Report - dl.kpsbots.workers.dev/dl/669de1141018ea6799cfe5a8

Report Overview

Visited public
2024-07-22 04:34:20
Tags
URL
dl.kpsbots.workers.dev/dl/669de1141018ea6799cfe5a8
Finishing URL
about:privatebrowsing
IP / ASN
188.114.97.1
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-07-21 18:21:45	2.9 kB	8.0 kB	23.36.76.226
dl.kpsbots.workers.dev	unknown	unknown	No data	No data	504 B	1.7 MB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-07-22 04:33:51	low	Client IP	188.114.96.1	ET INFO Observed Cloudflare workers.dev Domain in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
dl.kpsbots.workers.dev/dl/669de1141018ea6799cfe5a8
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.7 MB (1739088 bytes)
Hash
d61f47619145f0072a72b2d833751224
ee289ef93e29dda972a17a9d57bc35143cb967e8
9862016d38b8e702047a7b65103efee110b98a36389a2ecd20876110e1365e7e

Archive (15)

Modified	Filename	Size	Md5	File type
2023-12-11 08:32	-6316852709013174863_121.jpg	194 kB	30e9ee645582bbddabbb6d6bb035364f	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 748x1280, components 3
2023-12-11 08:32	-6316852709013174864_121.jpg	115 kB	5187975d9669d4f31dae1b82a0704e5b	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 738x1280, components 3
2023-12-11 08:32	-6316852709013174865_121.jpg	107 kB	dca2290233b5e2c05d2e9c00113e1976	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 742x1280, components 3
2023-12-11 08:32	-6316852709013174866_121.jpg	103 kB	7f53f1e9556069c63b9ebf80c53e3b5f	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 718x1280, components 3
2023-12-11 08:32	-6316852709013174867_121.jpg	104 kB	bab9191f9e34cd5e46588d8f52e415fe	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 747x1280, components 3
2023-12-11 08:32	-6316852709013174868_121.jpg	120 kB	5da3370305f212fcd23a726f6f500723	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 743x1280, components 3
2023-12-11 08:32	-6316852709013174869_121.jpg	126 kB	9a5902135b921ef904bc9d85ec6c63e3	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 719x1280, components 3
2023-12-11 08:32	-6316852709013174870_121.jpg	101 kB	0149829c31a18ad813124aa80ba935d3	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 696x1280, components 3
2023-12-11 08:32	-6316852709013174871_121.jpg	109 kB	c5ccb4173862fb62efcc2f7fdb22c938	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 746x1280, components 3
2023-12-11 08:32	-6316852709013174872_121.jpg	124 kB	4073b6243e879de7d757524ea61d146f	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 727x1280, components 3
2023-12-11 08:32	-6316852709013174873_121.jpg	95 kB	60775c4963ffa3dfbe9633c334b7fb76	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1036x1280, components 3
2023-12-11 08:32	-6316852709013174874_121.jpg	115 kB	35942f7baa2c9228204442f8f756f877	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 731x1280, components 3
2023-12-11 08:32	-6316852709013174875_121.jpg	144 kB	7af24501dd8793fe5b60743a700e33b2	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 996x1280, components 3
2023-12-11 08:32	-6316852709013174876_121.jpg	110 kB	04ee3580a5196d586f0b2db15cc7c3e2	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 727x1280, components 3
2023-12-11 08:32	-6316852709013174877_121.jpg	107 kB	43b38391ee619bcec1266526c71e1f23	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 750x1280, components 3

JavaScript (0)

HTTP Transactions (10)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 3bd6a6d19bf0ab70e4e0cd3d2833afe1 0dd2ee68cf939d2482a9b30bf767f412eb97e492 23c60c02f8a6f1f7fe01f9f4661cf04a03c046522201927dfa7c51ceba6c5449 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "23C60C02F8A6F1F7FE01F9F4661CF04A03C046522201927DFA7C51CEBA6C5449" Last-Modified: Sat, 20 Jul 2024 20:21:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=7637 Expires: Mon, 22 Jul 2024 06:41:07 GMT Date: Mon, 22 Jul 2024 04:33:50 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 2f796f6340ac7eef4fa2891ac8f8aa1a 27bbc7bb6314b31dcab89f198bc258b040593aa7 778d02decabf7dff03bf5ec4c4eb0f03ac789e89bcfe58353c266c9d66c08834 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "778D02DECABF7DFF03BF5EC4C4EB0F03AC789E89BCFE58353C266C9D66C08834" Last-Modified: Sat, 20 Jul 2024 19:16:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3058 Expires: Mon, 22 Jul 2024 05:24:48 GMT Date: Mon, 22 Jul 2024 04:33:50 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash cf41dddde2cb04d4f8b233b01318bde1 f7f9259cebf98c255ea506e7d7f0170c1e6a9604 90a7510dc4acc5716c9a82e10dcbb6074af14f502e3847f8b6c43caef244ca12 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "90A7510DC4ACC5716C9A82E10DCBB6074AF14F502E3847F8B6C43CAEF244CA12" Last-Modified: Sat, 20 Jul 2024 20:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3069 Expires: Mon, 22 Jul 2024 05:24:59 GMT Date: Mon, 22 Jul 2024 04:33:50 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.76.226		504 B
URL r10.o.lencr.org/ IP 23.36.76.226:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 00accea3155d7ac730285aec633670a9 fee8ca25b96d24d0c10951f7f4ea28389020e88d 9abd3b5f4de73d55417dcec4bbf72b38cc201842360ed32d763a4c65e35819d8 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "9ABD3B5F4DE73D55417DCEC4BBF72B38CC201842360ED32D763A4C65E35819D8" Last-Modified: Sat, 20 Jul 2024 20:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=3169 Expires: Mon, 22 Jul 2024 05:26:40 GMT Date: Mon, 22 Jul 2024 04:33:51 GMT Connection: keep-alive`

	dl.kpsbots.workers.dev/dl/669de1141018ea6799cfe5a8	188.114.96.1	200 OK	1.7 MB
URL User Request GET HTTP/2 dl.kpsbots.workers.dev/dl/669de1141018ea6799cfe5a8 IP 188.114.96.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjectkpsbots.workers.dev FingerprintFC:14:7A:F4:3B:B6:99:F3:30:59:22:76:C2:9A:38:36:70:06:88:DE ValiditySat, 25 May 2024 17:04:34 GMT - Fri, 23 Aug 2024 17:04:33 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 1.7 MB (1739088 bytes) Hash d61f47619145f0072a72b2d833751224 ee289ef93e29dda972a17a9d57bc35143cb967e8 9862016d38b8e702047a7b65103efee110b98a36389a2ecd20876110e1365e7e HTTP Headers `GET /dl/669de1141018ea6799cfe5a8 HTTP/1.1 Host: dl.kpsbots.workers.dev User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Mon, 22 Jul 2024 04:33:51 GMT content-type: application/zip content-length: 1739088 content-range: bytes 0-1739087/1739088 cf-ray: 8a70b7071ced0b41-OSL cf-cache-status: DYNAMIC accept-ranges: bytes content-disposition: attachment; filename="younggirlselfie.zip" via: 1.1 vegur cf-placement: local-OSL nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} report-to: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1721622831&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=NkDTOs1jDWCxkvZiB4XqQNdMHALci8xQGBgW7cChFAo%3D"}]} reporting-endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1721622831&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=NkDTOs1jDWCxkvZiB4XqQNdMHALci8xQGBgW7cChFAo%3D vary: Accept-Encoding server: cloudflare alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 92fe046ed30974fab002b18924562af5 a80246a7f4813076cea6cc1629667b43a094fa97 151d89929b8b12751f94a9dd4fab74f68f20aa29ca5135a3b95aea9f366a34e7 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "151D89929B8B12751F94A9DD4FAB74F68F20AA29CA5135A3B95AEA9F366A34E7" Last-Modified: Sat, 20 Jul 2024 20:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6315 Expires: Mon, 22 Jul 2024 06:19:07 GMT Date: Mon, 22 Jul 2024 04:33:52 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 92fe046ed30974fab002b18924562af5 a80246a7f4813076cea6cc1629667b43a094fa97 151d89929b8b12751f94a9dd4fab74f68f20aa29ca5135a3b95aea9f366a34e7 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "151D89929B8B12751F94A9DD4FAB74F68F20AA29CA5135A3B95AEA9F366A34E7" Last-Modified: Sat, 20 Jul 2024 20:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6315 Expires: Mon, 22 Jul 2024 06:19:07 GMT Date: Mon, 22 Jul 2024 04:33:52 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 92fe046ed30974fab002b18924562af5 a80246a7f4813076cea6cc1629667b43a094fa97 151d89929b8b12751f94a9dd4fab74f68f20aa29ca5135a3b95aea9f366a34e7 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "151D89929B8B12751F94A9DD4FAB74F68F20AA29CA5135A3B95AEA9F366A34E7" Last-Modified: Sat, 20 Jul 2024 20:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6315 Expires: Mon, 22 Jul 2024 06:19:07 GMT Date: Mon, 22 Jul 2024 04:33:52 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 92fe046ed30974fab002b18924562af5 a80246a7f4813076cea6cc1629667b43a094fa97 151d89929b8b12751f94a9dd4fab74f68f20aa29ca5135a3b95aea9f366a34e7 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "151D89929B8B12751F94A9DD4FAB74F68F20AA29CA5135A3B95AEA9F366A34E7" Last-Modified: Sat, 20 Jul 2024 20:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6315 Expires: Mon, 22 Jul 2024 06:19:07 GMT Date: Mon, 22 Jul 2024 04:33:52 GMT Connection: keep-alive`

	r10.o.lencr.org/	23.36.77.32		504 B
URL r10.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 92fe046ed30974fab002b18924562af5 a80246a7f4813076cea6cc1629667b43a094fa97 151d89929b8b12751f94a9dd4fab74f68f20aa29ca5135a3b95aea9f366a34e7 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "151D89929B8B12751F94A9DD4FAB74F68F20AA29CA5135A3B95AEA9F366A34E7" Last-Modified: Sat, 20 Jul 2024 20:19:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6315 Expires: Mon, 22 Jul 2024 06:19:07 GMT Date: Mon, 22 Jul 2024 04:33:52 GMT Connection: keep-alive`

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (15)

JavaScript (0)

HTTP Transactions (10)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL