Report Overview

  1. Submitted URL

    lionpf.world/java/centos/33940/10032b.exe

  2. IP

    188.114.96.1

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2023-03-16 08:53:35

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    3

  3. Threat Detection Systems

    12

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-26T05:09:08Z
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-25T18:12:03Z
lionpf.worldunknown2023-03-09T14:34:34Z2023-03-20T09:11:55Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-25T18:14:26Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-26T05:11:12Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-26T05:11:59Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-26T05:10:29Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IP
mediumClient IPInternal IP
mediumClient IP 172.67.148.146

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumlionpf.world/java/centos/33940/10032b.exeMalware
mediumlionpf.world/java/centos/33940/10032b.exeMalware

mnemonic secure dns
SeverityIndicatorAlert
mediumlionpf.worldSinkholed
mediumlionpf.worldSinkholed

Quad9 DNS
SeverityIndicatorAlert
mediumlionpf.worldSinkholed
mediumlionpf.worldSinkholed

ThreatFox

No alerts detected


Files detected

  1. URL

    lionpf.world/java/centos/33940/10032b.exe

  2. IP

    104.21.29.71

  3. ASN

    #13335 CLOUDFLARENET

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows\012- data

    Size

    675 kB (675328 bytes)

  2. Hash

    488720af6f69c898d6d6395031aa85c3

    3fe4bc5bf1c4b247387f26b979b61f134f559c2d

    Detections

    AnalyzerVerdictAlert
    VirusTotal55/69

JavaScript (0)

HTTP Transactions (23)

URLIPResponseSize
lionpf.world/java/centos/33940/10032b.exe
172.67.148.146301 Moved Permanently0 B
lionpf.world/java/centos/33940/10032b.exe
104.21.29.71200 OK675 kB
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK939 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-09-20-28-26.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK329 B
push.services.mozilla.com/
52.35.3.113101 Switching Protocols0 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F28ea495a-9a14-4b7a-bf29-31b4af0b1307.jpeg
34.120.237.76200 OK8.0 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb35bbebd-fe94-4a9a-89ef-f9766e41b86e.png
34.120.237.76200 OK12 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b6c3da8-a84e-486b-9aa0-4b6deece3a55.jpeg
34.120.237.76200 OK9.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3457606a-172f-40ba-abde-a1c3b3b8e147.jpeg
34.120.237.76200 OK5.2 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdba7b21b-6f51-4226-9460-576fefa29780.jpeg
34.120.237.76200 OK7.7 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
34.120.237.76200 OK10 kB
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B
r3.o.lencr.org/
95.101.11.115200 OK503 B