Report - jundoc-sunset-a630.trumneannmseretan.workers.dev/f370a83a-801c-46ce-90ca-cdab305cf885

Report Overview

Submitted URL
jundoc-sunset-a630.trumneannmseretan.workers.dev/f370a83a-801c-46ce-90ca-cdab305cf885
IP
172.67.180.105
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-16 16:30:13
Access
public
Website Title
blob:https://jundoc-sunset-a630.trumneannmseretan.workers.dev/d908c7f5-c333-4a4b-9de8-b14838fa9d46
Final URL
jundoc-sunset-a630.trumneannmseretan.workers.dev/d908c7f5-c333-4a4b-9de8-b14838fa9d46
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-16	442 B	31 kB	151.101.66.137
jundoc-sunset-a630.trumneannmseretan.workers.dev	unknown	2019-02-08	2023-09-07	2024-04-13	1.1 kB	1.2 MB	172.67.180.105

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	jundoc-sunset-a630.trumneannmseretan.workers.dev/f370a83a-801c-46ce-90ca-cdab305cf885	Office365
2024-04-10	medium	jundoc-sunset-a630.trumneannmseretan.workers.dev/	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-11-04	medium	jundoc-sunset-a630.trumneannmseretan.workers.dev/f370a83a-801c-46ce-90ca-cdab305cf885	Other
2023-11-12	medium	jundoc-sunset-a630.trumneannmseretan.workers.dev/favicon.ico	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	unknown	34 B	2023-04-11	2024-04-29
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-04-29 23:42:52 Times Seen75642 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	unknown	1.2 MB	2023-11-07	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-07 14:34:58 Last Seen2024-04-28 08:14:23 Times Seen311 Hash 9b8621df250e3ba291d5a983458e5672 1915ab82f6be9a2cf33891cdde546402750b7f3d b044a9f9c66d0f5b0c8f8879908609ac0d75c2f973bf38147deefb6d3b0cb6ee Loading...

	unknown	1.2 MB	2023-11-07	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-07 14:34:58 Last Seen2024-04-28 08:14:24 Times Seen311 Hash d13525e976c0c6534463724c42ed6a51 22a2cb8234bad657c0e8c5ead57c46d56cb8b4fd 3a58a907517580a760d5501c54c2b518b258b6bce5b357f838b013b265da06ce Loading...

	unknown	141 kB	2023-05-13	2024-04-29
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-05-13 20:14:50 Last Seen2024-04-29 19:27:45 Times Seen4517 Hash 0280dda4590da433693ba3c1a2ebfeff cd2a9d01bc2076db50060e216009939a637a78c4 64a86ac78a3f27afd28930b94279340750a5a5ae1e78f44648dc7ea0a1386295 Loading...

	jundoc-sunset-a630.trumneannmseretan.workers.dev/d908c7f5-c333-4a4b-9de8-b14838fa9d46	1.8 MB	2023-11-07	2024-04-28
Pretty URL jundoc-sunset-a630.trumneannmseretan.workers.dev/d908c7f5-c333-4a4b-9de8-b14838fa9d46 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-07 14:34:58 Last Seen2024-04-28 08:14:24 Times Seen311 Hash 69b7d0e379e54fb9311d8a69b8a89147 81e070c9883225a553db94a3905af5f276e234ee 7bf3995a79b208f26398d82fbee92562a021f7e37acbde380192ba2317eeb6e0 Loading...

	unknown	1.8 MB	2023-11-07	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-07 14:34:59 Last Seen2024-04-28 08:14:24 Times Seen311 Hash b571f032a882dda21506057b539bf70d fd2b1748207f4875d5af4ef1c99dfc29be6bbacb 28770bac60d728e8b969aa6ae88a09085a0ceec4d1ed2f086e90f3b40b7044ab Loading...

		Size	First Seen	Last Seen
	#1 Eval - 1c2eadfd74cb0f2d284e9bda60e79bdc	1.3 MB	2023-11-07	2024-04-28
Pretty Observations First Seen2023-11-07 14:34:59 Last Seen2024-04-28 08:14:24 Times Seen310 Hash 1c2eadfd74cb0f2d284e9bda60e79bdc 2ea965a0c01269cabe2291311989900cf484bf1f 9fb96faacdb400ff84ddf3804a4b084ce10c97ea944c41e497cfc2a83a4109e5 Loading...

	#2 Eval - b8e5abb90706977a19a180bb3cf52883	1.2 MB	2023-11-07	2024-04-28
Pretty Observations First Seen2023-11-07 14:34:59 Last Seen2024-04-28 08:14:24 Times Seen311 Hash b8e5abb90706977a19a180bb3cf52883 67af13528831871470c7e00a3a73217707c8c18c 0b97bf5c2ad3ce401a5f97fbc06f1452c57ea87bf80a2162fff4e8ebd4f7dd19 Loading...

	#3 Eval - 651e5c952feb80f556b26096a3675ed3	1.4 MB	2023-11-07	2024-04-28
Pretty Observations First Seen2023-11-07 14:34:59 Last Seen2024-04-28 08:14:24 Times Seen307 Hash 651e5c952feb80f556b26096a3675ed3 1310d3f067d6ff32d24b0a12ce5327529ba1fc8e eaf1c6e6d293d07d1a28a51f1c734c2c124b7930c8a6ab84157d4dc32d3aa5be Loading...

		Size	First Seen	Last Seen
	#1 Write - 378d5c44880f73d06f34f0e6c9772d0b	1.8 MB	2023-11-07	2024-04-28
Pretty Observations First Seen2023-11-07 14:34:59 Last Seen2024-04-28 08:14:24 Times Seen309 Hash 378d5c44880f73d06f34f0e6c9772d0b b82818780255f361d37bac4d80ebefda8d822de0 9affb2302abea201b7318282d2f8b031eabc3c3152636b9314f25940161f1741 Loading...

	#2 Write - 4016a920aac46cd9f75bbf23e3189861	1.2 MB	2023-11-07	2024-04-28
Pretty Observations First Seen2023-11-07 14:34:59 Last Seen2024-04-28 08:14:24 Times Seen311 Hash 4016a920aac46cd9f75bbf23e3189861 4f3dd5b6536defb4e5b85c5c6c55cc153575aa2b 6d79e762445f95bca21a1f4b1afc6f29e1c5f70b32e3826d07541d163fc4fd7e Loading...

	#3 Write - cd0553b76e9aaa226519b6d5b5b37eb0	1.2 MB	2023-11-07	2024-04-28
Pretty Observations First Seen2023-11-07 14:34:59 Last Seen2024-04-28 08:14:24 Times Seen311 Hash cd0553b76e9aaa226519b6d5b5b37eb0 96cb43673b3f0216950d5dd72793ddc421364646 fa7749e2dabeecf0f3e1adfddb5959d4778aac7011612538323a61d41f7590a9 Loading...

	#4 Write - 07615dcbdfdaf1ad233ecc3cc3eb6e40	338 kB	2023-11-07	2024-04-28
Pretty Observations First Seen2023-11-07 14:34:59 Last Seen2024-04-28 08:14:24 Times Seen311 Hash 07615dcbdfdaf1ad233ecc3cc3eb6e40 6db55eb55cd7cc2a4f0b7bc2e7f503b645ac7195 a8b0ce9f694d43080d9f22b0544a8df93d900924b09d26a880bdc6273c3148bc Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.66.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.66.137:443
ASN
#54113 FASTLY

Requested by
https://jundoc-sunset-a630.trumneannmseretan.workers.dev/f370a83a-801c-46ce-90ca-cdab305cf885
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jundoc-sunset-a630.trumneannmseretan.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 16 Apr 2024 16:29:45 GMT
age: 5203482
x-served-by: cache-lga21965-LGA, cache-hel1410032-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 377925
x-timer: S1713284985.364936,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

jundoc-sunset-a630.trumneannmseretan.workers.dev/f370a83a-801c-46ce-90ca-cdab305cf885

172.67.180.105

200 OK

829 kB

URL User Request GET HTTP/2
jundoc-sunset-a630.trumneannmseretan.workers.dev/f370a83a-801c-46ce-90ca-cdab305cf885
IP
172.67.180.105:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttrumneannmseretan.workers.dev
FingerprintE5:EC:DF:F1:E8:76:2F:46:A2:D7:AD:2C:BC:0A:EF:E5:46:39:16:38
ValidityThu, 04 Apr 2024 15:02:22 GMT - Wed, 03 Jul 2024 15:02:21 GMT

File type
HTML document, ASCII text, with very long lines (64871)
Size
829 kB (828920 bytes)
Hash
8fb97a80df1f09d068237a102af0e976
7b73b906763c688e3cf545c0e93b5cca549734db
8579646e0cad36170c3e2add585817f0390d7a8c9dcefeead0c166a75ee4b76a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /f370a83a-801c-46ce-90ca-cdab305cf885 HTTP/1.1
Host: jundoc-sunset-a630.trumneannmseretan.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 16:29:45 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LzvrOFH8pDVYxd0YuA3nymFLQ3yfNj8mN30CRv5mKqvj0o5wQRx2cMe%2B9tMAB4e0D%2BS6FLr%2F3gzkuo1X34B01dhtgQndXxbSta5g6cqcrK5%2Bm9%2FQaJclORqHGvxZ8gcY7D2UdeiiDMVVLdlnJ%2BxdTruY1QF5xjAQR8LfArdcrcVy7v8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87558e545f6256cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

jundoc-sunset-a630.trumneannmseretan.workers.dev/favicon.ico

172.67.180.105

200 OK

417 kB

URL GET HTTP/3
jundoc-sunset-a630.trumneannmseretan.workers.dev/favicon.ico
IP
172.67.180.105:443
ASN
#13335 CLOUDFLARENET

Requested by
https://jundoc-sunset-a630.trumneannmseretan.workers.dev/f370a83a-801c-46ce-90ca-cdab305cf885
Certificate
IssuerGoogle Trust Services LLC
Subjecttrumneannmseretan.workers.dev
FingerprintE5:EC:DF:F1:E8:76:2F:46:A2:D7:AD:2C:BC:0A:EF:E5:46:39:16:38
ValidityThu, 04 Apr 2024 15:02:22 GMT - Wed, 03 Jul 2024 15:02:21 GMT

File type
HTML document, ASCII text, with very long lines (64871)
Size
417 kB (417435 bytes)
Hash
7bf173cab13dd6b7428895cd037105ef
d458cd60cf9d2d8b1b82e750a1aa4d2bafa9635c
726786d9b0673f720aa80786e40a288bd89885f99afc90993fb21ba02aa4262d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: jundoc-sunset-a630.trumneannmseretan.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jundoc-sunset-a630.trumneannmseretan.workers.dev/f370a83a-801c-46ce-90ca-cdab305cf885
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Tue, 16 Apr 2024 16:29:45 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F0djB%2FdCLoiuNWTP30uxOMs0AhNDa7XUjFury4YCmiX10PaiQWTXHw9OU%2FdpOTHJgToa6g7ECOT9qtcaUSX6uXJ68S0%2FEiKEQXXtIs8xxS54H3qvczCZeLqW7xfYGMPDRpkiavSTMoYGaTlCRCmAIjhBm5SGiPlfVftnv1jCaiPap%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87558e584a7eb50c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN