xzwhkw.com
Lure Page Indicator xzwhkw.com Type domain Category Lure Page Confidence high VT Score 15/94 Source urlscan First Seen 2026-07-14 16:00:06 UTC Last Seen 2026-08-17 00:00:24 UTC urlscan View scan result ↗
Raw JSON
{
"verdicts": {
"score": 100,
"malicious": true,
"urlscan": {
"malicious": true
},
"engines": {
"score": 92,
"malicious": true,
"hasVerdicts": true,
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
]
},
"categories": [
"phishing"
],
"community": {
"score": 0,
"malicious": false,
"hasVerdicts": false
}
},
"submitter": {
"country": "us"
},
"dom": {
"size": 241494,
"hash": "aa9722b8c723bf77dd1b8cdbb1b96ae61746eeaca1fb431098a5ded400c50a91"
},
"visible": {
"brandname": "Docusign"
},
"frames": {
"length": 1
},
"usertags": [
"public.scam"
],
"canonical": {
"task": {
"url": "xzwhkw.com/dcsnmnts1a"
},
"page": {
"url": "xzwhkw.com/dcsnmnts1a/Windows/invite.php"
}
},
"screenshot": "https://urlscan.io/screenshots/019f5c80-02f4-77f9-94bd-520a098b2943.png",
"labels": [
"domain.apexdomain",
"visual.brandai"
],
"task": {
"visibility": "public",
"method": "api",
"domain": "xzwhkw.com",
"apexDomain": "xzwhkw.com",
"time": "2026-07-13T17:22:08.935Z",
"uuid": "019f5c80-02f4-77f9-94bd-520a098b2943",
"url": "https://xzwhkw.com/dcsnmnts1a"
},
"stats": {
"uniqIPs": 2,
"uniqCountries": 1,
"dataLength": 298889,
"encodedDataLength": 242980,
"requests": 3
},
"meta": [],
"scanner": {
"country": "us"
},
"links": {
"length": 0
},
"page": {
"country": "US",
"server": "Apache",
"redirected": "same-domain",
"ip": "66.116.239.150",
"apexDomainAgeDays": 43,
"language": "en",
"mimeType": "text/html",
"title": "DocuSign",
"url": "https://xzwhkw.com/dcsnmnts1a/Windows/invite.php",
"tlsValidDays": 89,
"tlsAgeDays": 19,
"ptr": "pputxwaonline.com",
"domainAgeDays": 43,
"tlsValidFrom": "2026-06-23T18:34:09.000Z",
"domain": "xzwhkw.com",
"apexDomain": "xzwhkw.com",
"asnname": "ORACLE-BMC-31898 - Oracle Corporation, US",
"asn": "AS31898",
"tlsIssuer": "YR1",
"status": "200"
},
"text": {
"size": 8864,
"hash": "069a73f594a12c24f3d4823d76e8ba1ab75680c7c88d41e6e5978c95e527654c"
},
"brand": [
{
"country": [
"us"
],
"name": "DocuSign",
"vertical": [
"Online"
],
"key": "docusign"
}
],
"websockets": {
"totalBytesSent": 0,
"totalBytesReceived": 0,
"length": 0
},
"_id": "019f5c80-02f4-77f9-94bd-520a098b2943",
"_score": null,
"sort": [
1783963328935,
"019f5c80-02f4-77f9-94bd-520a098b2943"
],
"image": {
"size": 47423,
"width": 1600,
"hash": "83644cf6714731bfbea1c9827afef573cf0312544c1b91245fc98b02a57671c5",
"height": 1200,
"aspectratio": 1.33
},
"result": "https://urlscan.io/api/v1/result/019f5c80-02f4-77f9-94bd-520a098b2943/"
} Campaign cluster — 13 pivot-discovered domains
| Domain | VT Score |
|---|---|
| ftp.leximagweb.com | 0/94 |
| nj.cjxszpo.com | 6/94 |
| is.wdfmpm.net | 0/94 |
| mj.ewqghez.com | 8/94 |
| lu.easaugb.org | 0/94 |
| oj.easaugb.store | 0/94 |
| il.easaugb.store | 0/94 |
| ga.sihavqd.com | 0/94 |
| yn.fcgyjvd.com | 5/94 |
| fr.dylanmod.org | 4/94 |
| ty.easaugb.com | 0/94 |
| qa.gezggi.com | 10/94 |
| qj.leximag.com | 0/94 |