Indicator exmtweaks.xyz Type domain Category SEO Poisoning Confidence high VT Score 1/94 Source urlscan First Seen 2026-07-06 00:00:27 UTC Last Seen 2026-07-17 00:00:12 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 0,
    "malicious": false,
    "urlscan": {
      "malicious": false
    },
    "engines": {
      "score": 97,
      "malicious": true,
      "hasVerdicts": true,
      "tags": [
        "urlscan-ml",
        "urlscan-ml-60c5e22"
      ]
    }
  },
  "submitter": {
    "country": "it"
  },
  "frames": {
    "length": 1
  },
  "usertags": [],
  "canonical": {
    "task": {
      "url": "exmtweaks.xyz/exmtweaks.com/downloads/EXM-211-Installer.exe"
    },
    "page": {
      "url": "exmtweaks.xyz/exmtweaks.com/downloads/EXM-211-Installer.exe"
    }
  },
  "labels": [
    "domain.apexdomain"
  ],
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "exmtweaks.xyz",
    "apexDomain": "exmtweaks.xyz",
    "time": "2026-07-05T22:24:07.860Z",
    "uuid": "019f3461-3ed5-70eb-a214-39099ae6a704",
    "url": "https://exmtweaks.xyz/exmtweaks.com/downloads/EXM-211-Installer.exe",
    "tags": [
      "@ecarlesi",
      "possiblethreat"
    ]
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 0,
    "encodedDataLength": 0,
    "requests": 1
  },
  "meta": [],
  "scanner": {
    "country": "de"
  },
  "files": [
    {
      "filename": "EXM-211-Installer.exe",
      "sha256": "8ac5839ca9d1f1f4a4a99c39f9c57a8dc0d5aab0930a4226b56c71081c0325e3",
      "filesize": 341504,
      "state": "completed",
      "mimeType": "application/x-dosexec",
      "mimeDescription": "PE32+ executable (GUI) x86-64, for MS Windows",
      "url": "https://exmtweaks.xyz/exmtweaks.com/downloads/EXM-211-Installer.exe"
    }
  ],
  "links": {
    "length": 0
  },
  "page": {
    "country": "US",
    "server": "LiteSpeed",
    "ip": "198.54.116.226",
    "apexDomainAgeDays": 0,
    "mimeType": "application/x-msdownload",
    "url": "https://exmtweaks.xyz/exmtweaks.com/downloads/EXM-211-Installer.exe",
    "tlsValidDays": 198,
    "tlsAgeDays": 0,
    "ptr": "server217-5.web-hosting.com",
    "domainAgeDays": 0,
    "tlsValidFrom": "2026-07-05T00:00:00.000Z",
    "domain": "exmtweaks.xyz",
    "apexDomain": "exmtweaks.xyz",
    "asnname": "NAMECHEAP-NET - Namecheap, Inc., US",
    "asn": "AS22612",
    "tlsIssuer": "Sectigo Public Server Authentication CA DV R36",
    "status": "200"
  },
  "websockets": {
    "totalBytesSent": 0,
    "totalBytesReceived": 0,
    "length": 0
  },
  "_id": "019f3461-3ed5-70eb-a214-39099ae6a704",
  "_score": null,
  "sort": [
    1783290247860,
    "019f3461-3ed5-70eb-a214-39099ae6a704"
  ],
  "result": "https://urlscan.io/api/v1/result/019f3461-3ed5-70eb-a214-39099ae6a704/",
  "screenshot": "https://urlscan.io/screenshots/019f3461-3ed5-70eb-a214-39099ae6a704.png"
}

Campaign cluster — 73 pivot-discovered domains

Domain VT Score
privzon.com 0/94
wisejoytechnology.com 0/94
nvosborn.com 0/94
ateshgahconsulting.com 0/94
crossixir.cc 1/94
auto365connect.online 0/94
famdata.com.ng 0/94
www.famdata.com.ng 0/94
orbitixgltd.com 0/94
klyaskincare.com 0/94
sunbabx-innovations.com 0/94
uaerecoverypro.com 0/94
flo-pool.com 0/94
www.bindnermusic.com 0/94
bindnermusic.com 0/94
petrolorcharge.com 0/94
whm.intuitivelightworker.com 0/94
arintrack.com 0/94
arinalert.com 0/94
vishalenterprise.org 0/94
seamlessinnovations.org 0/94
liftinitiative.org 0/94
grandviewgatewaysinc.org 0/94
mrbounceback.com 0/94
pngmore.com 0/94
intuitivelightworker.com 0/94
www.strayalpha.com 0/94
webmail.kecapsupermanis.com 0/94
www.digitaltasks.online 3/94
ftptest.kureshi.info 0/94
whiteraventech.com 0/94
jennawaites.com 0/94
grammarco.com 3/94
digitaltasks.online 4/94
lunaridad.com 0/94
www.bracketpost.com 0/94
lacasadelaseguridad.digital 0/94
vqconsultants.com 0/94
digitalasset.digital 0/94
lms.vqconsultants.com 0/94
das.sv 0/94
lebaum.es 0/94
www.grabxanh.com 0/94
www.nsk-estates-limited.xyz 5/94
test1.deltasourcinginternational.com 0/94
test6.deltasourcinginternational.com 0/94
www.test10.deltasourcinginternational.com 0/94
test7.deltasourcinginternational.com 0/94
test2.deltasourcinginternational.com 0/94
test9.deltasourcinginternational.com 0/94
test5.deltasourcinginternational.com 0/94
wolfdenagency.com 0/94
new.marketingproboost99.com 0/94
pradainnu.finance 0/94
witchyluna.com 0/94
daysforcommissioner.com 0/94
glorynest.co.uk 0/94
cloudweavers.tech 0/94
wiaxnet.com 0/94
first-com.space 0/94
innastudio.co 0/94
mail.trendiicosmetics.com 0/94
fever-escorts-ie.com 0/94
visceralmade.com 0/94
zachpop.com 0/94
paraexplorer.com 0/94
consensyssync.com 3/94
kentanggoreng.xyz 0/94
greetingsfromplanet5.com 0/94
www.brinksglobalsecurity.com 0/94
brinksglobalsecurity.com 0/94
app.bulltime.xyz 0/94
lyricsformysong.com 0/94