Report - update.melissadata.com/8AC1dY/FONEData

Report Overview

Submitted URL
update.melissadata.com/8AC1dY/FONEData_202404.zip
IP
143.204.55.12
ASN
#16509 AMAZON-02
Submitted
2024-04-23 11:48:52
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
update.melissadata.com	unknown	2000-10-17	2014-10-08	2024-03-14	503 B	4.5 MB	143.204.55.8

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

Files detected

URL
update.melissadata.com/8AC1dY/FONEData_202404.zip
IP
143.204.55.8
ASN
#16509 AMAZON-02

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
4.5 MB (4524337 bytes)
Hash
7a34d7aec7bcecd6123791d2ebd0fdd1
27dfad8ac8c571a3655fb33a8e65d066f40fb44b
7af28a9250dc5338b59b258d3c9df66a3a41039e2a24254562059aa0672eb3a4

Archive (15)

Filename

Md5

File type

CNTY.DAT

ddc28e73734859594f422bd2eb082f31

ASCII text, with CRLF line terminators

CNTY.DBF

33f2263fc1863490ed1f5983e31ac7a6

FoxBase+/dBase III DBF, 3323 records * 136, update-date 24-3-16, codepage ID=0x3, at offset 577 1st record "01001AUTAUGA AL 6BPRATTVILLE C 1932.73 43671 596 16003 35221 7473 610 38260"

FDMan.pdf

e88a54c7f8d0b46fa7a0614fca8703d2

PDF document, version 1.6 (zip deflate encoded)

FONE.DAT

4356f617378b893387d957348bdf7fd9

ASCII text, with CRLF line terminators

FONE.DBF

0f5faa8a392008aa26e8deb87e81aa68

FoxBase+/dBase III DBF, 217329 records * 89, update-date 24-4-12, codepage ID=0x3, with index file .MDX, at offset 577 1st record "000000Updates Call 1-800-800-MAIL 0.0000 0.0000 C 0 0000000424-A (c) Melissa Data Corp 0"

HIST.DAT

73deb03b9a7815eff00b21aa4191481d

ASCII text, with CRLF line terminators

HIST.DBF

49959b8c46d2ee2785d2f993018d5a85

FoxBase+/dBase III DBF, 28595 records * 60, update-date 24-4-10, codepage ID=0x3, with index file .MDX, at offset 257 1st record "201200973JERSEY CITY NJ06/01/199712/06/1997 201203973MORRISTOWN NJ06/01/199712/06/1997 2012059"

LATA.DAT

fa02faa2a21f080731e7508ea01c39a9

ASCII text, with CRLF line terminators

LATA.DBF

860cd34106fdafca8d37c5ab73a4b1cc

FoxBase+/dBase III DBF, 216 records * 46, update-date 24-1-15, codepage ID=0x1, at offset 129 1st record "120MAMAINE 122NHNEW HAMPSHIRE 124VTVERMONT "

LICAGREE.PDF

9a5c3611a05dc9965af57da8db7d47ae

PDF document, version 1.4, 5 pages

MSA.DAT

5a1d3929aed6b2eef77953d4c0c14d4d

CSV text

MSA.DBF

f47a861beb75b12f57ce1c6d93e1ed26

FoxBase+/dBase III DBF, 357 records * 79, update-date 24-3-16, codepage ID=0x1, at offset 193 1st record "0040MSA ABILENE, TX 122478 0060MSA AGUADILLA, PR "

README.txt

722e4dc530e0036e3e50b661f12c1c8b

Unicode text, UTF-8 text, with CRLF line terminators

md5.txt

c5c32ae80fb7cc8f7e330eef2949f115

Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

setup.exe

df8df2b9484e63b4dbe42eff299fc02b

PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	update.melissadata.com/8AC1dY/FONEData_202404.zip	143.204.55.8	200 OK	4.5 MB
URL User Request GET HTTP/1.1 update.melissadata.com/8AC1dY/FONEData_202404.zip IP 143.204.55.8:443 ASN #16509 AMAZON-02 Certificate IssuerStarfield Technologies, Inc. Subjectupdate.melissadata.com Fingerprint7A:EF:CB:54:BA:AC:2D:55:11:13:DC:29:92:C8:25:BB:29:2E:A5:57 ValidityThu, 18 Jan 2024 12:48:29 GMT - Tue, 18 Feb 2025 12:48:29 GMT File type Zip archive data, at least v2.0 to extract, compression method=store Size 4.5 MB (4524337 bytes) Hash 7a34d7aec7bcecd6123791d2ebd0fdd1 27dfad8ac8c571a3655fb33a8e65d066f40fb44b 7af28a9250dc5338b59b258d3c9df66a3a41039e2a24254562059aa0672eb3a4 HTTP Headers `GET /8AC1dY/FONEData_202404.zip HTTP/1.1 Host: update.melissadata.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/1.1 200 OK Content-Type: application/x-zip-compressed Content-Length: 4524337 Connection: keep-alive Date: Tue, 23 Apr 2024 11:47:33 GMT Last-Modified: Sat, 20 Apr 2024 00:29:45 GMT ETag: "7a34d7aec7bcecd6123791d2ebd0fdd1" x-amz-server-side-encryption: AES256 x-amz-meta-cb-modifiedtime: Mon, 15 Apr 2024 19:00:00 GMT Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: e1M066MarRjQyFn7PRZQOkBEZ-bcP9P9CDbldSe1NkqU1oaSfdP-Rg== Age: 51

update.melissadata.com/8AC1dY/FONEData_202404.zip

143.204.55.8

200 OK

4.5 MB

URL User Request GET HTTP/1.1
update.melissadata.com/8AC1dY/FONEData_202404.zip
IP
143.204.55.8:443
ASN
#16509 AMAZON-02

Certificate
IssuerStarfield Technologies, Inc.
Subjectupdate.melissadata.com
Fingerprint7A:EF:CB:54:BA:AC:2D:55:11:13:DC:29:92:C8:25:BB:29:2E:A5:57
ValidityThu, 18 Jan 2024 12:48:29 GMT - Tue, 18 Feb 2025 12:48:29 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
4.5 MB (4524337 bytes)
Hash
7a34d7aec7bcecd6123791d2ebd0fdd1
27dfad8ac8c571a3655fb33a8e65d066f40fb44b
7af28a9250dc5338b59b258d3c9df66a3a41039e2a24254562059aa0672eb3a4

HTTP Headers

GET /8AC1dY/FONEData_202404.zip HTTP/1.1
Host: update.melissadata.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/x-zip-compressed
Content-Length: 4524337
Connection: keep-alive
Date: Tue, 23 Apr 2024 11:47:33 GMT
Last-Modified: Sat, 20 Apr 2024 00:29:45 GMT
ETag: "7a34d7aec7bcecd6123791d2ebd0fdd1"
x-amz-server-side-encryption: AES256
x-amz-meta-cb-modifiedtime: Mon, 15 Apr 2024 19:00:00 GMT
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: e1M066MarRjQyFn7PRZQOkBEZ-bcP9P9CDbldSe1NkqU1oaSfdP-Rg==
Age: 51

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (15)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers