Report - ec2-server.bayaj19162.workers.dev/v7WhP8l4D/0

Report Overview

Visited public
2025-05-02 09:20:23
Tags
Submit Tags
URL
ec2-server.bayaj19162.workers.dev/v7WhP8l4D/0
Finishing URL
ec2-server.bayaj19162.workers.dev/v7WhP8l4D/0
IP / ASN
172.67.153.11
#13335 CLOUDFLARENET
Title
IIS7

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ec2-server.bayaj19162.workers.dev	unknown	2019-02-08	2025-05-02	2025-05-02	1.6 kB	189 kB	104.21.40.146

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-02 09:20:00	low	Client IP	104.21.40.146	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (3)

	URL	IP	Response	Size
	GET ec2-server.bayaj19162.workers.dev/v7WhP8l4D/0	104.21.40.146	200 OK	714 B
URL User Request GET ec2-server.bayaj19162.workers.dev/v7WhP8l4D/0 IP 104.21.40.146:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services Subjectbayaj19162.workers.dev FingerprintAB:AE:36:44:07:E4:C2:2B:38:3D:2C:BB:3E:D1:F7:AA:35:04:5D:FA ValiditySat, 19 Apr 2025 19:47:14 GMT - Fri, 18 Jul 2025 20:44:43 GMT File type HTML document, ASCII text, with CRLF line terminators Size 714 B (714 bytes) Hash 0e4a41431efbed33e4081352d95e41bd 0c39b4949947028e7357390e3b2163499e828df2 a0fead5739855354638feb2b2c642862ef33a4c0b6eaf70e21b2ad9af73a81df HTTP Headers `GET /v7WhP8l4D/0 HTTP/1.1 Host: ec2-server.bayaj19162.workers.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 02 May 2025 09:20:01 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VtvrNs%2Fq65KC6jApt1uioKo9Y2sElWZkZAovvs%2BDyKcTRVSuwypq0gGQ6Ir8PbDh8hHcdQIUQ6fwwPsORu8ExxP5OtzCqXxf77jYAmeFaYtgKZKNrX15mCPizaS9Aj0OyFzDGn%2B0neKioV8hdNVlNes0tIA%3D"}],"group":"cf-nel","max_age":604800} server: cloudflare cf-ray: 939670b50d67b515-OSL cf-cache-status: DYNAMIC content-encoding: br vary: accept-encoding x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET set-cookie: ASP.NET_SessionId=uEJeuOBACuMqPRoJvUqWtlGXZLbcIGsZ alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6115&min_rtt=464&rtt_var=11228&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3306&recv_bytes=1293&delivery_rate=5505703&cwnd=254&unsent_bytes=0&cid=d7969c3efdaf7b4c&ts=406&x=0" X-Firefox-Spdy: h2

	GET ec2-server.bayaj19162.workers.dev/v7WhP8l4D/welcome.png	104.21.40.146	200 OK	185 kB
URL GET ec2-server.bayaj19162.workers.dev/v7WhP8l4D/welcome.png IP 104.21.40.146:443 ASN #13335 CLOUDFLARENET Requested by https://ec2-server.bayaj19162.workers.dev/v7WhP8l4D/0 Certificate IssuerGoogle Trust Services Subjectbayaj19162.workers.dev FingerprintAB:AE:36:44:07:E4:C2:2B:38:3D:2C:BB:3E:D1:F7:AA:35:04:5D:FA ValiditySat, 19 Apr 2025 19:47:14 GMT - Fri, 18 Jul 2025 20:44:43 GMT File type PNG image data, 571 x 411, 8-bit/color RGB, non-interlaced Size 185 kB (184946 bytes) Hash 5aace0054fe556c7d8d17c0af33d679c 082c6818cb4ffd56c6b186f3c55602aef9a96ab5 eb3c273c1bc293445c9934abdcab79e9986aa67c866d7108ebbe920867182946 HTTP Headers GET /v7WhP8l4D/welcome.png HTTP/1.1 Host: ec2-server.bayaj19162.workers.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://ec2-server.bayaj19162.workers.dev/v7WhP8l4D/0 Cookie: ASP.NET_SessionId=uEJeuOBACuMqPRoJvUqWtlGXZLbcIGsZ Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Fri, 02 May 2025 09:20:01 GMT content-type: application/octet-stream report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VxWAr%2Faz%2BV5Xcl8BSyQuWfpTLb4vBa6zH8ixxWb31j%2Bwb4XB7Vq1GNl%2Fr5KFzastFKeV6r5M2LGK%2BYTAgth2MkOabpgZEn8iqnwweLbmk7ZCnVzi1VLJPdfaZbMELE24aDyyADqSWbOMwAoJXRzjbgkG07k%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} cf-ray: 939670b9fc32b515-OSL cf-cache-status: BYPASS content-disposition: attachment; filename=TBYetOhlSKcC server: cloudflare vary: Accept-Encoding x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET set-cookie: ASP.NET_SessionId=hUFOYKIQNUmSGVXIImzTpXhwbZaPRHbJ alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4242&min_rtt=407&rtt_var=7556&sent=11&recv=15&lost=0&retrans=0&sent_bytes=4380&recv_bytes=1503&delivery_rate=8865306&cwnd=257&unsent_bytes=0&cid=d7969c3efdaf7b4c&ts=943&x=0" X-Firefox-Spdy: h2

	GET ec2-server.bayaj19162.workers.dev/favicon.ico	104.21.40.146	200 OK	714 B
URL GET ec2-server.bayaj19162.workers.dev/favicon.ico IP 104.21.40.146:443 ASN #13335 CLOUDFLARENET Requested by https://ec2-server.bayaj19162.workers.dev/v7WhP8l4D/0 Certificate IssuerGoogle Trust Services Subjectbayaj19162.workers.dev FingerprintAB:AE:36:44:07:E4:C2:2B:38:3D:2C:BB:3E:D1:F7:AA:35:04:5D:FA ValiditySat, 19 Apr 2025 19:47:14 GMT - Fri, 18 Jul 2025 20:44:43 GMT File type HTML document, ASCII text, with CRLF line terminators Size 714 B (714 bytes) Hash 0e4a41431efbed33e4081352d95e41bd 0c39b4949947028e7357390e3b2163499e828df2 a0fead5739855354638feb2b2c642862ef33a4c0b6eaf70e21b2ad9af73a81df HTTP Headers `GET /favicon.ico HTTP/1.1 Host: ec2-server.bayaj19162.workers.dev User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Referer: https://ec2-server.bayaj19162.workers.dev/v7WhP8l4D/0 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin Pragma: no-cache Cache-Control: no-cache` HTTP/3 200 OK date: Fri, 02 May 2025 09:20:01 GMT content-type: text/html nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2aCW13PebqLeDy%2FRuYhwwcKtdN0vTjc84z9XmLdMX%2BLLGsmltdFKC%2BYu%2BAX6FGehzo%2F5DwisJ3FvJEqGzPJsOlCdwIM23d3SIZIPP0ML%2BLeqDFbD6wUHQwEe%2FpW%2Fw8jfzq8W3YXUNTGj4co00hi%2FO8VdjYM%3D"}],"group":"cf-nel","max_age":604800} cf-ray: 939670ba8d1e568e-OSL cf-cache-status: BYPASS set-cookie: ASP.NET_SessionId=HMflKlHsGFkINvQmKOFdXwwULLGYZWpq; vary: Accept-Encoding x-aspnet-version: 4.0.30319 x-powered-by: ASP.NET content-encoding: br server: cloudflare alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=QUIC&rtt=3641&min_rtt=701&rtt_var=3489&sent=204&recv=360&lost=0&retrans=0&sent_bytes=14274&recv_bytes=19538&delivery_rate=2244&cwnd=12000&unsent_bytes=0&cid=7712320c8fd8d596&ts=600&x=16"