Report - worker-jolly-truth-609b.kecocef728.workers.dev/730b94abfe2ce87f59ae796891fff34b1f2ace496634c492cc2a6bcd0f35a4c3dcaa6fd7aec529c7d183bfb14c45a822c54154f6bf0eac02e22c67050f8124dc847bad6aa457ff426344525ddb751800302d767abe1e1513eb3cbaeab3dd8fd4d7d9f81b9bccf8463335bc8808035840fa1f5b506a7c28e49918f6736263ea31fdc79f8e1c5f74cbf8541b81d5072c3fffc0c8c72bdfb812af500737f8eee361dea2ac4485559b2b4f6a665e792ac41d::e142d72cf22a320a20195865a5757b46/GamesLeech.com.Call.of.Duty.WWII.zip

Report Overview

Visitedpublic

2024-12-20 11:19:40

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
worker-jolly-truth-609b.kecocef728.workers.dev	unknown	2019-02-08	2024-12-20	2024-12-20	926 B	688 MB	172.67.144.193

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-12-20 11:19:12	high	Client IP	47.106.66.102	ET MALWARE Single char EXE direct download likely trojan (multiple families)
2024-12-20 11:19:12	medium	Client IP	47.106.66.102	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile
2024-12-20 11:19:15	low	Client IP	172.67.144.193	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI
2024-12-20 11:19:22	high	Client IP	47.106.66.102	ET MALWARE Single char EXE direct download likely trojan (multiple families)
2024-12-20 11:19:22	medium	Client IP	47.106.66.102	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	GET worker-jolly-truth-609b.kecocef728.workers.dev/730b94abfe2ce87f59ae796891fff34b1f2ace496634c492cc2a6bcd0f35a4c3dcaa6fd7aec529c7d183bfb14c45a822c54154f6bf0eac02e22c67050f8124dc847bad6aa457ff426344525ddb751800302d767abe1e1513eb3cbaeab3dd8fd4d7d9f81b9bccf8463335bc8808035840fa1f5b506a7c28e49918f6736263ea31fdc79f8e1c5f74cbf8541b81d5072c3fffc0c8c72bdfb812af500737f8eee361dea2ac4485559b2b4f6a665e792ac41d::e142d72cf22a320a20195865a5757b46/GamesLeech.com.Call.of.Duty.WWII.zip	172.67.144.193	200 OK	688 MB
URL User Request GET HTTPS worker-jolly-truth-609b.kecocef728.workers.dev/730b94abfe2ce87f59ae796891fff34b1f2ace496634c492cc2a6bcd0f35a4c3dcaa6fd7aec529c7d183bfb14c45a822c54154f6bf0eac02e22c67050f8124dc847bad6aa457ff426344525ddb751800302d767abe1e1513eb3cbaeab3dd8fd4d7d9f81b9bccf8463335bc8808035840fa1f5b506a7c28e49918f6736263ea31fdc79f8e1c5f74cbf8541b81d5072c3fffc0c8c72bdfb812af500737f8eee361dea2ac4485559b2b4f6a665e792ac41d::e142d72cf22a320a20195865a5757b46/GamesLeech.com.Call.of.Duty.WWII.zip IP / ASN 172.67.144.193 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-08 Times Seen5720669 Size688 MB (687634344 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectkecocef728.workers.dev FingerprintEA:2F:93:A1:D0:9F:50:0F:A1:D1:CD:DB:BF:60:32:AF:73:89:70:38 ValidityThu, 21 Nov 2024 00:23:35 GMT - Wed, 19 Feb 2025 00:23:34 GMT HTTP Headers GET /730b94abfe2ce87f59ae796891fff34b1f2ace496634c492cc2a6bcd0f35a4c3dcaa6fd7aec529c7d183bfb14c45a822c54154f6bf0eac02e22c67050f8124dc847bad6aa457ff426344525ddb751800302d767abe1e1513eb3cbaeab3dd8fd4d7d9f81b9bccf8463335bc8808035840fa1f5b506a7c28e49918f6736263ea31fdc79f8e1c5f74cbf8541b81d5072c3fffc0c8c72bdfb812af500737f8eee361dea2ac4485559b2b4f6a665e792ac41d::e142d72cf22a320a20195865a5757b46/GamesLeech.com.Call.of.Duty.WWII.zip HTTP/1.1 Host: worker-jolly-truth-609b.kecocef728.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Fri, 20 Dec 2024 11:19:15 GMT content-type: application/x-zip content-length: 117991285948 cf-ray: 8f4f3c81af1e0b55-OSL cf-cache-status: DYNAMIC accept-ranges: bytes cache-control: public, max-age=3600 content-disposition: attachment; filename=GamesLeech.com.Call.of.Duty.WWII.zip etag: "c3297bb7890c718cbe36fea5f9d86746" expires: Fri, 20 Dec 2024 12:19:15 GMT last-modified: Thu, 19 Dec 2024 12:18:39 GMT alt-svc: h3=":443"; ma=86400 report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TDZjbp%2B1679qscD9zMEaUPRiANvZfdwO%2BZlvT81pch7pgWC7P8ezQmuQh0IQ1aBSA3Wlblcxuhc%2FL6Qzco2qtbcj5aGGZ2y7GTR4HDVprgTK923qXUvPoHkjDy29XbZllnrDRhSMr0EjMx4hnOHxs%2BVjc4f9%2BpCiSza5jq7Ld%2FEC"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare server-timing: cfL4;desc="?proto=TCP&rtt=6343&min_rtt=469&rtt_var=11636&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3227&recv_bytes=1441&delivery_rate=7288590&cwnd=254&unsent_bytes=0&cid=c7ded48c247fbfac&ts=489&x=0" X-Firefox-Spdy: h2

GET worker-jolly-truth-609b.kecocef728.workers.dev/730b94abfe2ce87f59ae796891fff34b1f2ace496634c492cc2a6bcd0f35a4c3dcaa6fd7aec529c7d183bfb14c45a822c54154f6bf0eac02e22c67050f8124dc847bad6aa457ff426344525ddb751800302d767abe1e1513eb3cbaeab3dd8fd4d7d9f81b9bccf8463335bc8808035840fa1f5b506a7c28e49918f6736263ea31fdc79f8e1c5f74cbf8541b81d5072c3fffc0c8c72bdfb812af500737f8eee361dea2ac4485559b2b4f6a665e792ac41d::e142d72cf22a320a20195865a5757b46/GamesLeech.com.Call.of.Duty.WWII.zip

172.67.144.193

200 OK

688 MB

URL User Request GET HTTPS

IP / ASN

172.67.144.193

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-08

Times Seen5720669

Size688 MB (687634344 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate Info

IssuerGoogle Trust Services

Subjectkecocef728.workers.dev

FingerprintEA:2F:93:A1:D0:9F:50:0F:A1:D1:CD:DB:BF:60:32:AF:73:89:70:38

ValidityThu, 21 Nov 2024 00:23:35 GMT - Wed, 19 Feb 2025 00:23:34 GMT

HTTP Headers

GET /730b94abfe2ce87f59ae796891fff34b1f2ace496634c492cc2a6bcd0f35a4c3dcaa6fd7aec529c7d183bfb14c45a822c54154f6bf0eac02e22c67050f8124dc847bad6aa457ff426344525ddb751800302d767abe1e1513eb3cbaeab3dd8fd4d7d9f81b9bccf8463335bc8808035840fa1f5b506a7c28e49918f6736263ea31fdc79f8e1c5f74cbf8541b81d5072c3fffc0c8c72bdfb812af500737f8eee361dea2ac4485559b2b4f6a665e792ac41d::e142d72cf22a320a20195865a5757b46/GamesLeech.com.Call.of.Duty.WWII.zip HTTP/1.1
Host: worker-jolly-truth-609b.kecocef728.workers.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 20 Dec 2024 11:19:15 GMT
content-type: application/x-zip
content-length: 117991285948
cf-ray: 8f4f3c81af1e0b55-OSL
cf-cache-status: DYNAMIC
accept-ranges: bytes
cache-control: public, max-age=3600
content-disposition: attachment; filename=GamesLeech.com.Call.of.Duty.WWII.zip
etag: "c3297bb7890c718cbe36fea5f9d86746"
expires: Fri, 20 Dec 2024 12:19:15 GMT
last-modified: Thu, 19 Dec 2024 12:18:39 GMT
alt-svc: h3=":443"; ma=86400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TDZjbp%2B1679qscD9zMEaUPRiANvZfdwO%2BZlvT81pch7pgWC7P8ezQmuQh0IQ1aBSA3Wlblcxuhc%2FL6Qzco2qtbcj5aGGZ2y7GTR4HDVprgTK923qXUvPoHkjDy29XbZllnrDRhSMr0EjMx4hnOHxs%2BVjc4f9%2BpCiSza5jq7Ld%2FEC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
server-timing: cfL4;desc="?proto=TCP&rtt=6343&min_rtt=469&rtt_var=11636&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3227&recv_bytes=1441&delivery_rate=7288590&cwnd=254&unsent_bytes=0&cid=c7ded48c247fbfac&ts=489&x=0"
X-Firefox-Spdy: h2