Indicator dalsanltd.so Type domain Category Lure Page Confidence high VT Score 0/94 Source urlscan First Seen 2026-05-03 00:00:49 UTC Last Seen 2026-05-06 08:00:41 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 0,
    "malicious": false,
    "urlscan": {
      "malicious": false
    },
    "engines": {
      "score": 98,
      "malicious": true,
      "hasVerdicts": true,
      "tags": [
        "urlscan-ml",
        "urlscan-ml-60c5e22"
      ]
    }
  },
  "submitter": {
    "country": "us"
  },
  "dom": {
    "size": 11324,
    "hash": "4b0a36dad3f252dda80aa431af9f34df62bc8ef20810c523e957fa196b39ef46"
  },
  "visible": {
    "brandname": "DocuSign"
  },
  "frames": {
    "length": 2
  },
  "usertags": [
    "public.scam"
  ],
  "canonical": {
    "task": {
      "url": "dalsanltd.so/sba/sos/excel/Windows"
    },
    "page": {
      "url": "dalsanltd.so/sba/sos/excel/Windows/invite.php"
    }
  },
  "screenshot": "https://urlscan.io/screenshots/019dcf41-f8e4-71a3-9cf3-82164aafabc4.png",
  "labels": [
    "visual.brandai"
  ],
  "task": {
    "visibility": "unlisted",
    "method": "api",
    "domain": "dalsanltd.so",
    "apexDomain": "dalsanltd.so",
    "time": "2026-04-27T14:05:07.790Z",
    "uuid": "019dcf41-f8e4-71a3-9cf3-82164aafabc4",
    "url": "http://dalsanltd.so/sba/sos/excel/Windows",
    "tags": [
      "sentinel",
      "automated"
    ]
  },
  "stats": {
    "uniqIPs": 8,
    "uniqCountries": 6,
    "dataLength": 264315,
    "encodedDataLength": 198570,
    "requests": 13
  },
  "meta": [],
  "scanner": {
    "country": "fi"
  },
  "files": [
    {
      "filename": "ScreenConnect.ClientSetup.msi",
      "sha256": "fbe83cfa2214d92ce70e953d85946396efb02787c6b9bf3f9948ba93ad1192af",
      "filesize": 10190848,
      "state": "completed",
      "mimeType": "application/x-msi",
      "mimeDescription": "Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Default, Author: ScreenConnect Software, Keywords: Default, Comments: Default, Template: Intel;1033, Revision Number: {36F8F0EA-E82F-5E7B-5D07-FA16B0B7DB7F}, Create Time/Date: Tue Mar 24 22:10:14 2026, Last Saved Time/Date: Tue Mar 24 22:10:14 2026, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.0.1701), Security: 2",
      "url": "https://kishorganjcadetacademy.com/scn/ScreenConnect.ClientSetup.msi"
    }
  ],
  "links": {
    "length": 0
  },
  "page": {
    "country": "FI",
    "server": "Apache",
    "redirected": "same-domain",
    "ip": "65.108.230.52",
    "apexDomainAgeDays": 1724,
    "language": "en",
    "mimeType": "text/html",
    "title": "e-sign",
    "url": "https://dalsanltd.so/sba/sos/excel/Windows/invite.php",
    "tlsValidDays": 89,
    "tlsAgeDays": 30,
    "ptr": "baal.hawdweb.com",
    "domainAgeDays": 1724,
    "tlsValidFrom": "2026-03-28T11:34:53.000Z",
    "domain": "dalsanltd.so",
    "apexDomain": "dalsanltd.so",
    "asnname": "HETZNER-AS Hetzner Online GmbH, DE",
    "asn": "AS24940",
    "tlsIssuer": "R13",
    "status": "200"
  },
  "text": {
    "size": 4946,
    "hash": "4652e58c2d5f2f74f359942ec77ee714a8f5627359fc44669af46d83c2b92bf3"
  },
  "_id": "019dcf41-f8e4-71a3-9cf3-82164aafabc4",
  "_score": null,
  "sort": [
    1777298707790,
    "019dcf41-f8e4-71a3-9cf3-82164aafabc4"
  ],
  "image": {
    "size": 98601,
    "width": 1600,
    "hash": "5c4b6b1ca79bcc85b48d4c137a4ff77ddedcf1143b1fda76614adaf2004bbafc",
    "height": 1200,
    "aspectratio": 1.33
  },
  "result": "https://urlscan.io/api/v1/result/019dcf41-f8e4-71a3-9cf3-82164aafabc4/"
}

Campaign cluster — 70 pivot-discovered domains

Domain VT Score
trdaction.org 0/94
tofiso.org 0/94
tigaad.org 0/94
talosom.org 0/94
sovasomalia.org 0/94
somcon.org 0/94
somalihealthcenter.org 0/94
somaligenderhub.org 0/94
somalibraille.org 0/94
somafpa.org 0/94
socdaorganization.org 0/94
siedo.org 0/94
sidrasf.org 0/94
shardisomalia.org 0/94
sbaco.org 0/94
sasdosom.org 0/94
samasomalia.org 0/94
salro.org 0/94
safesomalia.org 0/94
readosom.org 0/94
www.pdon.org 0/94
mealsom.org 0/94
mcadvoc.org 0/94
www.matansom.org 0/94
kobacfoundation.org 0/94
juweyriawomenrelief.org 0/94
jubainstitute.org 0/94
jardo.org 0/94
inocdo.org 0/94
iniskoy.org 0/94
iedcenter.org 0/94
huneyn.org 0/94
horyalfoundation.org 0/94
hirsd.org 0/94
gredosom.org 0/94
daarmaal.com 0/94
farriin.org 0/94
erssomalia.org 0/94
eafricaninstitute.org 0/94
degsuf.org 0/94
www.dccosom.org 0/94
cshrds.org 0/94
cessomalia.org 0/94
cerelpa.org 0/94
bwdo.org 0/94
benalpa.org 0/94
baares.org 0/94
acg-somalia.org 0/94
sahidgeneralhospital.com 0/94
www.mail.sogpa.org 0/94
pjafparty.so 0/94
innovatesconsultancy.com 0/94
www.sms.safesomalia.org 0/94
www.vote.adaxtechcentre.com 0/94
www.blood.adaxtechcentre.com 0/94
edu-coordination.info 0/94
networkingnight.so 0/94
nationwidetraders.so 0/94
www.clientcare.so 0/94
raasom.org 1/94
www.hansanconsulting.com.hansanconsulting.com 0/94
hansanconsulting.com.hansanconsulting.com 0/94
aqalcivilsolution.so 0/94
sahalpost.com 0/94
iridhimosecurity.com 0/94
sooha.org 0/94
www.shmaxamedmacalin.net.shmaxamedmacalin.com 0/94
shmaxamedmacalin.net.shmaxamedmacalin.com 0/94
sanaabil.so 0/94
emaar.so 0/94