Report - roclo-water-3a14.vhgnowsaroteeenr.workers.dev/1508d153-716b-4adc-97bf-f628e11cf47e

Report Overview

Submitted URL
roclo-water-3a14.vhgnowsaroteeenr.workers.dev/1508d153-716b-4adc-97bf-f628e11cf47e
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-03-28 17:55:17
Access
public
Website Title
blob:https://roclo-water-3a14.vhgnowsaroteeenr.workers.dev/cf14cd76-eb53-44eb-9c84-41adcd37bc19
Final URL
roclo-water-3a14.vhgnowsaroteeenr.workers.dev/cf14cd76-eb53-44eb-9c84-41adcd37bc19
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-03-28	439 B	31 kB	151.101.130.137
roclo-water-3a14.vhgnowsaroteeenr.workers.dev	unknown	2019-02-08	2023-09-02	2024-03-26	1.1 kB	3.9 MB	188.114.97.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-03-10	medium	roclo-water-3a14.vhgnowsaroteeenr.workers.dev/	Office365
2024-03-28	medium	roclo-water-3a14.vhgnowsaroteeenr.workers.dev/1508d153-716b-4adc-97bf-f628e11cf47e	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-11-12	medium	roclo-water-3a14.vhgnowsaroteeenr.workers.dev/favicon.ico	Other
2023-11-11	medium	roclo-water-3a14.vhgnowsaroteeenr.workers.dev/1508d153-716b-4adc-97bf-f628e11cf47e	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (17)

	URL	Size	First Seen	Last Seen
	unknown	141 kB	2023-05-13	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-13 20:14:50 Last Seen2024-04-28 08:14:24 Times Seen4504 Hash 0280dda4590da433693ba3c1a2ebfeff cd2a9d01bc2076db50060e216009939a637a78c4 64a86ac78a3f27afd28930b94279340750a5a5ae1e78f44648dc7ea0a1386295 Loading...

	unknown	1.2 MB	2023-11-08	2024-04-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-08 13:08:57 Last Seen2024-04-08 07:32:54 Times Seen501 Hash 27f2cfff37ada12aafaa783037db8332 65062347a38151ab200bdab2d4df8d82b5ca5d0e 2255c1ef37b6be0b81adbefa99b379bd9d7680a96e0599afe66d13ed4ee04ffd Loading...

	unknown	34 B	2023-04-11	2024-04-28
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-04-28 14:49:09 Times Seen75307 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	roclo-water-3a14.vhgnowsaroteeenr.workers.dev/cf14cd76-eb53-44eb-9c84-41adcd37bc19	1.7 MB	2023-11-08	2024-04-08
Pretty URL roclo-water-3a14.vhgnowsaroteeenr.workers.dev/cf14cd76-eb53-44eb-9c84-41adcd37bc19 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-08 13:08:57 Last Seen2024-04-08 07:32:54 Times Seen499 Hash 256328bf1b284973f5ea4a0f28243600 9b6a31c2af0abe92b63d1d7c86e462dbbf7d6067 5065ef0daa2d335ddce653b7b7601a754857350cff80515c886088cfbaf64f86 Loading...

	unknown	1.2 MB	2023-11-08	2024-04-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-08 13:08:57 Last Seen2024-04-08 07:32:54 Times Seen501 Hash b489f62d863df36cc8e53b5d3f5aed08 83a3c7affda43ff45bbe536ab659047b4f189395 362e8099c569205e5e5befd7b424b62777c3c64d6f626f0517b45e73c5ec0dae Loading...

	unknown	1.3 MB	2023-11-08	2024-04-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-08 13:08:58 Last Seen2024-04-08 07:32:54 Times Seen500 Hash c3eb6e1d68083763104271d50dd990a2 11136311c94f5db0e2e036bc2c408a28a75a1e42 45fd15f942ce65290168ad40c4df287a285b6847e177d218ae5fc04d30efa261 Loading...

	unknown	1.7 MB	2023-11-08	2024-04-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-08 13:08:58 Last Seen2024-04-08 07:32:54 Times Seen501 Hash 6aa6e913549e7b1dcfb6585ecdabbfdc 1aed6c8478e8fd31bc2f97032949758ab8f20fcf 822e60b0a7b9e3aeb5a40e3057eca09bf85ae15c0cdb173c18ae9ab43e5ec46c Loading...

	unknown	1.4 MB	2023-11-08	2024-04-08
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-08 13:08:58 Last Seen2024-04-08 07:32:54 Times Seen501 Hash bd0e95ea3c4daa40c3be5d9beee02055 2870c41c1d31aec4af49c564c8674b4ef8068fa4 93fc573e5a479d2653beb6a82b2b455861c550296ac541c3aa6b171aada73d71 Loading...

		Size	First Seen	Last Seen
	#1 Eval - d45b6fdb0f3ad888649e8b3fae994012	1.2 MB	2023-11-08	2024-04-08
Pretty Observations First Seen2023-11-08 13:08:58 Last Seen2024-04-08 07:32:54 Times Seen501 Hash d45b6fdb0f3ad888649e8b3fae994012 d4232e7cce01835987b3788933399b55ca10b405 c3e8c9fa44f074f8e54b2e7920b4b751187ba5aeca5ad80ac4c152fa3410eecb Loading...

	#2 Eval - 44126432e296f012b2a7f125412b643a	1.4 MB	2023-11-08	2024-04-08
Pretty Observations First Seen2023-11-08 13:08:58 Last Seen2024-04-08 07:32:54 Times Seen499 Hash 44126432e296f012b2a7f125412b643a 7b33dcc234b2e7de80cb0d0d0d1fa95d41c170eb 4d14367ba9225fd73f37704a5f700ed4b60307c8c9551637e6a01f57dd32d7c0 Loading...

	#3 Eval - 95ecb6af773145b9fe5128e6a69addda	1.3 MB	2023-11-08	2024-04-08
Pretty Observations First Seen2023-11-08 13:08:58 Last Seen2024-04-08 07:32:54 Times Seen502 Hash 95ecb6af773145b9fe5128e6a69addda 3fac5500195733a2aa9d39b773e6db6bd78ee00e 580099b996cc42a54ca3130685c2a12ff356e4de68345550eef16790006a9559 Loading...

		Size	First Seen	Last Seen
	#1 Write - 8fb74a338df39d366a2a723c8a4688fc	1.4 MB	2023-11-08	2024-04-08
Pretty Observations First Seen2023-11-08 13:08:59 Last Seen2024-04-08 07:32:54 Times Seen501 Hash 8fb74a338df39d366a2a723c8a4688fc 5d971696a532d59e68710e29c00d4ad0bb39ce82 1c41dc8ba0f1a97a4db9d6cdfbb14ce080042da92f0bfb85cf6d1e9fa8682e07 Loading...

	#2 Write - 13837dbf946ac635fe12e122638241f2	1.4 MB	2023-11-08	2024-04-08
Pretty Observations First Seen2023-11-08 13:08:59 Last Seen2024-04-08 07:32:54 Times Seen502 Hash 13837dbf946ac635fe12e122638241f2 789d7c91fef4bcfc821819c6c9d0ed5a2cc9536e bca47ab931e03350ceee1f90dbfb9d69d0b00446799405a60a680cbfd1e707d2 Loading...

	#3 Write - fa0e4226acce08ac8ad7a9048e526583	1.2 MB	2023-11-08	2024-04-08
Pretty Observations First Seen2023-11-08 13:08:59 Last Seen2024-04-08 07:32:54 Times Seen502 Hash fa0e4226acce08ac8ad7a9048e526583 fa95d0a481b66b44c50e092081c03bc2af7252a4 598ef5928961dd4289eafa2fa4793944ed63d29f4552fe7e023d6fb382735b48 Loading...

	#4 Write - b6f581de4e61aca324bd12eb2a7fdd6d	1.2 MB	2023-11-08	2024-04-08
Pretty Observations First Seen2023-11-08 13:08:59 Last Seen2024-04-08 07:32:54 Times Seen502 Hash b6f581de4e61aca324bd12eb2a7fdd6d 7fa6defd89d861b0e82ae8267ce29019b8d641fd a8ab69ce83e3e554e7cfe31e70e597fa043cc25026b3686d2415596a2c3c093a Loading...

	#5 Write - 7dc211040cb00ca9d525da0c8b8a0604	326 kB	2023-10-25	2024-04-27
Pretty Observations First Seen2023-10-25 02:50:20 Last Seen2024-04-27 07:42:28 Times Seen2286 Hash 7dc211040cb00ca9d525da0c8b8a0604 bae52f7578c072d68a851e018022ded768c4bd62 25f82a7791227d0cd95cdce11f3c1c5f25c5ddb8b16e09433ebbdd7168520d0f Loading...

	#6 Write - 5e0f38936000b1020e5c4fca83869014	1.7 MB	2023-11-08	2024-04-08
Pretty Observations First Seen2023-11-08 13:08:58 Last Seen2024-04-08 07:32:54 Times Seen498 Hash 5e0f38936000b1020e5c4fca83869014 0d6d21ed0ba04dcc78711044746bdbec28dc8d9f 69ac49039c53c1d51071dadab45e376c79e6c7cb52ca8440338fe96125bb7d53 Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.130.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://roclo-water-3a14.vhgnowsaroteeenr.workers.dev/1508d153-716b-4adc-97bf-f628e11cf47e
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roclo-water-3a14.vhgnowsaroteeenr.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 28 Mar 2024 17:54:48 GMT
age: 3566986
x-served-by: cache-lga21965-LGA, cache-hel1410029-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 758992
x-timer: S1711648488.256005,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

roclo-water-3a14.vhgnowsaroteeenr.workers.dev/favicon.ico

188.114.97.1

200 OK

1.6 MB

URL GET HTTP/3
roclo-water-3a14.vhgnowsaroteeenr.workers.dev/favicon.ico
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Requested by
https://roclo-water-3a14.vhgnowsaroteeenr.workers.dev/1508d153-716b-4adc-97bf-f628e11cf47e
Certificate
IssuerGoogle Trust Services LLC
Subjectvhgnowsaroteeenr.workers.dev
FingerprintFD:1E:D6:97:DA:83:E2:9C:ED:AB:73:BC:97:62:84:26:DF:27:76:F2
ValidityMon, 26 Feb 2024 11:40:30 GMT - Sun, 26 May 2024 11:40:29 GMT

File type

Size
1.6 MB (1605453 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: roclo-water-3a14.vhgnowsaroteeenr.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://roclo-water-3a14.vhgnowsaroteeenr.workers.dev/1508d153-716b-4adc-97bf-f628e11cf47e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 28 Mar 2024 17:54:48 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2FV6VCjyEIcMJQ5kd6ZyO4XTn%2FoUQ75t0FOAob6rrsINDXxlV%2FZY1ElV0AgrNoD2wOtsoBEyENo1GqD0QnUcUlm6ZhhFhy%2FDsHfJh78ClFKxN0YIHvxLVtnIdkH24vOGnDnUTQsrKW8t0YlViSxmKj9LYbIDcw85n%2FjJOEhLysY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b97ccd2fa8b4f3-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

roclo-water-3a14.vhgnowsaroteeenr.workers.dev/1508d153-716b-4adc-97bf-f628e11cf47e

188.114.97.1

200 OK

2.3 MB

URL User Request GET HTTP/2
roclo-water-3a14.vhgnowsaroteeenr.workers.dev/1508d153-716b-4adc-97bf-f628e11cf47e
IP
188.114.97.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectvhgnowsaroteeenr.workers.dev
FingerprintFD:1E:D6:97:DA:83:E2:9C:ED:AB:73:BC:97:62:84:26:DF:27:76:F2
ValidityMon, 26 Feb 2024 11:40:30 GMT - Sun, 26 May 2024 11:40:29 GMT

File type

Size
2.3 MB (2267364 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /1508d153-716b-4adc-97bf-f628e11cf47e HTTP/1.1
Host: roclo-water-3a14.vhgnowsaroteeenr.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 28 Mar 2024 17:54:47 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y3KPKglZQJ12WQ7N91G%2Bw01FU4E47Vtmh75EaDYCHfr1rgW2oNasOGSfDyMZCOc5AD1ql6c53qoH69hI18WOHtBxsaRhm9mhQujRvszuxvEccDnMerb%2F1KYargwe%2BbnkyOX8sDYN4OuuKINmO%2FtJS2Ajj60AHzUDwa%2BmHuhaaLw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 86b97cc90e5756a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (17)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)