Found via IP pivot from coxcpaservices.com

Indicator mail.hereafterhotline.com Type domain Category Lure Page Confidence medium VT Score 0/94 Source urlscan First Seen 2026-04-19 08:01:07 UTC Last Seen 2026-04-19 08:01:07 UTC urlscan View scan result ↗
Raw JSON
{
  "submitter": {},
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "mail.hereafterhotline.com",
    "apexDomain": "hereafterhotline.com",
    "time": "2026-04-08T23:26:40.888Z",
    "uuid": "019d6f6b-47f6-7217-83a7-2e4a4424c1d1",
    "url": "http://mail.hereafterhotline.com/"
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 973106,
    "encodedDataLength": 973638,
    "requests": 3
  },
  "page": {
    "country": "US",
    "server": "Apache",
    "redirected": "https-only",
    "ip": "107.180.41.238",
    "apexDomainAgeDays": 645,
    "language": "en",
    "mimeType": "text/html",
    "title": "HEREAFTER HOTLINE MAIN PAGE",
    "url": "https://mail.hereafterhotline.com/",
    "tlsValidDays": 89,
    "tlsAgeDays": 2,
    "ptr": "238.41.180.107.host.secureserver.net",
    "domainAgeDays": 2,
    "tlsValidFrom": "2026-04-06T19:44:50.000Z",
    "domain": "mail.hereafterhotline.com",
    "apexDomain": "hereafterhotline.com",
    "asnname": "GO-DADDY-COM-LLC - GoDaddy.com, LLC, US",
    "asn": "AS400754",
    "tlsIssuer": "R12",
    "status": "200"
  },
  "_id": "019d6f6b-47f6-7217-83a7-2e4a4424c1d1",
  "_score": null,
  "sort": [
    1775690800888,
    "019d6f6b-47f6-7217-83a7-2e4a4424c1d1"
  ],
  "result": "https://urlscan.io/api/v1/result/019d6f6b-47f6-7217-83a7-2e4a4424c1d1/",
  "screenshot": "https://urlscan.io/screenshots/019d6f6b-47f6-7217-83a7-2e4a4424c1d1.png"
}