Found via IP pivot from express-shop.store

Indicator 72.5.42.139 Type domain Category SEO Poisoning Confidence medium VT Score 0/94 Source urlscan First Seen 2026-04-29 00:00:06 UTC Last Seen 2026-04-29 00:00:06 UTC urlscan View scan result ↗
Raw JSON
{
  "submitter": {},
  "task": {
    "visibility": "public",
    "method": "manual",
    "domain": "72.5.42.139",
    "time": "2024-09-15T10:17:37.808Z",
    "uuid": "486bccbc-1ded-40dd-8653-4f3f13363a72",
    "url": "http://72.5.42.139/putty.exe"
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 0,
    "encodedDataLength": 0,
    "requests": 1
  },
  "files": [
    {
      "filename": "putty.exe",
      "sha256": "e53c379d95e95706c5a2c4d6cd609857368a3bf14f28d7e67f6e3f8dfce6d486",
      "filesize": 1654048,
      "state": "completed",
      "mimeType": "application/x-dosexec",
      "mimeDescription": "PE32+ executable (GUI) x86-64, for MS Windows",
      "url": "http://72.5.42.139/putty.exe"
    }
  ],
  "page": {
    "country": "US",
    "server": "Apache/2.4.58 (Ubuntu)",
    "ip": "72.5.42.139",
    "domain": "72.5.42.139",
    "mimeType": "application/x-msdos-program",
    "asnname": "BLNWX, US",
    "asn": "AS399629",
    "url": "http://72.5.42.139/putty.exe",
    "status": "200"
  },
  "_id": "486bccbc-1ded-40dd-8653-4f3f13363a72",
  "_score": null,
  "sort": [
    1726395457808,
    "486bccbc-1ded-40dd-8653-4f3f13363a72"
  ],
  "result": "https://urlscan.io/api/v1/result/486bccbc-1ded-40dd-8653-4f3f13363a72/",
  "screenshot": "https://urlscan.io/screenshots/486bccbc-1ded-40dd-8653-4f3f13363a72.png"
}