Report - goto-desktop.goto.com/GoToSetup.exe

Report Overview

Visited public
2025-05-06 15:01:31
Tags
Submit Tags
URL
goto-desktop.goto.com/GoToSetup.exe
Finishing URL
about:privatebrowsing
IP / ASN
108.156.22.115
#16509 AMAZON-02
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
goto-desktop.goto.com	239691	unknown	No data	No data	503 B	749 kB	3.167.2.103

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
goto-desktop.goto.com/GoToSetup.exe
IP
3.167.2.103
ASN
#0

File type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
Size
748 kB (748528 bytes)
Hash
900e46dff16e74840de8364746bb6b29
0cfddb02c469e3a0ad9e21d64a2405ae23001763
8c99639eab971a5b99cb4f78cafa3175ec78577fd1a1c0ed6abe16971c6b7136

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	GET goto-desktop.goto.com/GoToSetup.exe	3.167.2.103	200 OK	748 kB
URL User Request GET goto-desktop.goto.com/GoToSetup.exe IP 3.167.2.103:443 ASN #0 Certificate IssuerAmazon Subjectgoto-desktop.goto.com Fingerprint35:3B:A6:18:10:F8:20:9B:97:8B:F7:81:E2:06:D2:20:8A:BE:55:EF ValiditySun, 23 Jun 2024 00:00:00 GMT - Mon, 21 Jul 2025 23:59:59 GMT File type PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size 748 kB (748528 bytes) Hash 900e46dff16e74840de8364746bb6b29 0cfddb02c469e3a0ad9e21d64a2405ae23001763 8c99639eab971a5b99cb4f78cafa3175ec78577fd1a1c0ed6abe16971c6b7136 HTTP Headers `GET /GoToSetup.exe HTTP/1.1 Host: goto-desktop.goto.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK content-type: application/octet-stream content-length: 748528 x-amz-id-2: 8enMckXWwebMLZCA2biWltawJTgDhoBXEj1RcYeHStZTHqdZuckXQumW141lW+mLLej90EgVYCc= x-amz-request-id: PK9DFHWH4TA3BKYC last-modified: Tue, 29 Apr 2025 01:22:54 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: uBPVf3bkQHV..At.YeH2VRBpxx3dCAiN accept-ranges: bytes server: AmazonS3 strict-transport-security: max-age=31536000; includeSubdomains x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-frame-options: SAMEORIGIN date: Tue, 06 May 2025 15:01:10 GMT etag: "900e46dff16e74840de8364746bb6b29" x-cache: RefreshHit from cloudfront via: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P2 alt-svc: h3=":443"; ma=86400 x-amz-cf-id: 5M2QS65pbJl9TmLALDaXz1mUul9e_hheHrMX3oPzpZDnVzfa9ByxuA== X-Firefox-Spdy: h2

GET goto-desktop.goto.com/GoToSetup.exe

3.167.2.103

200 OK

748 kB

URL User Request GET
goto-desktop.goto.com/GoToSetup.exe
IP
3.167.2.103:443
ASN
#0

Certificate
IssuerAmazon
Subjectgoto-desktop.goto.com
Fingerprint35:3B:A6:18:10:F8:20:9B:97:8B:F7:81:E2:06:D2:20:8A:BE:55:EF
ValiditySun, 23 Jun 2024 00:00:00 GMT - Mon, 21 Jul 2025 23:59:59 GMT

File type
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
Size
748 kB (748528 bytes)
Hash
900e46dff16e74840de8364746bb6b29
0cfddb02c469e3a0ad9e21d64a2405ae23001763
8c99639eab971a5b99cb4f78cafa3175ec78577fd1a1c0ed6abe16971c6b7136

HTTP Headers

GET /GoToSetup.exe HTTP/1.1
Host: goto-desktop.goto.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
content-length: 748528
x-amz-id-2: 8enMckXWwebMLZCA2biWltawJTgDhoBXEj1RcYeHStZTHqdZuckXQumW141lW+mLLej90EgVYCc=
x-amz-request-id: PK9DFHWH4TA3BKYC
last-modified: Tue, 29 Apr 2025 01:22:54 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: uBPVf3bkQHV..At.YeH2VRBpxx3dCAiN
accept-ranges: bytes
server: AmazonS3
strict-transport-security: max-age=31536000; includeSubdomains
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
date: Tue, 06 May 2025 15:01:10 GMT
etag: "900e46dff16e74840de8364746bb6b29"
x-cache: RefreshHit from cloudfront
via: 1.1 3bd19ecae9d202e55626096b4934d62e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5M2QS65pbJl9TmLALDaXz1mUul9e_hheHrMX3oPzpZDnVzfa9ByxuA==
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers