Report Overview

  1. Submitted URL

    d3jjyqr6v5bh5n.cloudfront.net/windows/letsvpn-latest.exe?shortlink=rin2hr10&c=anti-lost-windows&pid=referral&source_caller=ui

  2. IP

    143.204.42.2

    ASN

    #16509 AMAZON-02

  3. Submitted

    2024-04-17 01:15:30

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
d3jjyqr6v5bh5n.cloudfront.netunknown2008-04-252023-01-262024-03-26

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    d3jjyqr6v5bh5n.cloudfront.net/windows/letsvpn-latest.exe?shortlink=rin2hr10&c=anti-lost-windows&pid=referral&source_caller=ui

  2. IP

    143.204.42.31

  3. ASN

    #16509 AMAZON-02

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

    Size

    15 MB (15334608 bytes)

  2. Hash

    791aaf0d1b48f46d89d83c6c7c54c8c3

    bd4a7900a984f47d8a3edc3e94c97afeb9041737

    Detections

    AnalyzerVerdictAlert
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
d3jjyqr6v5bh5n.cloudfront.net/windows/letsvpn-latest.exe?shortlink=rin2hr10&c=anti-lost-windows&pid=referral&source_caller=ui
143.204.42.31 15 MB