Report - crdoc-term-8097.kasrhienddnhasae.workers.dev/2785340b-a63e-45c1-9547-9df0e94b36c4

Report Overview

Submitted URL
crdoc-term-8097.kasrhienddnhasae.workers.dev/2785340b-a63e-45c1-9547-9df0e94b36c4
IP
172.67.222.39
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-20 06:00:31
Access
public
Website Title
blob:https://crdoc-term-8097.kasrhienddnhasae.workers.dev/d221ad72-86b0-4a46-9a0a-5497ae7194b9
Final URL
crdoc-term-8097.kasrhienddnhasae.workers.dev/d221ad72-86b0-4a46-9a0a-5497ae7194b9
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
crdoc-term-8097.kasrhienddnhasae.workers.dev	unknown	2019-02-08	2023-09-05	2024-04-17	1.1 kB	4.8 MB	104.21.62.89
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-19	438 B	31 kB	151.101.130.137

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-20 06:00:02	low	Client IP	104.21.62.89	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	crdoc-term-8097.kasrhienddnhasae.workers.dev/	Office365
2024-04-19	medium	crdoc-term-8097.kasrhienddnhasae.workers.dev/2785340b-a63e-45c1-9547-9df0e94b36c4	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (15)

	URL	Size	First Seen	Last Seen
	unknown	1.9 MB	2023-11-09	2024-04-29
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-09 02:17:57 Last Seen2024-04-29 07:46:42 Times Seen321 Hash 12713d0dfd5b945af0a04741daf9480d d89e5539b41f180bc2f7880e8baa3097af00a611 35bbf148fc6ebdd4f487ba9db4bc6253e64f91c2619107da92b3a82ea599ae30 Loading...

	unknown	141 kB	2023-05-13	2024-05-02
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-13 20:14:50 Last Seen2024-05-02 18:33:02 Times Seen4524 Hash 0280dda4590da433693ba3c1a2ebfeff cd2a9d01bc2076db50060e216009939a637a78c4 64a86ac78a3f27afd28930b94279340750a5a5ae1e78f44648dc7ea0a1386295 Loading...

	unknown	34 B	2023-04-11	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-03 13:33:49 Times Seen76003 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	unknown	1.3 MB	2023-11-09	2024-04-29
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-09 02:17:57 Last Seen2024-04-29 07:46:42 Times Seen321 Hash 4c69f349f647f0e43ba78967431636cd c264f42f57d87ffb0b1f5ab58ee8cc1c40c76857 d93192da653a7d483b8259e62c763651c24ae7f38db27b3edc33323593992ccf Loading...

	crdoc-term-8097.kasrhienddnhasae.workers.dev/d221ad72-86b0-4a46-9a0a-5497ae7194b9	1.9 MB	2023-11-09	2024-04-29
Pretty URL crdoc-term-8097.kasrhienddnhasae.workers.dev/d221ad72-86b0-4a46-9a0a-5497ae7194b9 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-09 02:17:57 Last Seen2024-04-29 07:46:42 Times Seen321 Hash 60749942d3c5393287ecaf6998d17c2a 483ec604dd13ba358d42e5ee8f71f5e951bdca61 ce4d39df9413d58a61519f052c56288be7829b541dc6f8cd8ccdc68fa7c73af6 Loading...

	unknown	1.5 MB	2023-11-09	2024-04-29
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-09 02:17:56 Last Seen2024-04-29 07:46:42 Times Seen321 Hash 7be4e6d8c04863a435f82fdf01733493 b4597ac03bfef288c7c6309c8b0fc5f412948bf9 3cfe32a91ee6eac07ea17bc782b5f777197ce38cd2595e5f3770d35a26a8e449 Loading...

	unknown	1.3 MB	2023-11-09	2024-04-29
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-09 02:17:56 Last Seen2024-04-29 07:46:42 Times Seen320 Hash d9d0ee8e11369949ef1ccc345206eedf 0202300fbc8bcb0b8dec3247c8780c2867786c90 ea8e1c062b8f26d1c9c9480bcd835826923b6555d960b06c56aad5f7ed25d065 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 5dbfff05779e16b21e4dc550b3063e13	1.3 MB	2023-11-09	2024-04-29
Pretty Observations First Seen2023-11-09 02:17:57 Last Seen2024-04-29 07:46:42 Times Seen321 Hash 5dbfff05779e16b21e4dc550b3063e13 8bba1771fc5d53dac21c1ad408f693ec677399cc 2c029e91586c8143399ff750c69f5f694257760c91513db7bdaa1166b00ca7df Loading...

	#2 Eval - 520e70a7bd80b97bfe224fa1729327fb	1.6 MB	2023-11-09	2024-04-29
Pretty Observations First Seen2023-11-09 02:17:57 Last Seen2024-04-29 07:46:42 Times Seen316 Hash 520e70a7bd80b97bfe224fa1729327fb 90f7d6b1b969a2f45bc57bf0ce8bcf484bbf6fd1 ccb44884bf9190a581f1ec6ecda8af229f42630dc5f53b80209db0de8021ab29 Loading...

	#3 Eval - 817eaa501f92d828251ab6dc6778ac2e	1.4 MB	2023-11-09	2024-04-29
Pretty Observations First Seen2023-11-09 02:17:57 Last Seen2024-04-29 07:46:43 Times Seen321 Hash 817eaa501f92d828251ab6dc6778ac2e 4ef4240f9820b836e909f274ba3cb6f778ec879b bbdcd78d5c62582486c22ce857db4628fb696098e6a6e89d4ecbb5d866af9084 Loading...

		Size	First Seen	Last Seen
	#1 Write - 5fad7189e4f7692df940dcc62e8c9f0a	1.3 MB	2023-11-09	2024-04-29
Pretty Observations First Seen2023-11-09 02:17:58 Last Seen2024-04-29 07:46:43 Times Seen321 Hash 5fad7189e4f7692df940dcc62e8c9f0a 7880e6880a141c847f3201005207bdca3f482ce0 db4a6f368fc426df93f94af5e2d39011e37596cf80c94e6baeeff9548c360704 Loading...

	#2 Write - 7dc211040cb00ca9d525da0c8b8a0604	326 kB	2023-10-25	2024-05-02
Pretty Observations First Seen2023-10-25 02:50:20 Last Seen2024-05-02 18:33:03 Times Seen2293 Hash 7dc211040cb00ca9d525da0c8b8a0604 bae52f7578c072d68a851e018022ded768c4bd62 25f82a7791227d0cd95cdce11f3c1c5f25c5ddb8b16e09433ebbdd7168520d0f Loading...

	#3 Write - ac03bc70069132173c33f86337531930	1.9 MB	2023-11-09	2024-04-29
Pretty Observations First Seen2023-11-09 02:17:58 Last Seen2024-04-29 07:46:43 Times Seen316 Hash ac03bc70069132173c33f86337531930 f2ec6203e144fca1e27eb4a3f766b68b2e65abeb 3baaffb694f5bd6feaa2768b8c359cc5b69e1f248c9ebd512929746fed221955 Loading...

	#4 Write - 8d5d5f0313f781d08be5179a9d186490	1.5 MB	2023-11-09	2024-04-29
Pretty Observations First Seen2023-11-09 02:17:58 Last Seen2024-04-29 07:46:43 Times Seen320 Hash 8d5d5f0313f781d08be5179a9d186490 4e210056c2b83546d5a8b317a49cba04cc5e54f7 16e95e986aee28c942fd385ba3734c7809407cb442b6f73c0bd1d97b41c27f7e Loading...

	#5 Write - 4858887016bbf48dfb28c8f4bf5d476a	1.3 MB	2023-11-09	2024-04-29
Pretty Observations First Seen2023-11-09 02:17:58 Last Seen2024-04-29 07:46:43 Times Seen321 Hash 4858887016bbf48dfb28c8f4bf5d476a c4add306aac0690cffa5cabc8cb33f4af3632600 3b28a3303659119753aa380b9d43c1f555c4bc5604add263c7df4c9967004b7d Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.130.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://crdoc-term-8097.kasrhienddnhasae.workers.dev/2785340b-a63e-45c1-9547-9df0e94b36c4
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://crdoc-term-8097.kasrhienddnhasae.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 20 Apr 2024 06:00:02 GMT
age: 5511301
x-served-by: cache-lga21965-LGA, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 386020
x-timer: S1713592803.608108,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

crdoc-term-8097.kasrhienddnhasae.workers.dev/favicon.ico

104.21.62.89

200 OK

2.3 MB

URL GET HTTP/3
crdoc-term-8097.kasrhienddnhasae.workers.dev/favicon.ico
IP
104.21.62.89:443
ASN
#13335 CLOUDFLARENET

Requested by
https://crdoc-term-8097.kasrhienddnhasae.workers.dev/2785340b-a63e-45c1-9547-9df0e94b36c4
Certificate
IssuerGoogle Trust Services LLC
Subjectkasrhienddnhasae.workers.dev
FingerprintC2:69:1B:23:47:DC:AC:97:3C:1B:1A:02:98:60:58:D3:1E:9E:5E:DD
ValidityFri, 01 Mar 2024 03:27:44 GMT - Thu, 30 May 2024 03:27:43 GMT

File type

Size
2.3 MB (2326349 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: crdoc-term-8097.kasrhienddnhasae.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://crdoc-term-8097.kasrhienddnhasae.workers.dev/2785340b-a63e-45c1-9547-9df0e94b36c4
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 06:00:02 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Byz%2BpD59Wtn%2FOZL3RJVnY6%2BsA%2BN5Oh8w1vl5hSlNUJiYkMWYlilYvGPx687HoSKU%2FpFdxmlnC4wAEg9zFsOCwheiFu0z%2FVltbG4%2BLjcDYvCQzk%2Bcgqzih7mhY9m0VYBFyIRMGPETe7897Op5aAPGew6yjI12m1C%2Fd42gX1d8KQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772e969dc7f56b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

crdoc-term-8097.kasrhienddnhasae.workers.dev/2785340b-a63e-45c1-9547-9df0e94b36c4

104.21.62.89

200 OK

2.5 MB

URL User Request GET HTTP/2
crdoc-term-8097.kasrhienddnhasae.workers.dev/2785340b-a63e-45c1-9547-9df0e94b36c4
IP
104.21.62.89:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectkasrhienddnhasae.workers.dev
FingerprintC2:69:1B:23:47:DC:AC:97:3C:1B:1A:02:98:60:58:D3:1E:9E:5E:DD
ValidityFri, 01 Mar 2024 03:27:44 GMT - Thu, 30 May 2024 03:27:43 GMT

File type

Size
2.5 MB (2504872 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /2785340b-a63e-45c1-9547-9df0e94b36c4 HTTP/1.1
Host: crdoc-term-8097.kasrhienddnhasae.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 06:00:02 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D1t%2BbPpRdKS55rOt3C5swNydGLTPyV7pYG9YZh2QBotEz6mDDWVnH8yy3ZpuTNeKeGxcabhppTpti3O%2BPVq6UNQezmZp%2BMOTWxIfHi6IeHl1VPe6g9CQHTN84z4ULrXgKEl96CtoipJl0LlDxO2s3O07P0oq50feQC%2FM9%2FCtSA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8772e9661e220b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type