Indicator zoomus.gt.tc Type domain Category Lure Page Confidence high VT Score 15/94 Source urlscan First Seen 2026-08-06 16:00:26 UTC Last Seen 2026-10-12 08:00:19 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 100,
    "malicious": true,
    "urlscan": {
      "malicious": true
    },
    "engines": {
      "score": 98,
      "malicious": true,
      "hasVerdicts": true,
      "tags": [
        "urlscan-ml",
        "urlscan-ml-60c5e22"
      ]
    },
    "categories": [
      "phishing"
    ],
    "community": {
      "score": 0,
      "malicious": false,
      "hasVerdicts": false
    }
  },
  "submitter": {
    "country": "in"
  },
  "dom": {
    "size": 4486,
    "hash": "35289a36b816d52e1a984c4d1d513a7e40967a84d7078f1cc19837d0d757dfb0"
  },
  "visible": {
    "brandname": "Zoom"
  },
  "frames": {
    "length": 1
  },
  "usertags": [
    "public.scam"
  ],
  "canonical": {
    "task": {
      "url": "zoomus.gt.tc"
    },
    "page": {
      "url": "zoomus.gt.tc/Windows/invite.php"
    }
  },
  "screenshot": "https://urlscan.io/screenshots/019fd32e-b82a-72a6-97db-19ef79e194da.png",
  "labels": [
    "visual.brandai"
  ],
  "task": {
    "visibility": "public",
    "method": "manual",
    "domain": "zoomus.gt.tc",
    "apexDomain": "gt.tc",
    "time": "2026-08-05T18:28:08.345Z",
    "uuid": "019fd32e-b82a-72a6-97db-19ef79e194da",
    "url": "http://zoomus.gt.tc/"
  },
  "stats": {
    "uniqIPs": 4,
    "uniqCountries": 2,
    "dataLength": 93090,
    "encodedDataLength": 84719,
    "requests": 8
  },
  "meta": [],
  "scanner": {
    "country": "uk"
  },
  "links": {
    "length": 0
  },
  "page": {
    "country": "GB",
    "server": "openresty",
    "redirected": "same-domain",
    "ip": "185.27.134.141",
    "apexDomainAgeDays": 376,
    "language": "en",
    "mimeType": "text/html",
    "title": "Zoom Client Update",
    "url": "https://zoomus.gt.tc/Windows/invite.php",
    "tlsValidDays": 90,
    "tlsAgeDays": 54,
    "domainAgeDays": 0,
    "tlsValidFrom": "2026-06-12T00:00:00.000Z",
    "domain": "zoomus.gt.tc",
    "apexDomain": "gt.tc",
    "asnname": "WILDCARD-AS Wildcard UK Limited, GB",
    "asn": "AS34119",
    "tlsIssuer": "ZeroSSL ECC DV SSL CA 2",
    "status": "200"
  },
  "text": {
    "size": 2415,
    "hash": "026ed0033ff575eea2817ea0baa3c304aaec996c22e2907a8e54873094e01a76"
  },
  "brand": [
    {
      "country": [
        "us"
      ],
      "name": "Zoom",
      "vertical": [
        "Online"
      ],
      "key": "zoom"
    }
  ],
  "websockets": {
    "totalBytesSent": 0,
    "totalBytesReceived": 0,
    "length": 0
  },
  "_id": "019fd32e-b82a-72a6-97db-19ef79e194da",
  "_score": null,
  "sort": [
    1785954488345,
    "019fd32e-b82a-72a6-97db-19ef79e194da"
  ],
  "image": {
    "size": 19048,
    "width": 1600,
    "hash": "bbbfb273283986e593cca5a52040a8612e4b1288e7694a8908f3722a11320581",
    "height": 1200,
    "aspectratio": 1.33
  },
  "result": "https://urlscan.io/api/v1/result/019fd32e-b82a-72a6-97db-19ef79e194da/"
}

Campaign cluster — 71 pivot-discovered domains

Domain VT Score
jobcareers.liveblog365.com 0/94
get-diamonds.gamer.free 0/94
wiseinvest.eu 0/94
maas.ct.ws 0/94
changesa.wuaze.com 0/94
futureconcepts.epizy.com 0/94
dayforcece.is-great.org 0/94
policycenter.rf.gd 0/94
digitalinsights.byethost4.com 0/94
666usuactiwenlibdv66crediapp1212.hstn.me 2/94
khalifapost.com 0/94
mercamaquinas.byethost7.com 0/94
rich888.epizy.com 0/94
netprofit.byethost15.com 0/94
filedot.site 0/94
www.georgakopoulosd.gr 0/94
adonaischoolcentre.com 0/94
elfruterosilao.com 0/94
squadcapitals.com 0/94
admin.raltecx.in 0/94
cooper.infinityfreeapp.com 0/94
justlook.free.nf 0/94
bestmanshoesmart.epizy.com 0/94
myjerseyfont.rf.gd 0/94
mits.ct.ws 0/94
pginicialaccesso.infinityfree.me 0/94
mojjj.info 0/94
theunpleased.com 0/94
jzar.online 0/94
bnwototheworld.rf.gd 0/94
valmacom.fwh.is 0/94
0nedrivefile.iceiy.com 2/94
ideasdealtura.com 0/94
mrdipesh.site.je 0/94
www.ideasdealtura.com 0/94
d-square-construction.co.in 0/94
subdominoffi3uoda.iceiy.com 5/94
aaaaaaa.unaux.com 15/94
habibullahcollege.edu.bd 2/94
koyacs.online 0/94
kora-test.free.nf 1/94
fr13nds.online 0/94
sportifyvibe.xo.je 11/94
hung.42web.io 0/94
www.free-fire-redeem-code-offical.kesug.com 14/94
ashutoshsen.rf.gd 0/94
website.site.je 0/94
sosteniendotufuture-pichincha.zya.me 14/94
powerz.controlz.hr 0/94
verificarmyoutlookwsweb.hstn.me 9/94
www.getintopc.site.je 9/94
adhe.rf.gd 0/94
flipkart-hub.net 13/94
grimoiredev.xo.je 1/94
autenticar-control365.page.gd 2/94
asasn.org.uk 0/94
magyarposta-hu.unaux.com 15/94
votingambassadorslink.fwh.is 8/94
sessionexpiredwebmai1cpanel.iceiy.com 2/94
www.sessionexpiredwebmai1cpanel.iceiy.com 0/94
the-infinity-line.com 0/94
blcktred.com 0/94
crditoecuadoenlinea.gt.tc 9/94
masaw.wuaze.com 0/94
acexs-365-msn.page.gd 4/94
bure3838dh3.fwh.is 11/94
mars.bd 0/94
votebde.me 0/94
arslanmd.xo.je 2/94
reactivar365outtkz1.fwh.is 8/94
aconconma.hstn.me 6/94