Indicator zoom-workspaces.top Type domain Category Lure Page Confidence high VT Score 19/94 Source urlscan First Seen 2026-05-02 00:00:33 UTC Last Seen 2026-07-23 00:00:31 UTC urlscan View scan result ↗
Raw JSON
{
  "submitter": {},
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "zoom-workspaces.top",
    "apexDomain": "zoom-workspaces.top",
    "time": "2026-05-01T04:26:20.761Z",
    "uuid": "019de1c9-88c9-7253-8d47-24d093d1d1a2",
    "url": "https://zoom-workspaces.top/Zm417/",
    "tags": [
      "@ecarlesi",
      "threat",
      "malware"
    ]
  },
  "stats": {
    "uniqIPs": 4,
    "uniqCountries": 2,
    "dataLength": 115429,
    "encodedDataLength": 100115,
    "requests": 7
  },
  "page": {
    "country": "DE",
    "server": "nginx",
    "redirected": "same-domain",
    "ip": "89.163.155.33",
    "apexDomainAgeDays": 0,
    "language": "en",
    "mimeType": "text/html",
    "title": "Zoom Client Update",
    "url": "https://zoom-workspaces.top/Zm417/Windows/invite.php",
    "tlsValidDays": 89,
    "tlsAgeDays": 0,
    "ptr": "89.163.155.33.bwys.net",
    "domainAgeDays": 0,
    "tlsValidFrom": "2026-04-30T16:12:45.000Z",
    "domain": "zoom-workspaces.top",
    "apexDomain": "zoom-workspaces.top",
    "asnname": "MYLOC-AS WIIT AG, DE",
    "asn": "AS24961",
    "tlsIssuer": "R12",
    "status": "200"
  },
  "_id": "019de1c9-88c9-7253-8d47-24d093d1d1a2",
  "_score": null,
  "sort": [
    1777609580761,
    "019de1c9-88c9-7253-8d47-24d093d1d1a2"
  ],
  "result": "https://urlscan.io/api/v1/result/019de1c9-88c9-7253-8d47-24d093d1d1a2/",
  "screenshot": "https://urlscan.io/screenshots/019de1c9-88c9-7253-8d47-24d093d1d1a2.png"
}

Campaign cluster — 3 pivot-discovered domains

Domain VT Score
lloyds-gb-id.com 12/94
auth-c3bank.com 14/94
helsenorge.xyz 0/94