Found via IP pivot from logixgreed.info

Indicator conexionsegura.gatofbg5.life Type domain Category SEO Poisoning Confidence medium VT Score 0/94 (pending) Source urlscan First Seen 2026-08-17 00:00:24 UTC Last Seen 2026-08-17 00:00:24 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 0,
    "malicious": false,
    "urlscan": {
      "malicious": false
    },
    "engines": {
      "score": 0,
      "malicious": false,
      "hasVerdicts": false
    },
    "community": {
      "score": 0,
      "malicious": false,
      "hasVerdicts": false
    }
  },
  "submitter": {
    "country": "cl"
  },
  "task": {
    "visibility": "public",
    "method": "manual",
    "domain": "conexionsegura.gatofbg5.life",
    "apexDomain": "gatofbg5.life",
    "time": "2023-11-10T16:54:29.157Z",
    "uuid": "1d5a737e-3716-4c5f-a8ce-213674427de0",
    "url": "https://conexionsegura.gatofbg5.life/jWxwXXrWC5/lii.xls"
  },
  "frames": {
    "length": 1
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 0,
    "encodedDataLength": 0,
    "requests": 1
  },
  "scanner": {
    "country": "de"
  },
  "files": [
    {
      "filename": "lii.xls",
      "sha256": "8b6379d13f643f0f5650cafdebf97062ba9eb08713a41f2ce891e946d7efff6f",
      "filesize": 9216,
      "state": "completed",
      "mimeType": "application/x-dosexec",
      "mimeDescription": "PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows",
      "url": "https://conexionsegura.gatofbg5.life/jWxwXXrWC5/lii.xls"
    }
  ],
  "links": {
    "length": 0
  },
  "canonical": {
    "task": {
      "url": "conexionsegura.gatofbg5.life/jWxwXXrWC5/lii.xls"
    },
    "page": {
      "url": "conexionsegura.gatofbg5.life/jWxwXXrWC5/lii.xls"
    }
  },
  "page": {
    "country": "US",
    "server": "nginx/1.18.0 (Ubuntu)",
    "ip": "149.248.76.59",
    "mimeType": "application/octet-stream",
    "url": "https://conexionsegura.gatofbg5.life/jWxwXXrWC5/lii.xls",
    "tlsValidDays": 89,
    "tlsAgeDays": 2,
    "tlsValidFrom": "2023-11-07T17:56:00.000Z",
    "domain": "conexionsegura.gatofbg5.life",
    "apexDomain": "gatofbg5.life",
    "asnname": "BLNWX, US",
    "asn": "AS399629",
    "tlsIssuer": "R3",
    "status": "200"
  },
  "usertags": [],
  "meta": [],
  "_id": "1d5a737e-3716-4c5f-a8ce-213674427de0",
  "_score": null,
  "sort": [
    1699635269157,
    "1d5a737e-3716-4c5f-a8ce-213674427de0"
  ],
  "result": "https://urlscan.io/api/v1/result/1d5a737e-3716-4c5f-a8ce-213674427de0/",
  "screenshot": "https://urlscan.io/screenshots/1d5a737e-3716-4c5f-a8ce-213674427de0.png"
}