Found via IP pivot from www.xdmeogt.com

Indicator zg.ifoqwyc.net Type domain Category Lure Page Confidence medium VT Score 9/94 Source urlscan First Seen 2026-09-09 08:00:44 UTC Last Seen 2026-09-09 08:00:44 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 100,
    "malicious": true,
    "urlscan": {
      "malicious": true
    },
    "engines": {
      "score": 96,
      "malicious": true,
      "hasVerdicts": true,
      "tags": [
        "urlscan-ml",
        "urlscan-ml-60c5e22"
      ]
    },
    "categories": [
      "phishing"
    ],
    "community": {
      "score": 0,
      "malicious": false,
      "hasVerdicts": false
    }
  },
  "submitter": {
    "country": "jp"
  },
  "dom": {
    "size": 193369,
    "hash": "be9d18b521e3837102176baebcaccc2b81ac38a7c9d3bdb08675ab5a7bc82cf6"
  },
  "visible": {
    "brandname": "HIWORKS"
  },
  "frames": {
    "length": 1
  },
  "usertags": [],
  "canonical": {
    "task": {
      "url": "zg.ifoqwyc.net/august-kd-auth-salary-2Foauth2Fauthorize/august-31.html"
    },
    "page": {
      "url": "zg.ifoqwyc.net/august-kd-auth-salary-2Foauth2Fauthorize/august-31.html"
    }
  },
  "screenshot": "https://urlscan.io/screenshots/01a0558c-768b-75a3-ad4c-c7c2f4d9f2d1.png",
  "labels": [
    "visual.brandai"
  ],
  "task": {
    "visibility": "unlisted",
    "method": "api",
    "domain": "zg.ifoqwyc.net",
    "apexDomain": "ifoqwyc.net",
    "time": "2026-08-31T03:30:21.795Z",
    "uuid": "01a0558c-768b-75a3-ad4c-c7c2f4d9f2d1",
    "url": "https://zg.ifoqwyc.net/august-kd-auth-salary-2Foauth2Fauthorize/august-31.html"
  },
  "stats": {
    "uniqIPs": 3,
    "uniqCountries": 3,
    "dataLength": 315455,
    "encodedDataLength": 261031,
    "requests": 4
  },
  "meta": [],
  "scanner": {
    "country": "jp"
  },
  "links": {
    "length": 0
  },
  "page": {
    "country": "DE",
    "server": "Apache",
    "ip": "31.70.95.212",
    "apexDomainAgeDays": 55,
    "language": "ko",
    "mimeType": "text/html",
    "title": "하이웍스 로그인",
    "url": "https://zg.ifoqwyc.net/august-kd-auth-salary-2Foauth2Fauthorize/august-31.html",
    "tlsValidDays": 89,
    "tlsAgeDays": 28,
    "ptr": "ip31-70-95-212.pbiaas.com",
    "domainAgeDays": 28,
    "tlsValidFrom": "2026-08-02T15:40:35.000Z",
    "domain": "zg.ifoqwyc.net",
    "apexDomain": "ifoqwyc.net",
    "asnname": "IONOS-AS IONOS SE, DE",
    "asn": "AS8560",
    "tlsIssuer": "YR2",
    "status": "200"
  },
  "text": {
    "size": 169409,
    "hash": "e95e7e952c12afe16df2cc7730a68a26e1e76469585c07ff7c57c73bf9736c4f"
  },
  "brand": [
    {
      "country": [
        "kr"
      ],
      "name": "Hiworks",
      "vertical": [
        "Internet"
      ],
      "key": "hiworks"
    }
  ],
  "websockets": {
    "totalBytesSent": 0,
    "totalBytesReceived": 0,
    "length": 0
  },
  "_id": "01a0558c-768b-75a3-ad4c-c7c2f4d9f2d1",
  "_score": null,
  "sort": [
    1788147021795,
    "01a0558c-768b-75a3-ad4c-c7c2f4d9f2d1"
  ],
  "image": {
    "size": 13199,
    "width": 1600,
    "hash": "9406385bdc830027e4016b0dcc224ece503d7d09c1c3041da4e29b0f97a2caa6",
    "height": 1200,
    "aspectratio": 1.33
  },
  "result": "https://urlscan.io/api/v1/result/01a0558c-768b-75a3-ad4c-c7c2f4d9f2d1/"
}