Report - www.seedr.cc/download/archive/41cc9b6b24e5f572f556e126aa0be783c75655c0c41a5f84da4404519d9d0ac7?token=0d7c789bae35fdb856fc70ca07fe2db388259eb41fba1a8a21ae6e70036178bc&exp=1704033202

Report Overview

Visited public
2023-12-30 14:34:17
Tags
URL
www.seedr.cc/download/archive/41cc9b6b24e5f572f556e126aa0be783c75655c0c41a5f84da4404519d9d0ac7?token=0d7c789bae35fdb856fc70ca07fe2db388259eb41fba1a8a21ae6e70036178bc&exp=1704033202
Finishing URL
about:privatebrowsing
IP / ASN
95.211.204.172
#60781 LeaseWeb Netherlands B.V.
Title
about:privatebrowsing

Detections

urlquery

0

Network Intrusion Detection

6

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.seedr.cc	684289	2015-08-16	2015-08-31 21:02:12	2023-11-30 14:55:08	646 B	18 MB	95.211.204.172
de22.seedr.cc	unknown	2015-08-16	2022-06-27 17:46:54	2023-09-18 23:54:51	580 B	18 MB	138.201.64.25

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-30 14:33:48	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-12-30 14:33:48	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-12-30 14:33:48	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-12-30 14:33:48	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-12-30 14:33:48	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-12-30 14:33:48	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	www.seedr.cc/download/archive/41cc9b6b24e5f572f556e126aa0be783c75655c0c41a5f84da4404519d9d0ac7?token=0d7c789bae35fdb856fc70ca07fe2db388259eb41fba1a8a21ae6e70036178bc&exp=1704033202	95.211.204.172	302 Found	18 MB
URL User Request GET HTTP/2 www.seedr.cc/download/archive/41cc9b6b24e5f572f556e126aa0be783c75655c0c41a5f84da4404519d9d0ac7?token=0d7c789bae35fdb856fc70ca07fe2db388259eb41fba1a8a21ae6e70036178bc&exp=1704033202 IP 95.211.204.172:443 ASN #60781 LeaseWeb Netherlands B.V. Certificate IssuerSectigo Limited Subject.seedr.cc FingerprintCF:20:8E:7C:47:82:3B:33:47:8B:79:99:54:D0:9C:63:4D:5E:4E:51 ValidityFri, 06 Oct 2023 00:00:00 GMT - Tue, 05 Nov 2024 23:59:59 GMT File type data Size 18 MB (18310928 bytes) Hash ee7b2ae40041b5e8b76b5652bf5f075f a076ca058299a4ae1e1ac8fe7b0d22cfdbea8f0e 85c591a56d2e7e1566c4558316f52e69caf6459bd078dfed1103243af2514e9a HTTP Headers GET /download/archive/41cc9b6b24e5f572f556e126aa0be783c75655c0c41a5f84da4404519d9d0ac7?token=0d7c789bae35fdb856fc70ca07fe2db388259eb41fba1a8a21ae6e70036178bc&exp=1704033202 HTTP/1.1 Host: www.seedr.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 302 Found server: nginx date: Sat, 30 Dec 2023 14:33:49 GMT content-type: application/json location: https://de22.seedr.cc/get_zip_ngen_free/4164778/Tally%20ERP%209%20%20%20Crack.zip?st=2Mq0a-73OpY5Wxb8zZlEBw&e=1704033223 strict-transport-security: max-age=31536000; includeSubdomains; preload X-Firefox-Spdy: h2`

	de22.seedr.cc/get_zip_ngen_free/4164778/Tally%20ERP%209%20%20%20Crack.zip?st=2Mq0a-73OpY5Wxb8zZlEBw&e=1704033223	138.201.64.25	200 OK	18 MB
URL User Request GET HTTP/2 de22.seedr.cc/get_zip_ngen_free/4164778/Tally%20ERP%209%20%20%20Crack.zip?st=2Mq0a-73OpY5Wxb8zZlEBw&e=1704033223 IP 138.201.64.25:443 ASN #24940 Hetzner Online GmbH Certificate IssuerSectigo Limited Subject.seedr.cc FingerprintCF:20:8E:7C:47:82:3B:33:47:8B:79:99:54:D0:9C:63:4D:5E:4E:51 ValidityFri, 06 Oct 2023 00:00:00 GMT - Tue, 05 Nov 2024 23:59:59 GMT File type Size 18 MB (18310927 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /get_zip_ngen_free/4164778/Tally%20ERP%209%20%20%20Crack.zip?st=2Mq0a-73OpY5Wxb8zZlEBw&e=1704033223 HTTP/1.1 Host: de22.seedr.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK date: Sat, 30 Dec 2023 14:33:49 GMT content-type: application/zip content-length: 18310927 last-modified: Thu, 01 Jan 1970 00:00:00 GMT content-disposition: attachment cache-control: max-age=0 accept-ranges: bytes X-Firefox-Spdy: h2`