x-connect-wizard.click
SEO Poisoning Indicator x-connect-wizard.click Type domain Category SEO Poisoning Confidence high VT Score 10/94 Source urlscan First Seen 2026-04-19 08:01:07 UTC Last Seen 2026-04-25 00:00:06 UTC urlscan View scan result ↗
Raw JSON
{
"submitter": {},
"task": {
"visibility": "public",
"method": "api",
"domain": "x-connect-wizard.click",
"apexDomain": "x-connect-wizard.click",
"time": "2026-04-19T01:19:33.070Z",
"uuid": "019da351-d1b1-733a-aef0-46c5870358a4",
"url": "http://x-connect-wizard.click/statment/statment.exe",
"tags": [
"@ecarlesi",
"threat",
"malware"
]
},
"stats": {
"uniqIPs": 1,
"uniqCountries": 1,
"dataLength": 0,
"encodedDataLength": 0,
"requests": 1
},
"files": [
{
"filename": "statment.exe",
"sha256": "f10724fe29565b16d554a109bc3481d06f8f81835ae8032263ff074ea7722528",
"filesize": 1721928,
"state": "completed",
"mimeType": "application/x-dosexec",
"mimeDescription": "PE32+ executable (GUI) x86-64, for MS Windows",
"url": "https://x-connect-wizard.click/statment/statment.exe"
}
],
"page": {
"country": "CA",
"server": "LiteSpeed",
"redirected": "https-only",
"ip": "64.187.97.204",
"apexDomainAgeDays": 7,
"mimeType": "application/x-msdownload",
"url": "https://x-connect-wizard.click/statment/statment.exe",
"tlsValidDays": 365,
"tlsAgeDays": 8,
"ptr": "cp1.hostsilo.com",
"domainAgeDays": 7,
"tlsValidFrom": "2026-04-10T23:26:27.000Z",
"domain": "x-connect-wizard.click",
"apexDomain": "x-connect-wizard.click",
"asnname": "NAMESILONNET - NAMESILO, L.L.C., CA",
"asn": "AS400343",
"tlsIssuer": "x-connect-wizard.click",
"status": "200"
},
"_id": "019da351-d1b1-733a-aef0-46c5870358a4",
"_score": null,
"sort": [
1776561573070,
"019da351-d1b1-733a-aef0-46c5870358a4"
],
"result": "https://urlscan.io/api/v1/result/019da351-d1b1-733a-aef0-46c5870358a4/",
"screenshot": "https://urlscan.io/screenshots/019da351-d1b1-733a-aef0-46c5870358a4.png"
}