vtracauto.com - suspicious URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned vtracauto.com and returned a suspicious verdict (score 42). The page resolved to 160.153.0.70 on GoDaddy.com, LLC in US. 1 domain and 1 IP were contacted. 30 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 42) · Confidence 51%
- Scanned URL:
http://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606c78b4a4593---2374774509.pdf - Domain: vtracauto.com · IP: 160.153.0.70 · AS209242 · US
- Server: cloudflare
- HTTP status: 200 · application/pdf
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 9 16: · subject CN=vtracauto.com
- Scan tier: fast · observed 2026-08-23 03:42:52 UTC
Redirect chain
http://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606c78b4a4593---2374774509.pdfhttps://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606c78b4a4593---2374774509.pdf
Malware communicating with this URL (30)
These samples were observed contacting or being served from vtracauto.com. Each links to its full analysis.
- Phishing - referenced ·
c72970ff4016708869579c67c17152b8· first seen 2026-08-23 - Phishing - referenced ·
144c3b2fdf41223414fe846f5c404340· first seen 2026-08-22 - Phishing - referenced ·
918bf1b9d413a6db793e08f9e0ccfc72· first seen 2026-08-21 - Phishing - referenced ·
75d83c941f00348a8ec5b3454c981c0b· first seen 2026-08-21 - Phishing - referenced ·
771ac145fcc9f1cf515740dbe3947ad6· first seen 2026-08-20 - Phishing - referenced ·
79ca11f0d43dbf79e33b559b9fd1ac54· first seen 2026-08-20 - Phishing - referenced ·
b7fd941a0ffb251a6b8611c55410d714· first seen 2026-08-19 - Phishing - referenced ·
64d07ed709de9adde29b696189aa6475· first seen 2026-08-19 - Phishing - referenced ·
c798ff68b387135f803cba2f229e9998· first seen 2026-08-19 - Phishing - referenced ·
cc6f6ee06673dfcaf024d2faa21291cd· first seen 2026-08-17 - Phishing - referenced ·
a49370dbb8b092fd495f713ae6961ff8· first seen 2026-08-16 - Phishing - referenced ·
b087dbef4f1abd9093200f16b44a6490· first seen 2026-08-16 - Phishing - referenced ·
dc721164b9119478660162130555b1e3· first seen 2026-08-15 - c9fc64ce9ed9a0e508d5847c159742a800881c6c1e2e406a1af7375a60973ba0 - referenced ·
c9fc64ce9ed9a0e508d5847c159742a8· first seen 2026-08-15 - Phishing - referenced ·
db3468e650f3f9993e677fe5d644d0fa· first seen 2026-08-15
Antivirus & YARA (1 of 48 engines)
- ClamAV (daily) [av]: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0 (served file)
Why this verdict
- Antivirus/YARA detection in page content: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0
- File download routed to the malware sandbox (1606c78b4a4593---2374774509.pdf)
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
Contacted infrastructure
- 160.153.0.70 - AS209242 GoDaddy.com, LLC (United States)
Files served by this page
- 1606c78b4a4593---2374774509.pdf ·
6029fb72ee51de57f34eec1bdd431b9d
Observed indicators
- vtracauto.com
- 160.153.0.70
- https://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/1606c78b4a4593---2374774509.pdf
Other scans of vtracauto.com (7)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 21 Aug 2026 - suspicious ·
https://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/1613b59b8cf40d-- - 20 Aug 2026 - suspicious ·
https://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/1613c75422f6fe-- - 19 Aug 2026 - suspicious ·
https://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/1614adbccc075d-- - 16 Aug 2026 - suspicious ·
https://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/1613616af88405-- - 15 Aug 2026 - suspicious ·
https://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/16137b0f6af0e5-- - 15 Aug 2026 - suspicious ·
https://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/16080cb01ac27e-- - 13 Aug 2026 - suspicious ·
https://vtracauto.com/wp-content/plugins/formcraft/file-upload/server/content/files/16092c574b8d2e--
Questions about vtracauto.com
- Is vtracauto.com safe?
- No. MalwareAnalyzer scanned vtracauto.com on 23 Aug 2026 and returned a suspicious verdict with a score of 42 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with vtracauto.com?
- 30 analysed samples communicate with this URL, including Phishing.
- How was vtracauto.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of vtracauto.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan