Report - sheetg-a014.tyron1133.workers.dev/

Report Overview

Submitted URL
sheetg-a014.tyron1133.workers.dev/
IP
104.21.5.24
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-02 16:27:11
Access
public
Website Title
blob:https://sheetg-a014.tyron1133.workers.dev/c3a20ea6-e948-43f8-b122-145490176935
Final URL
sheetg-a014.tyron1133.workers.dev/c3a20ea6-e948-43f8-b122-145490176935
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
code.jquery.com	634	2005-12-10	2012-05-21	2024-05-02	427 B	31 kB	151.101.130.137
sheetg-a014.tyron1133.workers.dev	unknown	2019-02-08	2023-06-27	2024-03-19	951 B	4.0 MB	172.67.132.196
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-05-01	464 B	146 kB	104.18.10.207
fonts.googleapis.com	8877	2005-01-25	2013-06-10	2024-05-02	410 B	1.1 kB	142.250.74.106

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-05-02	medium	sheetg-a014.tyron1133.workers.dev/	Office365
2024-05-02	medium	sheetg-a014.tyron1133.workers.dev/	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2023-12-03	medium	sheetg-a014.tyron1133.workers.dev/favicon.ico	Other
2023-12-03	medium	sheetg-a014.tyron1133.workers.dev/	Other

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (17)

	URL	Size	First Seen	Last Seen
	sheetg-a014.tyron1133.workers.dev/c3a20ea6-e948-43f8-b122-145490176935	1.5 MB	2023-12-03	2024-05-17
Pretty URL sheetg-a014.tyron1133.workers.dev/c3a20ea6-e948-43f8-b122-145490176935 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-03 03:00:46 Last Seen2024-05-17 07:15:21 Times Seen76 Hash 9d7e83ee2d717ddc9667dfc642f90154 6f9debb9b62c7af87fee8cb099a188573995654b acf5dc4302344190934fba85672a5d24626488e9afca7868c2653cccc7d5363b Loading...

	unknown	1.3 MB	2023-12-03	2024-05-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-03 03:00:46 Last Seen2024-05-17 07:15:21 Times Seen76 Hash e00c34b6cf7222d2f2ba1167c94dbc77 3cdb1789adf6c713439d5b7d7cf0c400d9eb1121 bea94dbfb5027847ca0c999de1161f6b21909a18d97cfd981e2f3fb40ef72cbf Loading...

	unknown	1.4 MB	2023-12-03	2024-05-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-03 03:00:46 Last Seen2024-05-17 07:15:21 Times Seen76 Hash fc53368a98170d0e291a92d5b46d9557 090522e931bf9bdb94bee4f2cb7458760c058813 9bf652963bc666383020de4b449c0ec2a414e98af46f0f47bb76de501bc88215 Loading...

	unknown	1.3 MB	2023-12-03	2024-05-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-03 03:00:46 Last Seen2024-05-17 07:15:21 Times Seen76 Hash 1bdf714e0f3174b47683c98e08f68cf1 4708e36b446adc549493900ac5836b3f17d52d93 e6c3ea6a35f193516a885584b8b17b0086685268877c0c914d23f5cd605c024e Loading...

	unknown	14 kB	2023-06-23	2024-05-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-23 13:01:07 Last Seen2024-05-17 07:15:21 Times Seen439 Hash 1efe2df6103b3da6f9caebb4493789c3 837cf8672e419e8d2637be6b1f7e3b129baa047a f79077e198edc3fca3e0fa291a47d61211253f84ec27cc8e945f92b5452ba752 Loading...

	unknown	149 kB	2023-06-23	2024-05-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-23 13:01:07 Last Seen2024-05-17 07:15:21 Times Seen482 Hash be3bd7fd2700fa1739787172b70d2f2c eb0ccf0f20387453bf6ed6c2924876d1cb37fd5f a3997e77c0f937b0b62ff1abdb5193f07bab513245d5ab85727346f7948a3d8e Loading...

	unknown	1.5 MB	2023-12-03	2024-05-17
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-03 03:00:46 Last Seen2024-05-17 07:15:21 Times Seen76 Hash e857a35d4544611f3832a2e80e59b0dc 7d942e06cd5b3e4388693a55ac464c2fc7c3b01c be4116f392c86628c4ea377eff7ad0f62890529a1f1b1ee3d7337180af6c9ca1 Loading...

	unknown	34 B	2023-04-11	2024-05-17
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16:40 Last Seen2024-05-17 10:15:22 Times Seen77247 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

		Size	First Seen	Last Seen
	#1 Eval - 49f8d059b2a049e97e67e4556de46e56	1.3 MB	2023-12-03	2024-05-17
Pretty Observations First Seen2023-12-03 03:00:47 Last Seen2024-05-17 07:15:21 Times Seen71 Hash 49f8d059b2a049e97e67e4556de46e56 173b0519f485d7825a72d3005fc074e752175688 aaa388762565179788f2ebffd42a843ffc3f3f1167fe5f06c2de3e015f716011 Loading...

	#2 Eval - dc9f5eebf05763cb525bed584052a2ef	1.6 kB	2023-06-23	2024-05-17
Pretty Observations First Seen2023-06-23 13:01:07 Last Seen2024-05-17 07:15:21 Times Seen507 Hash dc9f5eebf05763cb525bed584052a2ef 28add966d686e9c3336f2a25b991f22ee7f790c6 e2646d7fdebbab3870266ce1096028f0f212ac7509eaf8ad6475488e960a21a1 Loading...

	#3 Eval - f99b2df8263faea22f9d4e0a37d3bcb5	1.3 MB	2023-12-03	2024-05-17
Pretty Observations First Seen2023-12-03 03:00:47 Last Seen2024-05-17 07:15:21 Times Seen74 Hash f99b2df8263faea22f9d4e0a37d3bcb5 a40aac3fcfd5047cf3130795af098b5ab61bf596 0e9933928b249d0bae3816cce337bbdcb2c334954a2b88def7a314cf0ab8dc54 Loading...

		Size	First Seen	Last Seen
	#1 Write - 0cb4e1911ff114d55ba27be94a5b5d51	1.3 MB	2023-12-03	2024-05-17
Pretty Observations First Seen2023-12-03 03:00:47 Last Seen2024-05-17 07:15:21 Times Seen76 Hash 0cb4e1911ff114d55ba27be94a5b5d51 f1edf98618a598bf275870a7aec5ae1b6f165212 8cc21bc4d7d93f6578c8b48c37525b39d93fb5f91d67756e945f7caf3e7fb6a3 Loading...

	#2 Write - f0ad900762cc9dd32816b531bff35fe4	3.5 kB	2023-06-23	2024-05-17
Pretty Observations First Seen2023-06-23 13:01:08 Last Seen2024-05-17 07:15:21 Times Seen507 Hash f0ad900762cc9dd32816b531bff35fe4 f323da8c683c52125bff07ae034e5a6bfc149e03 ed7f9ab4de73e6be09ecf00c7fb3105899c3409bef2352297512e36c5f74b476 Loading...

	#3 Write - 91c0faebb650d10463c8665b9b6d37cb	462 B	2023-03-12	2024-05-17
Pretty Observations First Seen2023-03-12 21:46:43 Last Seen2024-05-17 08:37:54 Times Seen2282 Hash 91c0faebb650d10463c8665b9b6d37cb fafcffb1bf21551bc22957849438ae8e04a30e13 c5d1dcc53d65d484b2cd5c1a6555907ab7e2e2d1c76efe15c9ad6e8bc811f99f Loading...

	#4 Write - 0f54acfde9b00a4e893a9d4ed00c1a92	1.5 MB	2023-12-03	2024-05-17
Pretty Observations First Seen2023-12-03 03:00:47 Last Seen2024-05-17 07:15:21 Times Seen75 Hash 0f54acfde9b00a4e893a9d4ed00c1a92 8d52ef04ac4df153079c0f50cd330faad66314f4 21868c8648650840304ce0d9c367304b4df16efb9b606477b10c7e741dd22948 Loading...

	#5 Write - 59dffe3a0878c65dd887cac06338da88	1.4 MB	2023-12-03	2024-05-17
Pretty Observations First Seen2023-12-03 03:00:47 Last Seen2024-05-17 07:15:21 Times Seen74 Hash 59dffe3a0878c65dd887cac06338da88 7f7698cdde3673ff62cf4ab74dacd910c7adb89f 7d9230e5b6c7dbba86aa11ada6e23d2c9dc3949d2b13c200d95ab0bf3743310a Loading...

	#6 Write - ceea78af77b89324a6e881b42cf198a8	1.3 MB	2023-12-03	2024-05-17
Pretty Observations First Seen2023-12-03 03:00:47 Last Seen2024-05-17 07:15:21 Times Seen73 Hash ceea78af77b89324a6e881b42cf198a8 9b94f29f504f850f8338961a56bc349f264b93ba 3e12fc20639996276cd40e6677cd931bb159b12b6c4c2be154eff008eaf59a66 Loading...

HTTP Transactions (5)

URL IP Response Size

code.jquery.com/jquery-3.4.1.min.js

151.101.130.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.130.137:443
ASN
#54113 FASTLY

Requested by
https://sheetg-a014.tyron1133.workers.dev/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sheetg-a014.tyron1133.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 02 May 2024 16:26:43 GMT
age: 6585701
x-served-by: cache-lga21965-LGA, cache-hel1410027-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 219410
x-timer: S1714667203.490017,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

sheetg-a014.tyron1133.workers.dev/favicon.ico

172.67.132.196

200 OK

2.0 MB

URL GET HTTP/3
sheetg-a014.tyron1133.workers.dev/favicon.ico
IP
172.67.132.196:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sheetg-a014.tyron1133.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjecttyron1133.workers.dev
FingerprintAB:C6:A0:09:E2:7C:AA:C7:17:AB:28:E2:19:EF:46:79:EA:DE:96:07
ValidityWed, 17 Apr 2024 18:04:16 GMT - Tue, 16 Jul 2024 18:04:15 GMT

File type

Size
2.0 MB (2023447 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: sheetg-a014.tyron1133.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sheetg-a014.tyron1133.workers.dev/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Thu, 02 May 2024 16:26:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SNQQszEzlUBs5dXNU1fzEHak2B8mpxUcEUvzAfd%2BJ5582zSzVE%2B54tnefFkvMrrBEZFNPUu2pnHYaOIjopi3tDj8hA2Y5Y8sPvqJwkYohDCvlyro97tqYyOZgCwIjRLIyE7aI9tH%2FzPoPSnJ6ho8tNntH0M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d95fe7898056bf-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css

104.18.10.207

200 OK

145 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
IP
104.18.10.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://sheetg-a014.tyron1133.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65325)
Size
145 kB (144877 bytes)
Hash
450fc463b8b1a349df717056fbb3e078
895125a4522a3b10ee7ada06ee6503587cbf95c5
2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d

HTTP Headers

GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sheetg-a014.tyron1133.workers.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 16:26:46 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"450fc463b8b1a349df717056fbb3e078"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 10/31/2023 18:48:44
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: d5bc6fa5cf15533a1f421786fdd51290
cdn-cache: HIT
cf-cache-status: HIT
age: 14425
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87d95ff99afab521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Yellowtail&display=swap

142.250.74.106

200 OK

422 B

URL GET HTTP/2
fonts.googleapis.com/css?family=Yellowtail&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://sheetg-a014.tyron1133.workers.dev/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50
ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT

File type
ASCII text, with very long lines (431), with no line terminators
Size
422 B (422 bytes)
Hash
6758f60c9586add4a15e44a2ef8d7879
34e49409b44f891fedec652e108ddeecbdad0586
421deb66a1646850cdbc13dff1e4a79fbfc2e2e56f520797d64cfc22ce468beb

HTTP Headers

GET /css?family=Yellowtail&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 May 2024 16:26:46 GMT
date: Thu, 02 May 2024 16:26:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

sheetg-a014.tyron1133.workers.dev/

172.67.132.196

200 OK

2.0 MB

URL User Request GET HTTP/2
sheetg-a014.tyron1133.workers.dev/
IP
172.67.132.196:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjecttyron1133.workers.dev
FingerprintAB:C6:A0:09:E2:7C:AA:C7:17:AB:28:E2:19:EF:46:79:EA:DE:96:07
ValidityWed, 17 Apr 2024 18:04:16 GMT - Tue, 16 Jul 2024 18:04:15 GMT

File type

Size
2.0 MB (2023447 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Other

HTTP Headers

GET / HTTP/1.1
Host: sheetg-a014.tyron1133.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 02 May 2024 16:26:43 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lnV3I5xd4Nr%2F43F8CG95GaqpX80425iS1HE5by9IQ0wQpbc09lRgMUBEVdl1fm0nTKex38Gr8a24znU5OSoUYbwslmRhrg05liEJWqi7Wiv3nBGDvrj%2B5fnfSLgXW%2FOQpuqfuqpyU9to8KVa4fXaRExQzwY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87d95fe239d9b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (17)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (5)