Report - dooecs-wind-b8e7.lenbasymurlgag.workers.dev/,N/A,https:/openphish.com/feed.txt,28-Aug-24,Low,Medium

Report Overview

Visited public
2024-08-28 12:28:07
Tags
URL
dooecs-wind-b8e7.lenbasymurlgag.workers.dev/,N/A,https:/openphish.com/feed.txt,28-Aug-24,Low,Medium
Finishing URL
dooecs-wind-b8e7.lenbasymurlgag.workers.dev/a86f9765-8d06-45be-9bbb-e2864cd0e33e
IP / ASN
172.67.200.78
#13335 CLOUDFLARENET
Title
blob:https://dooecs-wind-b8e7.lenbasymurlgag.workers.dev/a86f9765-8d06-45be-9bbb-e2864cd0e33e

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-08-27 18:12:09	981 B	2.7 kB	23.36.76.225
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-08-27 18:12:12	981 B	2.7 kB	23.36.76.225
code.jquery.com	634	2005-12-10	2012-05-21 19:28:02	2024-08-28 08:27:23	437 B	31 kB	151.101.2.137
dooecs-wind-b8e7.lenbasymurlgag.workers.dev	unknown	2019-02-08	2023-09-05 20:04:03	2024-03-04 09:05:42	1.1 kB	2.0 MB	172.67.200.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-08-28 12:27:38	low	Client IP	172.67.200.78	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-08-27	medium	dooecs-wind-b8e7.lenbasymurlgag.workers.dev/	Office365
2024-08-27	medium	dooecs-wind-b8e7.lenbasymurlgag.workers.dev/	Office365

PhishTank

Scan Date	Severity	Indicator	Alert
2024-06-28	medium	dooecs-wind-b8e7.lenbasymurlgag.workers.dev/favicon.ico	Adobe
2024-06-28	medium	dooecs-wind-b8e7.lenbasymurlgag.workers.dev/,N/A,https:/openphish.com/feed.txt,28-Aug-24,Low,Medium	Adobe

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (15)

	URL	From	Size	First Seen	Last Seen
	dooecs-wind-b8e7.lenbasymurlgag.workers.dev/a86f9765-8d06-45be-9bbb-e2864cd0e33e	ScriptElement	1.5 MB	2024-06-28	2024-08-31
Pretty URL dooecs-wind-b8e7.lenbasymurlgag.workers.dev/a86f9765-8d06-45be-9bbb-e2864cd0e33e IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML true Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash 96a0a30c2aa28c67197ef783783f0e9b 36fe2c13c8e8a98f32920b49f88f5e98e89a592c 4d01c227b47c5a9cbafee2b7e87e5b111ad0b0b12d12fa19b9ab447b73090e58 Loading...

	unknown	ScriptElement	1.3 MB	2024-06-28	2024-08-31
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash 1d75beb083cab3a48afc8eca4eb97f79 bd54f85ecca655a1be5ca6ea9d969cbb314aff82 04e8d6bbbf581de4d87325201aee4b295d8493a1c0f868bddca0f34135ed5d2e Loading...

	unknown	ScriptElement	1.1 MB	2024-06-28	2024-08-31
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash 2e5cff92c8191b771596f4b6d0c43fc8 ca6f1e50c6abf2fa55da213e176dae05c9d6a4c3 9bdc9856bced01f4582190866006b4f59ed21b212152a541c0aca39a6fd78d7f Loading...

	unknown	Function	34 B	2023-04-11	2025-05-13
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-11 21:16 Last Seen2025-05-13 23:54 Times Seen67044 Hash 572cb94037fffc2a0a53b465972e15f1 0d679b041a7c1ca45cc99e2d229fc2b86762838d 6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35 Loading...

	unknown	ScriptElement	1.3 MB	2024-06-28	2024-08-31
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash 2b4e6b1099e0ea669922a9cae745aeb3 07f82245601601d09002d9efc14396ea28bfc17d 263265713266b76ff841c5943c0b263a7a8b8ae1dc7d87dbce6f0ee427cfb334 Loading...

	unknown	ScriptElement	1.2 MB	2024-06-28	2024-08-31
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash 97e0bc5175a8ece4897694edcb3964c2 08e9b16b33e3328c5f476bad3ee8d9ec2347f6ba 4b1bfa2e58eb019bf684110f6afa7221dbb9d1bca0a1a98ac171a00c6f9780a1 Loading...

	unknown	ScriptElement	141 kB	2023-07-23	2025-01-06
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-23 04:14 Last Seen2025-01-06 13:29 Times Seen4355 Hash e912ea3e9c1ad34e52f1a4093d1e0399 faec3a83fccbbae090e6c391fc4962c085f8181c 925e9cc12990a4c045cf7c28409e650f96381683a504217d8d8f2b71152a8cab Loading...

		Size	First Seen	Last Seen
	#1 Eval - a162ea37b336274e61c8f51f4c03dc4e	1.3 MB	2024-06-28 12:14	2024-08-31 08:34
Pretty Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash a162ea37b336274e61c8f51f4c03dc4e 3775e0daeeb7839c013896192e8b14131f59516c 23747e68530a20890512ec21b71e43dff87d11e951987d87390ff25db47ca74d Loading...

	#2 Eval - 3b101dc146e4d6ee640cec5329380c12	1.3 MB	2024-06-28 12:14	2024-08-31 08:34
Pretty Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash 3b101dc146e4d6ee640cec5329380c12 9c030f52d88d832588a9b5506533acaa66e15432 ff8c28c1acee00671cdefc107278d0f1f723903c21e1b440a2053437cda49be7 Loading...

	#3 Eval - b5636e3e4a1a9ea8969c4973a71c3ff3	1.2 MB	2024-06-28 12:14	2024-08-31 08:34
Pretty Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash b5636e3e4a1a9ea8969c4973a71c3ff3 85fc9f09c289fac75640851d218fa6d94ad163c5 7de8799894200c4fb9a26e927c7e65d44b464c60883a3afc2c822249bd425b53 Loading...

		Size	First Seen	Last Seen
	#1 Write - 16e9d67f01ac4fa3b3c0fbc80be23219	324 kB	2024-06-28 12:14	2024-09-19 20:16
Pretty Observations First Seen2024-06-28 12:14 Last Seen2024-09-19 20:16 Times Seen6 Hash 16e9d67f01ac4fa3b3c0fbc80be23219 d56c877ca01167c96e04325def341568ad4d54b7 79f835231d93cb5bd23813f0c6867fe45c27ebc823a2a9cd625f347a7e880661 Loading...

	#2 Write - a5c7cf078cacda0b5ef59c916662b8d7	1.3 MB	2024-06-28 12:14	2024-08-31 08:34
Pretty Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash a5c7cf078cacda0b5ef59c916662b8d7 ddc5d3f61f8eadd8d0f0660b6d060c087813b70a 61f7a7dfff003864fd3766ba99e9f90498485498990dcd6bbaebd102d3ad4a93 Loading...

	#3 Write - eae5e3844021aeba4d9ac8a7603637c7	1.3 MB	2024-06-28 12:14	2024-08-31 08:34
Pretty Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash eae5e3844021aeba4d9ac8a7603637c7 e7eeb76bffc9c9706a0a547e821dc16dc4cc59a7 12e21daf8df83d760fa8444e9d792d37e61838128f301145ee0648d6699cc018 Loading...

	#4 Write - 45919e061666caf5c2a1c6013b52a74d	1.1 MB	2024-06-28 12:14	2024-08-31 08:34
Pretty Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash 45919e061666caf5c2a1c6013b52a74d c8679c94964c73da7a3236e2244746401b225dc0 ba3399cbb14152de735640f25255e6e612f91f1f3a627b7089b320d2b53ec1e4 Loading...

	#5 Write - 5f3a6b8927e7a8c2d1bef8afac5e0001	1.2 MB	2024-06-28 12:14	2024-08-31 08:34
Pretty Observations First Seen2024-06-28 12:14 Last Seen2024-08-31 08:34 Times Seen5 Hash 5f3a6b8927e7a8c2d1bef8afac5e0001 da1ae6e56e0a78b6f3b7f686119b7d5a3e184d45 d09ea34fd88f2522d22efda5a779374ec0257e840880c2987130aeb9d95550c4 Loading...

HTTP Transactions (9)

URL IP Response Size

r11.o.lencr.org/

23.36.76.225

504 B

URL
r11.o.lencr.org/
IP
23.36.76.225:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
306aab38a2968d69d5d5dbc017f4277a
b32d9d7854e04d53418b56571cafb87065e3556f
2e6610a974cefd8ed9bab356e7e166e41b4e4955f4da39f5d400cdeeb286f88c

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "2E6610A974CEFD8ED9BAB356E7E166E41B4E4955F4DA39F5D400CDEEB286F88C"
Last-Modified: Mon, 26 Aug 2024 02:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6295
Expires: Wed, 28 Aug 2024 14:12:33 GMT
Date: Wed, 28 Aug 2024 12:27:38 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.225

504 B

URL
r10.o.lencr.org/
IP
23.36.76.225:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
54633b725990f88440d7aea516670e2b
e0067c0d67ee241ff0fd23bbfbfcdf77d044a5ee
4c70207b2ed6067ddedd19d893cd479c107ee6a6d3324d324ae599abff578a06

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4C70207B2ED6067DDEDD19D893CD479C107EE6A6D3324D324AE599ABFF578A06"
Last-Modified: Mon, 26 Aug 2024 06:22:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7084
Expires: Wed, 28 Aug 2024 14:25:42 GMT
Date: Wed, 28 Aug 2024 12:27:38 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.225

504 B

URL
r10.o.lencr.org/
IP
23.36.76.225:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
f7c4be8bd45166d9a6c01c9002cb0b35
e057803eec2aa279d12d5a361903b66e7eccbb86
0e7a047f2a11f5db27830e9b2b2f9ac4578f8bc34e2a5ac00e194f0ac5e3e4fb

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "0E7A047F2A11F5DB27830E9B2B2F9AC4578F8BC34E2A5AC00E194F0AC5E3E4FB"
Last-Modified: Mon, 26 Aug 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4623
Expires: Wed, 28 Aug 2024 13:44:41 GMT
Date: Wed, 28 Aug 2024 12:27:38 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.225

504 B

URL
r10.o.lencr.org/
IP
23.36.76.225:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
b0c68ac7e44a67b94268231c5f22ae25
a0c078abb7617e9b0ac402a24969ea22e024cf18
671ca341e73bd97fda1d098560ab338b45fbff67a5d85b47685273850d55e587

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "671CA341E73BD97FDA1D098560AB338B45FBFF67A5D85B47685273850D55E587"
Last-Modified: Mon, 26 Aug 2024 02:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6041
Expires: Wed, 28 Aug 2024 14:08:19 GMT
Date: Wed, 28 Aug 2024 12:27:38 GMT
Connection: keep-alive

code.jquery.com/jquery-3.4.1.min.js

151.101.2.137

200 OK

31 kB

URL GET HTTP/2
code.jquery.com/jquery-3.4.1.min.js
IP
151.101.2.137:443
ASN
#54113 FASTLY

Requested by
https://dooecs-wind-b8e7.lenbasymurlgag.workers.dev/,N/A,https:/openphish.com/feed.txt,28-Aug-24,Low,Medium
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintCD:B5:6E:05:85:0C:5A:AE:47:12:80:2A:5B:C6:E5:8F:11:72:E2:B5
ValidityTue, 25 Jun 2024 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (65451)
Size
31 kB (30638 bytes)
Hash
220afd743d9e9643852e31a135a9f3ae
88523924351bac0b5d560fe0c5781e2556e7693d
0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a

HTTP Headers

GET /jquery-3.4.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dooecs-wind-b8e7.lenbasymurlgag.workers.dev/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-15851"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 28 Aug 2024 12:27:39 GMT
age: 2441300
x-served-by: cache-lga21965-LGA, cache-hel1410024-HEL
x-cache: HIT, HIT
x-cache-hits: 23, 10228
x-timer: S1724848059.031167,VS0,VE0
vary: Accept-Encoding
content-length: 30638
X-Firefox-Spdy: h2

r11.o.lencr.org/

23.36.76.249

504 B

URL
r11.o.lencr.org/
IP
23.36.76.249:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
d4dd734ee3b332b0befeb0ba13e21f5f
8651bbd15f2e760d1145b1b6cb83d73cee9a0170
e8fb27375025282b1d0a0fccb0798d24ab6fc72473ff03f195f311d61bda6d47

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E8FB27375025282B1D0A0FCCB0798D24AB6FC72473FF03F195F311D61BDA6D47"
Last-Modified: Mon, 26 Aug 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3965
Expires: Wed, 28 Aug 2024 13:33:45 GMT
Date: Wed, 28 Aug 2024 12:27:40 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.249

504 B

URL
r11.o.lencr.org/
IP
23.36.76.249:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
d4dd734ee3b332b0befeb0ba13e21f5f
8651bbd15f2e760d1145b1b6cb83d73cee9a0170
e8fb27375025282b1d0a0fccb0798d24ab6fc72473ff03f195f311d61bda6d47

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "E8FB27375025282B1D0A0FCCB0798D24AB6FC72473FF03F195F311D61BDA6D47"
Last-Modified: Mon, 26 Aug 2024 02:34:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3965
Expires: Wed, 28 Aug 2024 13:33:45 GMT
Date: Wed, 28 Aug 2024 12:27:40 GMT
Connection: keep-alive

dooecs-wind-b8e7.lenbasymurlgag.workers.dev/favicon.ico

172.67.200.78

200 OK

77 kB

URL GET HTTP/3
dooecs-wind-b8e7.lenbasymurlgag.workers.dev/favicon.ico
IP
172.67.200.78:443
ASN
#13335 CLOUDFLARENET

Requested by
https://dooecs-wind-b8e7.lenbasymurlgag.workers.dev/,N/A,https:/openphish.com/feed.txt,28-Aug-24,Low,Medium
Certificate
IssuerGoogle Trust Services
Subjectlenbasymurlgag.workers.dev
Fingerprint06:DE:54:F1:0C:DC:50:B4:B1:B5:68:41:E6:4C:CD:84:75:7D:C5:27
ValiditySun, 25 Aug 2024 23:26:01 GMT - Sat, 23 Nov 2024 23:26:00 GMT

File type
HTML document, ASCII text, with very long lines (64864)
Size
77 kB (76561 bytes)
Hash
1f275fae5cfbe039f9a8395d619c4a2b
dbf1e0268bbaf3cf149cc20a65c42dfdcbe4d5c8
1f156f5b6a011acce036576cf7a8d41a8b48c2745b37d577ace559100b0d5d7f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: dooecs-wind-b8e7.lenbasymurlgag.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dooecs-wind-b8e7.lenbasymurlgag.workers.dev/,N/A,https:/openphish.com/feed.txt,28-Aug-24,Low,Medium
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 28 Aug 2024 12:27:39 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TyWi74wuGwU9h7sSw7TsdXkiQPRduIySsoCvcC%2BFVChGNZ64SlRPcgY%2BZumnmi7lDiTiKbI%2FXMxzAjL9%2FhQFm0D12SX5XUEUaEA2F0M6WJ730Y4xWFrUQ%2B1DEtNrguBTc7JDtDdSBngkro1KYPuyFvmPceDoyGLRZIUklIIc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ba44bf2b8bd4c19-AMS
content-encoding: br
alt-svc: h3=":443"; ma=86400

dooecs-wind-b8e7.lenbasymurlgag.workers.dev/,N/A,https:/openphish.com/feed.txt,28-Aug-24,Low,Medium

172.67.200.78

200 OK

2.0 MB

URL User Request GET HTTP/2
dooecs-wind-b8e7.lenbasymurlgag.workers.dev/,N/A,https:/openphish.com/feed.txt,28-Aug-24,Low,Medium
IP
172.67.200.78:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectlenbasymurlgag.workers.dev
Fingerprint06:DE:54:F1:0C:DC:50:B4:B1:B5:68:41:E6:4C:CD:84:75:7D:C5:27
ValiditySun, 25 Aug 2024 23:26:01 GMT - Sat, 23 Nov 2024 23:26:00 GMT

File type

Size
2.0 MB (1962615 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Office365
PhishTank	phishing	Adobe

HTTP Headers

GET /,N/A,https:/openphish.com/feed.txt,28-Aug-24,Low,Medium HTTP/1.1
Host: dooecs-wind-b8e7.lenbasymurlgag.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 28 Aug 2024 12:27:38 GMT
content-type: text/html;charset=UTF-8
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5zydI2qP72BnR9lk9lZCL1FpgU%2BBcrlutXKkw%2B8XiGEQAIrixJPqZcXiDlaIwQOWOSb%2FD47CP5%2FmsJQWKgq8ctkREXqzTNZlm5Pxo82cB9RYtTk0wh0eQdQVeqcyvlSQw2t4jvFMdJQtS0sIG%2F9mlV%2F1jF5Guk0TV7BLg5A"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8ba44bef1db7b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (15)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

Observations

Hash

HTTP Transactions (9)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size