731-427e-9a49-fe12ee4e9644
IP
104.21.0.152
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-20 05:36:13
Access
public
Website Title
blob:https://clouds-cake-4525.teairncakli.workers.dev/e16f9eb9-8162-48e0-894c-84e5b11aebf7
Final URL
clouds-cake-4525.teairncakli.workers.dev/e16f9eb9-8162-48e0-894c-84e5b11aebf7
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-19	434 B	31 kB	151.101.130.137
clouds-cake-4525.teairncakli.workers.dev	unknown	2019-02-08	2023-09-01	2024-04-16	1.0 kB	3.9 MB	104.21.0.152

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-20 05:35:44	low	Client IP	104.21.0.152	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	clouds-cake-4525.teairncakli.workers.dev/004aae84-9731-427e-9a49-fe12ee4e9644	Office365
2024-04-08	medium	clouds-cake-4525.teairncakli.workers.dev/	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-11-12	medium	clouds-cake-4525.teairncakli.workers.dev/004aae84-9731-427e-9a49-fe12ee4e9644	Other
2023-11-12	medium	clouds-cake-4525.teairncakli.workers.dev/favicon.ico	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (15)

	URL	Size	First Seen	Last Seen
	unknown	1.4 MB	2023-11-10	2024-05-02
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-10 01:37:36 Last Seen2024-05-02 18:33:02 Times Seen307 Hash 25e3e287c66bd1ab9b84b9c272eed9e3 ff54e416c1ef06b22caa417e7646ca3d9a499a13 dc07e3042f5da640980137e85711e7eae1568d56bd31d38d250f5df09a7b34b1 Loading...

	unknown	1.2 MB	2023-11-10	2024-05-02
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-10 01:37:36 Last Seen2024-05-02 18:33:02 Times Seen306 Hash 2e9a28aff7b58c1cf987997b50af4dc4 b8739a58e2641d06a5e2537376d6064c38f42793 6b36184b614cad4a37ae4e327cd8892305974adba5aa0520302645641cfa362c Loading...

	clouds-cake-4525.teairncakli.workers.dev/e16f9eb9-8162-48e0-894c-84e5b11aebf7	1.6 MB	2023-11-10	2024-05-02
Pretty URL clouds-cake-4525.teairncakli.workers.dev/e16f9eb9-8162-48e0-894c-84e5b11aebf7 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-10 01:37:37 Last Seen2024-05-02 18:33:02 Times Seen307 Hash 57c9c454e1379511664ce58b299d8a6f 30ab585f13fcb2488d767597b5933313bad3867f 1bfcef977632c3e6579844d8c28640176e1434d2e0a0f03194c2a428314fe7a5 Loading...

	unknown	1.6 MB	2023-11-10	2024-05-02
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-10 01:37:37 Last Seen2024-05-02 18:33:02 Times Seen306 Hash 26ffed1a68c73a13cda8f486e42cded0 784dc7726e44d484d2e3cad47d08a2e282c23a9e b73fc62e23773f0130985dbfd8c019688b378af83cfd7238fcef0180008d3a4a Loading...

	unknown	1.3 MB	2023-11-10	2024-05-02
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-10 01:37:37 Last Seen2024-05-02 18:33:02 Times Seen307 Hash 7a8df9b68780b3f868750f9ec8c9f8c0 3091e74709e5e02f50ec311aa69db23874dda10f f6478c3abb0423ec82234354b89f1736f1a625916abd32fe7ec1d952163f3957 Loading...

	unknown	141 kB	2023-05-13	2024-05-02
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-13 20:14:50 Last Seen2024-05-02 18:33:02 Times Seen4524 Hash 0280dda4590da433693ba3c1a2ebfeff cd2a9d01bc2076db50060e216009939a637a78c4 64a86ac78a3f27afd28930b94279340750a5a5ae1e78f44648dc7ea0a1386295 Loading...

	unknown	34 B	2023-04-11	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-03 11:24:09 Times Seen76000 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 9f0c0ffb5fc513720175f23b1856c8d4	1.3 MB	2023-11-10	2024-05-02
Pretty Observations First Seen2023-11-10 01:37:37 Last Seen2024-05-02 18:33:02 Times Seen307 Hash 9f0c0ffb5fc513720175f23b1856c8d4 226163a27e4a495c58b78903c0ce0b2dc37d10e1 f8b07890760bed50fefc7dbe290dfcd347fd0532abe64f91d405dc647d84cc96 Loading...

	#2 Eval - 6d86de4988f73a80fa74db43e01819d8	1.4 MB	2023-11-10	2024-05-02
Pretty Observations First Seen2023-11-10 01:37:37 Last Seen2024-05-02 18:33:02 Times Seen302 Hash 6d86de4988f73a80fa74db43e01819d8 e64afc3a5b48752f3c3ba7b2fd2719baff3be3b7 788a33a9a32cdb007d4faca12c8dd74b8bb17cf07533fb08acf0285fd3aa7a02 Loading...

	#3 Eval - b1354468d038648ab1e88ba359676b58	1.3 MB	2023-11-10	2024-05-02
Pretty Observations First Seen2023-11-10 01:37:37 Last Seen2024-05-02 18:33:02 Times Seen307 Hash b1354468d038648ab1e88ba359676b58 11d1627d669da316677654e684d51dbd0c0bf050 5687ce0a82284ad2118c27cfc8f4bcf3d7245a025edfd1936e948e74517edfda Loading...

		Size	First Seen	Last Seen
	#1 Write - 7dc211040cb00ca9d525da0c8b8a0604	326 kB	2023-10-25	2024-05-02
Pretty Observations First Seen2023-10-25 02:50:20 Last Seen2024-05-02 18:33:03 Times Seen2293 Hash 7dc211040cb00ca9d525da0c8b8a0604 bae52f7578c072d68a851e018022ded768c4bd62 25f82a7791227d0cd95cdce11f3c1c5f25c5ddb8b16e09433ebbdd7168520d0f Loading...

	#2 Write - d8b7f58393b44aab63e8b7705ee9a25a	1.6 MB	2023-11-10	2024-05-02
Pretty Observations First Seen2023-11-10 01:37:38 Last Seen2024-05-02 18:33:02 Times Seen300 Hash d8b7f58393b44aab63e8b7705ee9a25a 8aff964da8928c97a74f97ce095608137b9fba91 bb32fb68c0d4ed0c1d13caa48da41f0a6a6d9e33c056a1608d8cf363508bdfd7 Loading...

	#3 Write - f25128f690ed16aa062d377e7df17288	1.4 MB	2023-11-10	2024-05-02
Pretty Observations First Seen2023-11-10 01:37:38 Last Seen2024-05-02 18:33:02 Times Seen307 Hash f25128f690ed16aa062d377e7df17288 e6b0232a66f2cb20d973cbec0b516ea36f63c44a a2cb2a71fb56f4537f2b362b8340155be7c3c900674de84e8a2905f0180cd6ca Loading...

	#4 Write - a53c8020c15f65fe2d3401485eb3bada	1.2 MB	2023-11-10	2024-05-02
Pretty Observations First Seen2023-11-10 01:37:38 Last Seen2024-05-02 18:33:02 Times Seen307 Hash a53c8020c15f65fe2d3401485eb3bada eb87f060fa1656354fc0de2471580301c75e9c71 5f5f879268b272763fabda368fa75e35dce32c566893f34b293b2b386a17f28f Loading...

	#5 Write - c3adb24587e1687f9fa2dbef27f8f319	1.3 MB	2023-11-10	2024-05-02
Pretty Observations First Seen2023-11-10 01:37:38 Last Seen2024-05-02 18:33:02 Times Seen307 Hash c3adb24587e1687f9fa2dbef27f8f319 8fa255021ecf4bc7ad678bb2ffe73522c2c3ec48 86ed67ac190697d7cf2545c78db53a5cfc298493135844b06fb944f79133d5d8 Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.130.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://clouds-cake-4525.teairncakli.workers.dev/004aae84-9731-427e-9a49-fe12ee4e9644
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clouds-cake-4525.teairncakli.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 20 Apr 2024 05:35:44 GMT
age: 5509843
x-served-by: cache-lga21965-LGA, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 147031
x-timer: S1713591345.744068,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

clouds-cake-4525.teairncakli.workers.dev/004aae84-9731-427e-9a49-fe12ee4e9644

104.21.0.152

200 OK

2.2 MB

URL User Request GET HTTP/2
clouds-cake-4525.teairncakli.workers.dev/004aae84-9731-427e-9a49-fe12ee4e9644
IP
104.21.0.152:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectteairncakli.workers.dev
Fingerprint22:BD:9A:A9:40:C9:7F:4F:84:F0:18:D4:CF:D3:99:28:95:66:01:F5
ValiditySun, 25 Feb 2024 14:08:02 GMT - Sat, 25 May 2024 14:08:01 GMT

File type

Size
2.2 MB (2161324 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /004aae84-9731-427e-9a49-fe12ee4e9644 HTTP/1.1
Host: clouds-cake-4525.teairncakli.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 05:35:44 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q3ajCNrr1%2Brri%2BJ%2B9wMTkBmVt12G4Wza9zj7juYH6NFuXZi%2FD97wQKpEuebNakEt24W5o6gHEtvD%2FZv8nTRTDM8RFapwfo7%2B%2BO9XQogd7Sil0DPw2mbvroT%2FHH8n0eo9e7KFPxErr5%2BnaBJ9oGblUJuCEWpde4U%2FPhpM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772c5ceabd656ca-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

clouds-cake-4525.teairncakli.workers.dev/favicon.ico

104.21.0.152

200 OK

1.8 MB

URL GET HTTP/3
clouds-cake-4525.teairncakli.workers.dev/favicon.ico
IP
104.21.0.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://clouds-cake-4525.teairncakli.workers.dev/004aae84-9731-427e-9a49-fe12ee4e9644
Certificate
IssuerGoogle Trust Services LLC
Subjectteairncakli.workers.dev
Fingerprint22:BD:9A:A9:40:C9:7F:4F:84:F0:18:D4:CF:D3:99:28:95:66:01:F5
ValiditySun, 25 Feb 2024 14:08:02 GMT - Sat, 25 May 2024 14:08:01 GMT

File type

Size
1.8 MB (1769293 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: clouds-cake-4525.teairncakli.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clouds-cake-4525.teairncakli.workers.dev/004aae84-9731-427e-9a49-fe12ee4e9644
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 05:35:44 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7K%2FSC9rlcf%2F8yzHKQPhOe7QjXg3J6Dxiv9GuVLboTnknswJx%2BtTbENyzBXLSLoa4CIPHGzXkmRRi15mM7oUvn5sGg5XqIoS6mWrrAMIoUtfGbpr6WKJiE1q%2B2v3OkACJ%2Fx6CHVUlxlD1yNCQ61Bsc6kUuDvbBv5q7QbI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772c5d2196f5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type