Report Overview

  1. Submitted URL

    belkin-living-assistant-glad.trycloudflare.com/Tax_docs_2023.zip

  2. IP

    104.16.230.132

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2024-04-17 09:05:52

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    7

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
belkin-living-assistant-glad.trycloudflare.comunknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumbelkin-living-assistant-glad.trycloudflare.com/Tax_docs_2023.zipDetects suspicious tiny ZIP files with phishing attachment characteristics
mediumbelkin-living-assistant-glad.trycloudflare.com/Tax_docs_2023.zipDetects suspicius tiny ZIP files with malicious lnk files

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    belkin-living-assistant-glad.trycloudflare.com/Tax_docs_2023.zip

  2. IP

    104.16.230.132

  3. ASN

    #13335 CLOUDFLARENET

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    1.1 kB (1094 bytes)

  2. Hash

    e9f5508fe69a27a1f1d5e15fd5d0dcdf

    f1e0665569c91f4fab29cde18f1db2f7a2035cc5

  1. Archive (1)

  2. FilenameMd5File type
    Tax_docs_2023.lnk
    8d657b0220932cf23214f0b72ceabebb
    MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=1, Archive, ctime=Sat May 8 08:14:16 2021, mtime=Sat May 8 08:14:16 2021, atime=Sat May 8 08:14:16 2021, length=331776, window=hidenormalshowminimized

    Detections

    AnalyzerVerdictAlert
    Public InfoSec YARA rulesmalware
    Identifies scripting artefacts in shortcut (LNK) files.
    Public InfoSec YARA rulesmalware
    Identifies executable artefacts in shortcut (LNK) files.
    Public InfoSec YARA rulesmalware
    Identifies execution artefacts in shortcut (LNK) files.
    Public Nextron YARA rulesmalware
    Detects suspicious tiny ZIP files with phishing attachment characteristics
    YARAhub by abuse.chmalware
    Detects suspicius tiny ZIP files with malicious lnk files

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
belkin-living-assistant-glad.trycloudflare.com/Tax_docs_2023.zip
104.16.230.132200 OK1.1 kB