Report - worker-wild-surf-b948.kevin-tmcmanus.workers.dev/

Report Overview

Submitted URL
worker-wild-surf-b948.kevin-tmcmanus.workers.dev/
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 05:06:39
Access
public
Website Title
AOL
Final URL
worker-wild-surf-b948.kevin-tmcmanus.workers.dev/
Tags
suspicious
urlquery detections
Suspicious - Suspicious Javascript code

Detections

urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
api.ipify.org	3267	2014-01-05	2014-10-06	2024-04-25	449 B	249 B	172.67.74.152
i.imgur.com	5110	2009-01-09	2012-05-21	2024-04-25	451 B	2.4 kB	151.101.236.193
img.icons8.com	28959	2011-10-04	2017-05-26	2024-04-25	474 B	2.1 kB	185.76.9.26

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (3)

	URL	Size	First Seen	Last Seen
	worker-wild-surf-b948.kevin-tmcmanus.workers.dev/	1.7 kB	2024-03-27	2024-04-26
Pretty URL worker-wild-surf-b948.kevin-tmcmanus.workers.dev/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-03-27 16:43:27 Last Seen2024-04-26 07:06:40 Times Seen8 Hash 25a4846e92a3509af14709c86b0a5ec5 f42950506d58fe8283d56aeafafcf86d421df06c 9b0dbd773f7107f26a51800112d888ee3ea0f7e19fbabbb94f315c3c97000b3e Loading...

	api.ipify.org/?format=jsonp&callback=getIP	29 B	2023-03-07	2024-05-05
Pretty URL api.ipify.org/?format=jsonp&callback=getIP IP 172.67.74.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:09 Last Seen2024-05-05 16:28:32 Times Seen16662 Hash 90a39389063c7c5716745c3b3bb4fba1 a0903c9a7e90fa3c6ddb04d0ce36abbd4c7a004f eaa6745d9d0a7698235cd6af53aad1551d975506c8405d8303282fb6d2f7ab69 Loading...

	worker-wild-surf-b948.kevin-tmcmanus.workers.dev/	0 B	2023-03-07	2024-05-06
Pretty URL worker-wild-surf-b948.kevin-tmcmanus.workers.dev/ IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2023-03-07 01:01:59 Last Seen2024-05-06 14:46:28 Times Seen37378593 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

HTTP Transactions (3)

	URL	IP	Response	Size
	img.icons8.com/color/50/000000/google-logo.png	185.76.9.26	200 OK	1.3 kB
URL GET HTTP/2 img.icons8.com/color/50/000000/google-logo.png IP 185.76.9.26:443 ASN #60068 Datacamp Limited Requested by https://worker-wild-surf-b948.kevin-tmcmanus.workers.dev/ Certificate IssuerLet's Encrypt Subject1004834818.rsc.cdn77.org FingerprintFD:9B:CD:AE:45:20:20:EA:0C:27:58:F8:5D:B3:8E:9F:51:11:5D:F6 ValiditySun, 14 Apr 2024 18:33:15 GMT - Sat, 13 Jul 2024 18:33:14 GMT File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced Size 1.3 kB (1335 bytes) Hash 45717104c188f613553aa17f989bd3ec 9160dfe7f936a53a76f1a5135212d7d6f07993ba 1a120e58f75551ccd9d96cdb3c285008a750de5c4eb18b66f2b036a588031955 HTTP Headers `GET /color/50/000000/google-logo.png HTTP/1.1 Host: img.icons8.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://worker-wild-surf-b948.kevin-tmcmanus.workers.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 26 Apr 2024 05:06:15 GMT content-type: image/png content-length: 1335 vary: Origin access-control-allow-origin: * icon-id: 17949 icon-size: 50 icon-format: png last-modified: Sat, 30 Mar 2024 22:46:06 version: 0.0.29 from-mongo-cache: true from-redis-cache: false not-found-platform: false cache-control: public, max-age=302400 strict-transport-security: max-age=15724800; includeSubDomains x-77-nzt: EwwBuUwJFAH3cmgDAAwBuUwKAQH3bQAAAAwB1GY4EQH3joIEAA x-77-nzt-ray: af5856307b0c42bf47362b66d186bd07 x-accel-expires: @1714186916 x-accel-date: 1713884629 x-77-cache: HIT x-77-age: 223346 server: CDN77-Turbo x-cache: HIT x-age: 223346 x-77-pop: stockholmSE accept-ranges: bytes X-Firefox-Spdy: h2

	api.ipify.org/?format=jsonp&callback=getIP	172.67.74.152	200 OK	29 B
URL GET HTTP/2 api.ipify.org/?format=jsonp&callback=getIP IP 172.67.74.152:443 ASN #13335 CLOUDFLARENET Requested by https://worker-wild-surf-b948.kevin-tmcmanus.workers.dev/ Certificate IssuerGoogle Trust Services LLC Subjectipify.org FingerprintC8:1A:05:47:C5:73:C6:CE:DF:1D:A6:DE:00:11:A9:9A:8C:DB:EF:A7 ValidityThu, 21 Mar 2024 19:56:02 GMT - Wed, 19 Jun 2024 19:56:01 GMT File type ASCII text, with no line terminators Size 29 B (29 bytes) Hash 90a39389063c7c5716745c3b3bb4fba1 a0903c9a7e90fa3c6ddb04d0ce36abbd4c7a004f eaa6745d9d0a7698235cd6af53aad1551d975506c8405d8303282fb6d2f7ab69 HTTP Headers `GET /?format=jsonp&callback=getIP HTTP/1.1 Host: api.ipify.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://worker-wild-surf-b948.kevin-tmcmanus.workers.dev/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK date: Fri, 26 Apr 2024 05:06:15 GMT content-type: application/javascript content-length: 29 vary: Origin cf-cache-status: DYNAMIC server: cloudflare cf-ray: 87a40adc1ed556b7-OSL X-Firefox-Spdy: h2`

	i.imgur.com/Zc1Q78z.png	151.101.236.193	200 OK	1.7 kB
URL GET HTTP/2 i.imgur.com/Zc1Q78z.png IP 151.101.236.193:443 ASN #54113 FASTLY Requested by https://worker-wild-surf-b948.kevin-tmcmanus.workers.dev/ Certificate IssuerSectigo Limited Subject.imgur.com Fingerprint39:5B:E1:0D:4A:FC:A4:C7:F3:71:DE:C4:5C:12:69:F9:5F:58:9F:42 ValidityThu, 15 Feb 2024 00:00:00 GMT - Fri, 14 Feb 2025 23:59:59 GMT File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced Size 1.7 kB (1694 bytes) Hash 0ce1ecfc11c5cbcecf042e2e143200a2 bd644fbf6027da5f3d39e2e7812e4dff7493443d 533f67bd57aef2f43d4324e3f316d688964423fecf7e466b88559eea9db19f5c HTTP Headers `GET /Zc1Q78z.png HTTP/1.1 Host: i.imgur.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/* Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://worker-wild-surf-b948.kevin-tmcmanus.workers.dev/ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: image/png last-modified: Fri, 15 Mar 2024 10:30:27 GMT etag: "0ce1ecfc11c5cbcecf042e2e143200a2" x-amz-server-side-encryption: AES256 x-amz-cf-pop: IAD89-P1 x-amz-cf-id: Cy7Q0BNuvvrmCVGq8VRmYMvqQCNtl4XE90IrXjHh2sWF13Zrc3Ac-g== cache-control: public, max-age=31536000 accept-ranges: bytes age: 1509440 date: Fri, 26 Apr 2024 05:06:15 GMT x-served-by: cache-iad-kjyo7100107-IAD, cache-osl6532-OSL x-cache: Miss from cloudfront, HIT, MISS x-cache-hits: 311, 0 x-timer: S1714107975.288367,VS0,VE100 strict-transport-security: max-age=300 access-control-allow-methods: GET, OPTIONS access-control-allow-origin: * server: cat factory 1.0 x-content-type-options: nosniff content-length: 1694 X-Firefox-Spdy: h2