qlauncher.xyz
SEO Poisoning Indicator qlauncher.xyz Type domain Category SEO Poisoning Confidence high VT Score 0/94 (pending) Source urlscan First Seen 2026-10-11 16:00:19 UTC Last Seen 2026-10-11 16:00:19 UTC urlscan View scan result ↗
Raw JSON
{
"verdicts": {
"score": 0,
"malicious": false,
"urlscan": {
"malicious": false
},
"engines": {
"score": 86,
"malicious": true,
"hasVerdicts": true,
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
]
},
"community": {
"score": 0,
"malicious": false,
"hasVerdicts": false
}
},
"submitter": {
"country": "it"
},
"frames": {
"length": 1
},
"canonical": {
"task": {
"url": "qlauncher.xyz/downloads/qLauncher-Setup.exe"
},
"page": {
"url": "qlauncher.xyz/downloads/qLauncher-Setup.exe"
}
},
"clipboard": {
"length": 0
},
"labels": [
"domain.apexdomain"
],
"task": {
"visibility": "public",
"method": "api",
"domain": "qlauncher.xyz",
"apexDomain": "qlauncher.xyz",
"time": "2026-10-11T03:54:07.554Z",
"uuid": "01a12918-3461-71f9-9ac8-da9fe8527810",
"url": "https://qlauncher.xyz/downloads/qLauncher-Setup.exe",
"tags": [
"@ecarlesi",
"possiblethreat"
]
},
"stats": {
"uniqIPs": 1,
"uniqCountries": 1,
"dataLength": 0,
"encodedDataLength": 0,
"requests": 1
},
"meta": [],
"scanner": {
"country": "de"
},
"files": [
{
"filename": "qLauncher-Setup.exe",
"sha256": "4d16ea2627fd545be1118d4b2b834f17915324d20e356fb2f311f729f7961b76",
"filesize": 1918464,
"state": "completed",
"mimeType": "application/x-dosexec",
"mimeDescription": "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows",
"url": "https://qlauncher.xyz/downloads/qLauncher-Setup.exe"
}
],
"links": {
"length": 0
},
"page": {
"country": "US",
"server": "LiteSpeed",
"ip": "198.54.115.118",
"apexDomainAgeDays": 0,
"mimeType": "application/x-msdownload",
"url": "https://qlauncher.xyz/downloads/qLauncher-Setup.exe",
"tlsValidDays": 197,
"tlsAgeDays": 0,
"ptr": "server60-2.web-hosting.com",
"domainAgeDays": 0,
"tlsValidFrom": "2026-10-10T23:12:37.000Z",
"domain": "qlauncher.xyz",
"apexDomain": "qlauncher.xyz",
"asnname": "NAMECHEAP-NET - Namecheap, Inc., US",
"asn": "AS22612",
"tlsIssuer": "SSL.com TLS Issuing RSA CA R1",
"status": "200"
},
"websockets": {
"totalBytesSent": 0,
"totalBytesReceived": 0,
"length": 0
},
"_id": "01a12918-3461-71f9-9ac8-da9fe8527810",
"_score": null,
"sort": [
1791690847554,
"01a12918-3461-71f9-9ac8-da9fe8527810"
],
"result": "https://urlscan.io/api/v1/result/01a12918-3461-71f9-9ac8-da9fe8527810/",
"screenshot": "https://urlscan.io/screenshots/01a12918-3461-71f9-9ac8-da9fe8527810.png"
} Campaign cluster — 31 pivot-discovered domains
| Domain | VT Score |
|---|---|
| shahajalalconstruction.com | 0/94 |
| www.shahajalalconstruction.com | 0/94 |
| www.relaxingblues.com | 0/94 |
| relaxingblues.com | 0/94 |
| aishvaryakavi.com | 0/94 |
| lacaddia.com | 0/94 |
| ularpitonlilit.sanca999-seo.xyz | 0/94 |
| frontlinemakesafesandrepairs.com | 0/94 |
| pagebytes.site | 0/94 |
| mail.pagebytes.site | 0/94 |
| codelytegroup.org | 0/94 |
| karachidefenceviewguesthousekarachi.com | 0/94 |
| datamon.online | 0/94 |
| imap.flexibletreeview.com | 0/94 |
| 198.54.115.118 | 0/94 |
| www.safetravels.vacations | 0/94 |
| gngcreditltd.com | 0/94 |
| greenenergycl.com | 0/94 |
| shareoneng.com | 0/94 |
| aspirelab.io | 0/94 |
| bringlift.com | 0/94 |
| sengabayng.ca | 0/94 |
| prestigetravelco.online | 0/94 |
| ricardovanella.com | 0/94 |
| cpanel.whitepotters.com | 0/94 |
| whitepotters.com | 0/94 |
| webmail.whitepotters.com | 0/94 |
| www.agogsunog.com | 0/94 |
| mail.agogsunog.com | 0/94 |
| renuscredexhub.com | 0/94 |
| ftp.agogsunog.com | 0/94 |