verify-36f.click
SEO Poisoning Indicator verify-36f.click Type domain Category SEO Poisoning Confidence high VT Score 0/94 (pending) Source urlscan First Seen 2026-07-26 08:00:04 UTC Last Seen 2026-08-12 00:08:43 UTC urlscan View scan result ↗
Raw JSON
{
"verdicts": {
"score": 0,
"malicious": false,
"urlscan": {
"malicious": false
},
"engines": {
"score": 81,
"malicious": true,
"hasVerdicts": true,
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
]
},
"community": {
"score": 0,
"malicious": false,
"hasVerdicts": false
}
},
"submitter": {
"country": "it"
},
"frames": {
"length": 1
},
"usertags": [],
"canonical": {
"task": {
"url": "verify-36f.click/Letter.exe"
},
"page": {
"url": "verify-36f.click/Letter.exe"
}
},
"labels": [
"domain.apexdomain"
],
"task": {
"visibility": "public",
"method": "api",
"domain": "verify-36f.click",
"apexDomain": "verify-36f.click",
"time": "2026-07-26T07:01:00.898Z",
"uuid": "019f9d39-a7c9-764b-ae8b-0699dce93932",
"url": "https://verify-36f.click/Letter.exe",
"tags": [
"@ecarlesi",
"possiblethreat"
]
},
"stats": {
"uniqIPs": 1,
"uniqCountries": 1,
"dataLength": 0,
"encodedDataLength": 0,
"requests": 1
},
"meta": [],
"scanner": {
"country": "us"
},
"files": [
{
"filename": "Letter.exe",
"sha256": "2f596877098a815c5b41a4ebd264fbddbd0ad4bd45359b7f05fc81cff7d99274",
"filesize": 41924608,
"state": "completed",
"mimeType": "application/x-dosexec",
"mimeDescription": "PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows",
"url": "https://verify-36f.click/Letter.exe"
}
],
"links": {
"length": 0
},
"page": {
"country": "US",
"server": "Apache/2",
"ip": "135.148.59.237",
"apexDomainAgeDays": 1,
"mimeType": "application/x-msdownload",
"url": "https://verify-36f.click/Letter.exe",
"tlsValidDays": 89,
"tlsAgeDays": 0,
"ptr": "evo.decentserver.com",
"domainAgeDays": 1,
"tlsValidFrom": "2026-07-26T01:23:34.000Z",
"domain": "verify-36f.click",
"apexDomain": "verify-36f.click",
"asnname": "OVH OVH SAS, FR",
"asn": "AS16276",
"tlsIssuer": "YE2",
"status": "200"
},
"websockets": {
"totalBytesSent": 0,
"totalBytesReceived": 0,
"length": 0
},
"_id": "019f9d39-a7c9-764b-ae8b-0699dce93932",
"_score": null,
"sort": [
1785049260898,
"019f9d39-a7c9-764b-ae8b-0699dce93932"
],
"result": "https://urlscan.io/api/v1/result/019f9d39-a7c9-764b-ae8b-0699dce93932/",
"screenshot": "https://urlscan.io/screenshots/019f9d39-a7c9-764b-ae8b-0699dce93932.png"
} Campaign cluster — 10 pivot-discovered domains
| Domain | VT Score |
|---|---|
| secure12f.top | 0/94 |
| www.secure33d.click | 0/94 |
| secure33d.click | 0/94 |
| secure5c.top | 0/94 |
| erichsons.cc | 0/94 |
| www.tybsosos.zzux.com | 0/94 |
| ftp.tybsosos.zzux.com | 0/94 |
| www.re001221.dns04.com | 0/94 |
| re001221.dns04.com | 0/94 |
| ftp.re001221.dns04.com | 0/94 |