Report - worker-solitary-meadow-3319.huzzypyper2906.workers.dev/

Report Overview

Submitted URL
worker-solitary-meadow-3319.huzzypyper2906.workers.dev/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 03:50:42
Access
public
Website Title
Sharepoint
Final URL
worker-solitary-meadow-3319.huzzypyper2906.workers.dev/
Tags
suspicious
urlquery detections
Suspicious - Suspicious Javascript code

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
worker-solitary-meadow-3319.huzzypyper2906.workers.dev	unknown	unknown	No data	No data	503 B	1.1 MB	188.114.96.1
www.w3schools.com	17487	2000-03-21	2014-02-05	2024-04-25	459 B	5.8 kB	192.229.133.221
logincdn.msauth.net	2330	2018-10-25	2019-04-23	2024-04-24	1.1 kB	2.5 kB	13.107.246.53

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-25	medium	worker-solitary-meadow-3319.huzzypyper2906.workers.dev/	Office365

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	worker-solitary-meadow-3319.huzzypyper2906.workers.dev/	1.1 MB	2024-04-26	2024-04-26
Pretty URL worker-solitary-meadow-3319.huzzypyper2906.workers.dev/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-04-26 05:50:49 Last Seen2024-04-26 05:50:49 Times Seen1 Hash 714a7ee006009c3ff7f4b7575a115e69 2ff263b4c219e778ff3f1cbc134783f55b3d9ce4 ea9fc5ba04bbd919615510ae4a09d0066ee07f199195ff9b1761bf97542bb4ce Loading...

	unknown	1.1 MB	2024-04-26	2024-04-26
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-04-26 05:50:49 Last Seen2024-04-26 05:50:49 Times Seen1 Hash e5beeaefd52a858d8aa5d7e4544e70c0 9ed383a07af90f2820c1ddd980864c73d5cb9483 3e8ca3e12c32bf9c1eb83e0d06a5d83a423e9d0a16e194b3f329bab1586a18f9 Loading...

		Size	First Seen	Last Seen
	#1 Write - da53284377a83dae9159ab4e57f6ae75	1.1 MB	2024-04-26	2024-04-26
Pretty Observations First Seen2024-04-26 05:50:49 Last Seen2024-04-26 05:50:49 Times Seen1 Hash da53284377a83dae9159ab4e57f6ae75 30f21ae2a8a0727d4ad5327a59fb50a331c7fbae 06f921b994f1dfb2a1582b082272cf6b86697ed481a04eeb2c665264a6593dc0 Loading...

HTTP Transactions (4)

URL IP Response Size

www.w3schools.com/w3css/4/w3.css

192.229.133.221

200 OK

5.3 kB

URL GET HTTP/2
www.w3schools.com/w3css/4/w3.css
IP
192.229.133.221:443
ASN
#15133 EDGECAST

Requested by
https://worker-solitary-meadow-3319.huzzypyper2906.workers.dev/
Certificate
IssuerDigiCert Inc
Subject*.w3schools.com
Fingerprint20:AF:FF:E1:FC:DB:58:C8:05:B7:D2:97:1F:8F:A1:C6:AD:ED:59:3A
ValidityWed, 03 Apr 2024 00:00:00 GMT - Sun, 04 May 2025 23:59:59 GMT

File type
Unicode text, UTF-8 (with BOM) text
Size
5.3 kB (5256 bytes)
Hash
ba0537e9574725096af97c27d7e54f76
bd46b47d74d344f435b5805114559d45979762d5
4a7611bc677873a0f87fe21727bc3a2a43f57a5ded3b10ce33a0f371a2e6030f

HTTP Headers

GET /w3css/4/w3.css HTTP/1.1
Host: www.w3schools.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-solitary-meadow-3319.huzzypyper2906.workers.dev/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
age: 5131
cache-control: public,max-age=14400,public
content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
content-type: text/css
date: Fri, 26 Apr 2024 03:50:16 GMT
etag: "0451b5ef97da1:0+gzip"
last-modified: Thu, 25 Apr 2024 12:52:02 GMT
server: ECS (ska/F716)
vary: Accept-Encoding
x-cache: HIT
x-content-security-policy: frame-ancestors 'self' https://mycourses.w3schools.com;
x-powered-by: ASP.NET
content-length: 5256
X-Firefox-Spdy: h2

logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg

13.107.246.53

200 OK

276 B

URL GET HTTP/2
logincdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
IP
13.107.246.53:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://worker-solitary-meadow-3319.huzzypyper2906.workers.dev/
Certificate
IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
Fingerprint15:1B:3E:26:F4:4A:EE:1C:C2:40:74:BB:BD:AE:20:E4:35:B0:40:40
ValidityWed, 17 Jan 2024 06:03:21 GMT - Sat, 11 Jan 2025 06:03:21 GMT

File type
SVG Scalable Vector Graphics image
Size
276 B (276 bytes)
Hash
a9cc2824ef3517b6c4160dcf8ff7d410
8db9aebad84ca6e4225bfdd2458ff3821cc4f064
34f9db946e89f031a80dfca7b16b2b686469c9886441261ae70a44da1dfa2d58

HTTP Headers

GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-solitary-meadow-3319.huzzypyper2906.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 03:50:16 GMT
content-type: image/svg+xml
content-length: 276
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 22 Jan 2020 00:38:00 GMT
etag: 0x8D79ED35591CF44
x-ms-request-id: d42dd95b-201e-0074-14bf-94bb96000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240426T035016Z-16c4f695cc5rfvs2nkzu5z9xsc0000000510000000000u9s
x-fd-int-roxy-purgeid: 67912908
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

logincdn.msauth.net/shared/1.0/content/images/documentation_bcb4d1dc4eae64f0b2b2538209d8435a.svg

13.107.246.53

200 OK

606 B

URL GET HTTP/2
logincdn.msauth.net/shared/1.0/content/images/documentation_bcb4d1dc4eae64f0b2b2538209d8435a.svg
IP
13.107.246.53:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://worker-solitary-meadow-3319.huzzypyper2906.workers.dev/
Certificate
IssuerMicrosoft Corporation
Subjectidentitycdn.msauth.net
Fingerprint15:1B:3E:26:F4:4A:EE:1C:C2:40:74:BB:BD:AE:20:E4:35:B0:40:40
ValidityWed, 17 Jan 2024 06:03:21 GMT - Sat, 11 Jan 2025 06:03:21 GMT

File type
SVG Scalable Vector Graphics image
Size
606 B (606 bytes)
Hash
bcb4d1dc4eae64f0b2b2538209d8435a
4f10568bc1b70bc98d5297b85812c33b3e636766
a76c08e9cdc3bb87bfb57627ad8f6b46f0e5ef826cc7f046dfbaf25d7b7958ea

HTTP Headers

GET /shared/1.0/content/images/documentation_bcb4d1dc4eae64f0b2b2538209d8435a.svg HTTP/1.1
Host: logincdn.msauth.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-solitary-meadow-3319.huzzypyper2906.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 03:50:16 GMT
content-type: image/svg+xml
content-length: 606
cache-control: public, max-age=31536000
content-encoding: gzip
last-modified: Wed, 22 Jan 2020 00:38:04 GMT
etag: 0x8D79ED3581609DD
x-ms-request-id: aec33f9a-001e-001e-18b9-95f7a1000000
x-ms-version: 2009-09-19
x-ms-lease-status: unlocked
x-ms-blob-type: BlockBlob
access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding
access-control-allow-origin: *
x-azure-ref: 20240426T035016Z-16c4f695cc5rfvs2nkzu5z9xsc0000000510000000000u9r
x-fd-int-roxy-purgeid: 67912908
x-cache-info: L1_T2
x-cache: TCP_HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

worker-solitary-meadow-3319.huzzypyper2906.workers.dev/favicon.ico

188.114.96.1

200 OK

1.1 MB

URL GET HTTP/3
worker-solitary-meadow-3319.huzzypyper2906.workers.dev/favicon.ico
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://worker-solitary-meadow-3319.huzzypyper2906.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjecthuzzypyper2906.workers.dev
FingerprintBB:FD:BA:CC:B4:71:DE:15:34:36:7F:96:58:68:26:60:5F:AF:85:C1
ValiditySun, 10 Mar 2024 14:48:00 GMT - Sat, 08 Jun 2024 14:47:59 GMT

File type

Size
1.1 MB (1148656 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: worker-solitary-meadow-3319.huzzypyper2906.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://worker-solitary-meadow-3319.huzzypyper2906.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Fri, 26 Apr 2024 03:50:16 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sUxepXrJHHe7xd%2B0rYbXmQ4ZbjXkJ%2BtvKPF3sxw0uTUbWhdrbaOetvIyuwsXakqp9ZFRDH7RaCE2c1fglxX9POdNfYWUxl2H7Z5deLRvWlxKJnGKRu6tMKrJISPomWuZLNiVNA%2BX5R%2Fsn0oYln72eqpz4rI2lvM9u4wVpPX9lTddpqdJuDXL0rA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a39b919bd0b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (3)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

HTTP Transactions (4)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

Detections

HTTP Headers