Found via IP pivot from zoom-workspaces.top

Indicator auth-c3bank.com Type domain Category Lure Page Confidence medium VT Score 14/94 Source urlscan First Seen 2026-05-02 16:00:01 UTC Last Seen 2026-05-11 00:00:01 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 0,
    "malicious": false,
    "urlscan": {
      "malicious": false
    },
    "engines": {
      "score": 94,
      "malicious": true,
      "hasVerdicts": true,
      "tags": [
        "urlscan-ml",
        "urlscan-ml-60c5e22"
      ]
    }
  },
  "submitter": {
    "country": "us"
  },
  "dom": {
    "size": 7585,
    "hash": "9b7c61ddb9855b389d4028a0a171e885f8ef1856a20214c04d2ee2e50dcb3747"
  },
  "frames": {
    "length": 1
  },
  "canonical": {
    "task": {
      "url": "auth-c3bank.com"
    },
    "page": {
      "url": "auth-c3bank.com/cgi-sys/suspendedpage.cgi"
    }
  },
  "screenshot": "https://urlscan.io/screenshots/019de0c5-53ba-73b9-9ed2-6e116cb44103.png",
  "labels": [
    "site.suspended",
    "software.cpanel",
    "software.cpanel.error"
  ],
  "task": {
    "visibility": "unlisted",
    "method": "api",
    "domain": "auth-c3bank.com",
    "apexDomain": "auth-c3bank.com",
    "time": "2026-04-30T23:42:07.394Z",
    "uuid": "019de0c5-53ba-73b9-9ed2-6e116cb44103",
    "url": "http://auth-c3bank.com/"
  },
  "stats": {
    "uniqIPs": 3,
    "uniqCountries": 2,
    "dataLength": 91770,
    "encodedDataLength": 56389,
    "requests": 4
  },
  "meta": [],
  "scanner": {
    "country": "fi"
  },
  "links": {
    "length": 0
  },
  "page": {
    "country": "DE",
    "server": "nginx",
    "redirected": "same-domain",
    "ip": "89.163.155.33",
    "apexDomainAgeDays": 35,
    "language": "en",
    "mimeType": "text/html",
    "title": "Account Suspended",
    "url": "https://auth-c3bank.com/cgi-sys/suspendedpage.cgi",
    "tlsValidDays": 89,
    "tlsAgeDays": 35,
    "ptr": "89.163.155.33.bwys.net",
    "domainAgeDays": 35,
    "tlsValidFrom": "2026-03-26T00:14:07.000Z",
    "domain": "auth-c3bank.com",
    "apexDomain": "auth-c3bank.com",
    "asnname": "MYLOC-AS WIIT AG, DE",
    "asn": "AS24961",
    "tlsIssuer": "R12",
    "status": "200"
  },
  "text": {
    "size": 5424,
    "hash": "5e54bd60e5084544a2f234e7f7daf85b601c0c7edfcf4e0492bc8338cf4507e4"
  },
  "usertags": [],
  "_id": "019de0c5-53ba-73b9-9ed2-6e116cb44103",
  "_score": null,
  "sort": [
    1777592527394,
    "019de0c5-53ba-73b9-9ed2-6e116cb44103"
  ],
  "image": {
    "size": 19177,
    "width": 1600,
    "hash": "dfe1d2b537061bdb5c649e4dadc8b9986ee765ec6c6889efd9b76b1fe912574b",
    "height": 1200,
    "aspectratio": 1.33
  },
  "result": "https://urlscan.io/api/v1/result/019de0c5-53ba-73b9-9ed2-6e116cb44103/"
}