Report - vault.idseal.com/IDSeal%20Pro-Tec.exe?aff_id=03966106?aff

Report Overview

Submitted URL
vault.idseal.com/IDSeal%20Pro-Tec.exe?aff_id=03966106?aff_id
IP
162.209.124.162
ASN
#27357 RACKSPACE
Submitted
2024-04-24 02:02:49
Access
public
Website Title
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
vault.idseal.com	unknown	2002-05-06	2023-03-28	2024-03-19	514 B	785 B	162.209.124.162
b88f8a769d8b21554d56-2c6ba6d7ccd00fce46cb24f68bdbb3e0.ssl.cf2.rackcdn.com	unknown	2010-12-15	2021-04-05	2024-03-19	574 B	44 MB	23.197.11.77

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
b88f8a769d8b21554d56-2c6ba6d7ccd00fce46cb24f68bdbb3e0.ssl.cf2.rackcdn.com//IDSeal%20Pro-Tec.exe?aff_id=03966106%3faff_id
IP
23.197.11.77
ASN
#16625 AKAMAI-AS

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections
Size
44 MB (44210304 bytes)
Hash
8079bb9b415c49a118a20abb645575b8
ceeac1700556c5689e7a25ffbfdddcf7861cb366
291627a3e28b78f2c1cb8f26755797f97c4c71241d9fbedabdd31a95c9a54aad

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/70

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

vault.idseal.com/IDSeal%20Pro-Tec.exe?aff_id=03966106?aff_id

162.209.124.162

379 B

URL
vault.idseal.com/IDSeal%20Pro-Tec.exe?aff_id=03966106?aff_id
IP
162.209.124.162:0
ASN
#27357 RACKSPACE

File type
HTML document, ASCII text
Size
379 B (379 bytes)
Hash
b0104223f2ae46fbb0daa42d51c893c7
124c100033dc97b4473de878ab1013267e4334b4
de19d7ac8d475916b751e79b3d95ccc4d7f2b890ae32ae1879a8e16136d66f0b

HTTP Headers

GET /IDSeal%20Pro-Tec.exe?aff_id=03966106?aff_id HTTP/1.1
Host: vault.idseal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Date: Wed, 24 Apr 2024 02:02:16 GMT
Server: Apache
X-Frame-Options: DENY, DENY, DENY, DENY, DENY, DENY, DENY, DENY, DENY
Location: https://b88f8a769d8b21554d56-2c6ba6d7ccd00fce46cb24f68bdbb3e0.ssl.cf2.rackcdn.com//IDSeal%20Pro-Tec.exe?aff_id=03966106%3faff_id
Content-Length: 379
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

b88f8a769d8b21554d56-2c6ba6d7ccd00fce46cb24f68bdbb3e0.ssl.cf2.rackcdn.com//IDSeal%20Pro-Tec.exe?aff_id=03966106%3faff_id

23.197.11.77

44 MB

URL User Request GET
b88f8a769d8b21554d56-2c6ba6d7ccd00fce46cb24f68bdbb3e0.ssl.cf2.rackcdn.com//IDSeal%20Pro-Tec.exe?aff_id=03966106%3faff_id
IP
23.197.11.77:0
ASN
#16625 AKAMAI-AS

Certificate
IssuerDigiCert Inc
Subject*.ssl.cf2.rackcdn.com
Fingerprint63:9D:6D:71:2B:2B:34:63:64:90:91:E7:7D:1C:A3:02:56:4E:EF:E7
ValidityFri, 24 Nov 2023 00:00:00 GMT - Wed, 27 Nov 2024 23:59:59 GMT

File type
PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections
Size
44 MB (44210304 bytes)
Hash
8079bb9b415c49a118a20abb645575b8
ceeac1700556c5689e7a25ffbfdddcf7861cb366
291627a3e28b78f2c1cb8f26755797f97c4c71241d9fbedabdd31a95c9a54aad

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/70

HTTP Headers

GET //IDSeal%20Pro-Tec.exe?aff_id=03966106%3faff_id HTTP/1.1
Host: b88f8a769d8b21554d56-2c6ba6d7ccd00fce46cb24f68bdbb3e0.ssl.cf2.rackcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Origin: https://mycloud.rackspace.com
Content-Length: 44210304
Accept-Ranges: bytes
Last-Modified: Tue, 12 Sep 2023 15:26:39 GMT
ETag: 8079bb9b415c49a118a20abb645575b8
X-Timestamp: 1694532398.26420
Content-Type: application/x-msdownload
X-Trans-Id: txde9bcc26f8d84409bd986-0066286829ord1
Cache-Control: public, max-age=259200
Expires: Sat, 27 Apr 2024 02:02:17 GMT
Date: Wed, 24 Apr 2024 02:02:17 GMT
Connection: keep-alive

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers