Report - cloud-base-3540.jalincrowe.workers.dev/41676309-853f-4fba-aa6e-2b0cece67bb2

Report Overview

Submitted URL
cloud-base-3540.jalincrowe.workers.dev/41676309-853f-4fba-aa6e-2b0cece67bb2
IP
172.67.191.153
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-20 06:21:25
Access
public
Website Title
blob:https://cloud-base-3540.jalincrowe.workers.dev/17e7062e-41ea-4ecc-8106-bab25d3f3dbb
Final URL
cloud-base-3540.jalincrowe.workers.dev/17e7062e-41ea-4ecc-8106-bab25d3f3dbb
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-19	432 B	31 kB	151.101.130.137
cloud-base-3540.jalincrowe.workers.dev	unknown	2019-02-08	2023-07-10	2024-04-13	1.0 kB	2.7 MB	172.67.191.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-04-20 06:20:57	low	Client IP	172.67.191.153	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-19	medium	cloud-base-3540.jalincrowe.workers.dev/41676309-853f-4fba-aa6e-2b0cece67bb2	Office365
2024-03-28	medium	cloud-base-3540.jalincrowe.workers.dev/	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2024-02-01	medium	cloud-base-3540.jalincrowe.workers.dev/41676309-853f-4fba-aa6e-2b0cece67bb2	Adobe
2024-02-01	medium	cloud-base-3540.jalincrowe.workers.dev/favicon.ico	Adobe

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (13)

	URL	Size	First Seen	Last Seen
	unknown	1.2 MB	2024-01-01	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-01 15:40:29 Last Seen2024-04-28 08:05:28 Times Seen63 Hash 040aea2c4f6eeed0709f9b34331a0be5 fedd143bbbbfd00883ed3bdef3f2f2b6bfe7b162 1fce460e576864c6795e92fb683875ad5ad32b3204f9bf41ef30a5d4c68b9926 Loading...

	unknown	141 kB	2024-01-01	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-01 15:40:29 Last Seen2024-04-28 08:05:28 Times Seen103 Hash c06a8d2d806200a7cf8d26dfbc5ce809 0ee711275a142da3ebe3470873fff536a1893708 d845b252e662d472623613bc2207ab4b1e7cdabe493c9f6ccb7637828f166b67 Loading...

	unknown	34 B	2023-04-11	2024-05-03
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-03 11:24:09 Times Seen76000 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	cloud-base-3540.jalincrowe.workers.dev/17e7062e-41ea-4ecc-8106-bab25d3f3dbb	1.7 MB	2024-01-01	2024-04-28
Pretty URL cloud-base-3540.jalincrowe.workers.dev/17e7062e-41ea-4ecc-8106-bab25d3f3dbb IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-01-01 15:40:29 Last Seen2024-04-28 08:05:28 Times Seen63 Hash da8a19476feb6e9e4ac3b776cd025576 a17c21de99096eb8fc5d9b70a06a049e21a844eb e167062653ddfc7c0b7d447a542f069fecfd6ec35da60189d8219fddfee2ca1b Loading...

	unknown	1.2 MB	2024-01-01	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-01 15:40:29 Last Seen2024-04-28 08:05:28 Times Seen63 Hash 2478654457a76edb988c74e77a0b044e 8917b39bb4baccb73ef07057ac69fd7844cee88f b61705d045791d2b7ce1ac119519390b1f90a32a25dd9fb0ff5e606b326b9fe5 Loading...

	unknown	1.5 MB	2024-01-01	2024-04-28
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-01-01 15:40:29 Last Seen2024-04-28 08:05:28 Times Seen63 Hash 25f22bb0eebc23ce49bdbb4966777fed 960979ad5357120a60eabdf56a35e53ab5b81189 fcc9dec835a67f112aca18e51756e24b4b3272a776251ee2ec84a17ae1a06896 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 7814a94be1589f8040c2c27308c36a3e	1.6 MB	2024-01-01	2024-04-28
Pretty Observations First Seen2024-01-01 15:40:30 Last Seen2024-04-28 08:05:28 Times Seen62 Hash 7814a94be1589f8040c2c27308c36a3e 7fad4a56c6e7fce3a49ff64fd9cadefe43c1bc4e 8cac66376e84768237986a06d9922d9db6c22c10461e5f8c3bd977faa841b745 Loading...

	#2 Eval - 9c5adc38ad78e607490a3f292066d539	1.2 MB	2024-01-01	2024-04-28
Pretty Observations First Seen2024-01-01 15:40:30 Last Seen2024-04-28 08:05:28 Times Seen63 Hash 9c5adc38ad78e607490a3f292066d539 82a6f9e1586868cc768da1d7e75d6331c82bbef5 b4f3415b7562e7b88a396acc1d6320ff843fa2fd46eb725c186592ff16ed9398 Loading...

	#3 Eval - 0c132aec1e0a790667c3e11653989bea	1.2 MB	2024-01-01	2024-04-28
Pretty Observations First Seen2024-01-01 15:40:30 Last Seen2024-04-28 08:05:28 Times Seen63 Hash 0c132aec1e0a790667c3e11653989bea 6d5c1f6fefcf668945e91dec871d72aa115a3576 e2dafe153964f42f89a5cceb29e0cb3915045c4db2d3da4265588c386cd0975f Loading...

		Size	First Seen	Last Seen
	#1 Write - 819bc9d9c5b88bc0a557e1cda337b426	1.2 MB	2024-01-01	2024-04-28
Pretty Observations First Seen2024-01-01 15:40:31 Last Seen2024-04-28 08:05:28 Times Seen63 Hash 819bc9d9c5b88bc0a557e1cda337b426 4f98bef8e2ff44da68e951048970d8948fa49311 bc460d9bff2a037ceb31fadf3cbb22dcba1903419be99e88a7ec141c17f814c2 Loading...

	#2 Write - 44c280d3978950d579d05039651976cf	306 kB	2024-01-01	2024-04-28
Pretty Observations First Seen2024-01-01 15:40:31 Last Seen2024-04-28 08:05:28 Times Seen63 Hash 44c280d3978950d579d05039651976cf ee4a676c7d1eaff935a4b747e3aad7e163f6dda5 eeea0025b7b5c9a542a09bac9e70916a265b33673f519bff33cca14eaafaa6f1 Loading...

	#3 Write - 6b936a3803116a0ddd6f9786c35906b0	1.5 MB	2024-01-01	2024-04-28
Pretty Observations First Seen2024-01-01 15:40:31 Last Seen2024-04-28 08:05:28 Times Seen62 Hash 6b936a3803116a0ddd6f9786c35906b0 71974487f4b4dbda7470e53cd988d5006a137493 5c3ef90786ff2f794861d13e3b1b8f66b8f29c4c7080c1e1b411c24153eeee96 Loading...

	#4 Write - b079228b9fecc89323aa5e7b82e756e1	1.2 MB	2024-01-01	2024-04-28
Pretty Observations First Seen2024-01-01 15:40:31 Last Seen2024-04-28 08:05:28 Times Seen63 Hash b079228b9fecc89323aa5e7b82e756e1 7112d8bedfe6cd270b003086aba14d18bb7149ac ac1b9753b38dfe1fe6d2034815d51fc4b69b4dd05c0b0aa33c797f6c2c878ec7 Loading...

HTTP Transactions (3)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.130.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://cloud-base-3540.jalincrowe.workers.dev/41676309-853f-4fba-aa6e-2b0cece67bb2
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud-base-3540.jalincrowe.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 20 Apr 2024 06:20:57 GMT
age: 5512555
x-served-by: cache-lga21965-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 102568
x-timer: S1713594058.713688,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

cloud-base-3540.jalincrowe.workers.dev/41676309-853f-4fba-aa6e-2b0cece67bb2

172.67.191.153

200 OK

2.3 MB

URL User Request GET HTTP/2
cloud-base-3540.jalincrowe.workers.dev/41676309-853f-4fba-aa6e-2b0cece67bb2
IP
172.67.191.153:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectjalincrowe.workers.dev
Fingerprint29:2F:7A:0D:18:8F:01:59:49:DD:2B:18:3B:8B:59:1F:D5:8B:D4:6D
ValiditySat, 02 Mar 2024 19:53:38 GMT - Fri, 31 May 2024 19:53:37 GMT

File type

Size
2.3 MB (2261128 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /41676309-853f-4fba-aa6e-2b0cece67bb2 HTTP/1.1
Host: cloud-base-3540.jalincrowe.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sat, 20 Apr 2024 06:20:57 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LIyfG7Bro5JCkZXd55%2B%2FAWp0XvUrRZeq2DehWa9flsOjLoSLZL38kViBCAgXArkMwi61yO6bw0xlCVLqV9BFEYWVQHBnc6W%2F6%2FOcL3CzmgUTLj%2BqsXG1d5szcDtNXKMBaYtbI41ZFRAZ8I5uSRc78c0ENcr0yCzPJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8773080aad0e56b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

cloud-base-3540.jalincrowe.workers.dev/favicon.ico

172.67.191.153

200 OK

393 kB

URL GET HTTP/3
cloud-base-3540.jalincrowe.workers.dev/favicon.ico
IP
172.67.191.153:443
ASN
#13335 CLOUDFLARENET

Requested by
https://cloud-base-3540.jalincrowe.workers.dev/41676309-853f-4fba-aa6e-2b0cece67bb2
Certificate
IssuerGoogle Trust Services LLC
Subjectjalincrowe.workers.dev
Fingerprint29:2F:7A:0D:18:8F:01:59:49:DD:2B:18:3B:8B:59:1F:D5:8B:D4:6D
ValiditySat, 02 Mar 2024 19:53:38 GMT - Fri, 31 May 2024 19:53:37 GMT

File type
HTML document, ASCII text, with very long lines (64858)
Size
393 kB (393037 bytes)
Hash
3cbc23f31f597250578e67a8e2eee1be
f5129859ebad5d4116b0e260544fc856cf5d2a54
3fb92fa80cd7deed02a64e7ef95f47d0f3dd7f43b7b674a5379bb9c966a0117a

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: cloud-base-3540.jalincrowe.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cloud-base-3540.jalincrowe.workers.dev/41676309-853f-4fba-aa6e-2b0cece67bb2
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sat, 20 Apr 2024 06:20:57 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Ffm7hLRuI4gu9LZoZ5NV6LgiNWOnBhdoNAnxOUFIQ6Gn2T6mpY6DWJ699Cdf%2FVd8g8UAjquEiPu4P85ZY%2FeqAPGC%2FqcKGVLMdgDqLRTRxRH4Z7FtoVT%2BdJqdpSpyr%2FX4bU0EH6MDE6RZIFZoJDdOs27%2Fh2rCOBWbEw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8773080e1b4f5694-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (13)

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (3)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN