- First seen
- Last seen
THREAT SIGNALBenign
VirusSign assessment
Indicator overview
INDICATOR PROFILEThe reported engine detection rate is 0%. This does not establish that the indicator is benign; review the available classification, relationship and historical evidence.
- Domain
- crt.sectigo.com
- TLD
- com
- Root domain
- sectigo.com
- Subdomain
- crt
- Resolved IP
- 2a06:98c1:3106::6812:26e9
- DGA risk
- low
- DGA score
- 26.0
- Domain age days
- 3011.0
- Registrar
- CSC Corporate Domains, Inc.
- Created
- 2018-08-16T17:53:22Z
Connected context
Key findings
OBSERVED EVIDENCEAnalysis takeaway
No detections were reported by the available engines. Review related indicators for additional context.
Detection signal
Reported 0% detection rate, not missing data. This alone does not establish that the indicator is benign.
Relationship context
15 related indicators are shown across 3 relationship group(s). Additional relationship intelligence is available through API and data access.
Analysis signals
OBSERVEDEngine detections0%
Relationship context15 visible
Intelligence freshnessFresh
Expand a connection to run an additional public query. This page allows up to 3 expansions; each counts toward your query limit.
Graph filters
Saved investigations
Compare when indicators were first seen, last seen and observed. Switch to Lifecycle to connect events for the same IOC.
Commonalities
RELATIONSHIP CONSTELLATION
No observations in this view
Available evidence appears in the other investigation lenses.
SELECT A NODE TO EXPLORE
FILEDOMAINIPURL
Visible connections
Related intelligence
Pivot across connected files and infrastructure with analysis signals and supporting context.
Related files
Files observed communicating with, containing, or otherwise linked to this indicator.
5shown
83%
critical
peexe
220942 bytes
communicates
Filename
2994ed41_1.exe.bin
Family
androm
Type
trojan
File type
peexe
MIME
application/vnd.microsoft.portable-executable
0%
pedll
29696 bytes
communicates
Filename
B9CE2A988D0DF65D72F23C257E173D9C6ABE18A436CCA1B0CDC4205EE489A348
Type
malware
File type
pedll
MIME
application/vnd.microsoft.portable-executable
Size
29696
87%
critical
peexe
245715 bytes
communicates
Filename
de344b83_dds.exe.bin
Family
zerber
Type
trojan
File type
peexe
MIME
application/vnd.microsoft.portable-executable
71%
high
doc
41472 bytes
communicates
Filename
b39dc939_17067.doc.bin
Family
w97m
Type
trojan
File type
doc
MIME
application/octet-stream
67%
critical
doc
41472 bytes
communicates
Filename
7ab9c37cb17eda2154d6eac528014c4d81fc501f4b72801ca5dae04331731fc6.doc
Family
w97m
Type
trojan
File type
doc
MIME
application/octet-stream
Related domains
Domains associated with this indicator.
5shown
0%
.com
contains
Root
sectigo.com
TLD
com
Subdomain
bessemer.crt
First seen
2024-02-11T15:27:50Z
Last seen
2024-02-11T15:27:50Z
0%
.com
contains
Root
sectigo.com
TLD
com
Subdomain
omitsecurity.crt
First seen
2024-02-13T03:44:17Z
Last seen
2024-02-13T03:44:17Z
0%
.com
contains
Root
sectigo.com
TLD
com
Subdomain
kica.crt
First seen
2024-02-13T07:50:27Z
Last seen
2024-02-13T07:50:27Z
0%
.com
contains
Root
sectigo.com
TLD
com
Subdomain
tfs.crt
First seen
2025-03-24T21:29:34Z
Last seen
2025-03-24T21:29:34Z
.com
contains
Root
sectigo.com
TLD
com
Subdomain
equifax.crt
First seen
2025-04-14T18:26:58Z
Last seen
2025-04-14T18:26:58Z
Related URLs
URLs associated with this indicator.
5shown
4%
low
contains
TLD
com
HTTP status
200
Content length
1629
Content SHA256
54126bb984b3e3635b91197633ecb4a898af2ff0781a7f33e9297365df6b3b0c
First seen
2024-06-07T18:19:24Z
0%
contains
TLD
com
HTTP status
200
Content length
1529
Content SHA256
5051bd69e19d6cd036147949ac5bbcf99834561f119f60dc7938248d61c77bbd
First seen
2019-07-09T07:14:17Z
0%
contains
TLD
com
HTTP status
200
Content length
940
Content SHA256
61e97375e9f6da982ff5c19e2f94e66c4e35b6837ce3b914d2245c7f5f65825f
First seen
2019-08-28T02:32:33Z
0%
contains
TLD
com
HTTP status
200
Content length
946
Content SHA256
3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1
First seen
2022-10-13T10:20:30Z
0%
contains
TLD
com
HTTP status
200
Content length
1565
Content SHA256
72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
First seen
2019-01-19T18:42:02Z
Analysis details
Freshness: Fresh · Last seen today.
- Detection rate
- 0%
- detection
- 0 · Engine detection rate; color may also reflect VirusSign confidence.
Overview
- Domain
- crt.sectigo.com
- TLD
- com
- Root domain
- sectigo.com
- Subdomain
- crt
- Resolved IP
- 2a06:98c1:3106::6812:26e9
- DGA risk
- low
- DGA score
- 26.0
- Domain age days
- 3011.0
- Registrar
- CSC Corporate Domains, Inc.
- Created
- 2018-08-16T17:53:22Z
- Expiry
- 2028-11-01T04:02:00Z
- First seen
- 2023-09-30T15:21:00Z
- Last seen
- 2026-11-14T02:46:26Z
Key findings
A focused interpretation of the evidence, relationships and observation history that matter most.
Analysis takeaway
No detections were reported by the available engines. Review related indicators for additional context.
Detection signal
Reported 0% detection rate, not missing data. This alone does not establish that the indicator is benign.
Relationship context
15 related indicators are shown across 3 relationship group(s). Additional relationship intelligence is available through API and data access.
Observation timeline
16 timestamped observations are arranged from 2014-05-11 to 2025-04-14. These are observation or metadata times, not execution order.
Why this verdict
Review the reported detections, analysis confidence and supporting context.
The reported engine detection rate is 0%. This does not establish that the indicator is benign; review the available classification, relationship and historical evidence.
Reported 0% detection rate, not missing data. This alone does not establish that the indicator is benign.
3 relationship group(s) provide pivot and infrastructure context.
Last seen today.
Signals reflect the intelligence returned in this report. Missing values mean not reported, not zero. Related indicators are investigation leads, not proof of shared malicious activity.
Domain profile
summarySelected domain intelligence summary.
- Root domain
- sectigo.com
- Subdomain
- crt
- Resolved IP
- 2a06:98c1:3106::6812:26e9
- DGA risk
- low
- DGA score
- 26.0
- Domain age days
- 3011.0
- Registrar
- CSC Corporate Domains, Inc.
- Created
- 2018-08-16T17:53:22Z
- Expiry
- 2028-11-01T04:02:00Z
Infrastructure
selected detailsSelected observations and details. Additional structured data are available through API and data access.
DNS intelligence5+
0 IPs0 domains
- 5 passive DNS records
- 1 DNS records
- 0 unique IPs
- 0 related domains
View details · 3 shown
- Type
- A
- Type
- AAAA
- Type
- CNAME