Indicator smsw123.xyz Type domain Category SEO Poisoning Confidence high VT Score 0/94 Source urlscan First Seen 2026-05-07 00:00:59 UTC Last Seen 2026-05-08 08:00:57 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 0,
    "malicious": false,
    "urlscan": {
      "malicious": false
    },
    "engines": {
      "score": 98,
      "malicious": true,
      "hasVerdicts": true,
      "tags": [
        "urlscan-ml",
        "urlscan-ml-60c5e22"
      ]
    }
  },
  "submitter": {
    "country": "it"
  },
  "frames": {
    "length": 1
  },
  "usertags": [],
  "canonical": {
    "task": {
      "url": "smsw123.xyz/UltraViewer.exe"
    },
    "page": {
      "url": "smsw123.xyz/UltraViewer.exe"
    }
  },
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "smsw123.xyz",
    "apexDomain": "smsw123.xyz",
    "time": "2026-05-06T03:31:58.887Z",
    "uuid": "019dfb57-2d1d-703b-80c2-9c6d87666b37",
    "url": "http://smsw123.xyz/UltraViewer.exe",
    "tags": [
      "@ecarlesi",
      "possiblethreat"
    ]
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 0,
    "encodedDataLength": 0,
    "requests": 1
  },
  "meta": [],
  "scanner": {
    "country": "nl"
  },
  "files": [
    {
      "filename": "UltraViewer.exe",
      "sha256": "020aac79a14717e316a593155ca778dd3e253b888bf62633b174838d35df7f41",
      "filesize": 3648408,
      "state": "completed",
      "mimeType": "application/x-dosexec",
      "mimeDescription": "PE32 executable (GUI) Intel 80386, for MS Windows",
      "url": "https://smsw123.xyz/UltraViewer.exe"
    }
  ],
  "links": {
    "length": 0
  },
  "page": {
    "country": "NL",
    "server": "LiteSpeed",
    "redirected": "https-only",
    "ip": "192.142.10.5",
    "apexDomainAgeDays": 0,
    "mimeType": "application/x-msdownload",
    "url": "https://smsw123.xyz/UltraViewer.exe",
    "tlsValidDays": 89,
    "tlsAgeDays": 0,
    "ptr": "cp11.ams1.ultacp.com",
    "domainAgeDays": 0,
    "tlsValidFrom": "2026-05-05T12:49:50.000Z",
    "domain": "smsw123.xyz",
    "apexDomain": "smsw123.xyz",
    "asnname": "ULTAHOST-AS Ultahost, Inc., US",
    "asn": "AS214036",
    "tlsIssuer": "R12",
    "status": "200"
  },
  "_id": "019dfb57-2d1d-703b-80c2-9c6d87666b37",
  "_score": null,
  "sort": [
    1778038318887,
    "019dfb57-2d1d-703b-80c2-9c6d87666b37"
  ],
  "result": "https://urlscan.io/api/v1/result/019dfb57-2d1d-703b-80c2-9c6d87666b37/",
  "screenshot": "https://urlscan.io/screenshots/019dfb57-2d1d-703b-80c2-9c6d87666b37.png"
}

Campaign cluster — 80 pivot-discovered domains

Domain VT Score
connectweb3vault.com 0/94
currencymakersfx.info 11/94
www.fambet.net.bonusunlocked.info 0/94
www.chsnetservice.com 0/94
autodiscover.chsnetservice.com 0/94
mail.chsnetservice.com 0/94
provernieuwen-portform.com 13/94
www.aomenkjw.com.z56789.com 0/94
aomenkjw.com.z56789.com 0/94
kj8888888.com.z56789.com 0/94
kk999999.com.z56789.com 0/94
www.kj8888888.com.z56789.com 0/94
www.kk999999.com.z56789.com 0/94
svip88888888.com.z56789.com 0/94
www.svip88888888.com.z56789.com 0/94
www.bb666666.com.kj999999.com 0/94
www.z18888.com.kj999999.com 0/94
bb666666.com.kj999999.com 0/94
z18888.com.kj999999.com 0/94
svip88888.com.kj999999.com 0/94
www.svip88888.com.kj999999.com 0/94
www.ccaomen.com.kj999999.com 0/94
ccaomen.com.kj999999.com 0/94
thedoghousemegaways.com 0/94
www.sofiloansapply.com.scratchpayvettoday.com 0/94
sofiloansapply.com.scratchpayvettoday.com 4/94
megatechammunution.com.reptileexotica.com 0/94
razevapeofficial.com.reptileexotica.com 0/94
www.razevapeofficial.com.reptileexotica.com 0/94
www.megatechammunution.com.reptileexotica.com 0/94
sending-erc-usdt.site 8/94
webdisk.servportaal-vernieuwform.com 15/94
servportaal-vernieuwform.com 16/94
administratio-nagradi.pro 0/94
cosmicpickle.net 0/94
saturncapitals.com 3/94
codevelox.codes 0/94
quantifyhub.org 0/94
zaffyra.com 0/94
moviepire.sc 5/94
wiltoncapitalltd.com 8/94
mail.binancesystem.com 0/94
binancesystem.com 2/94
tesseractbot.org 2/94
tessbot.org 4/94
sayftius.info 0/94
autodiscover.betlexo.org 2/94
autodiscover.betlexo.net 2/94
movielysium.net 2/94
mail.igetvapeshopau.com 2/94
webdisk.igetvapeshopau.com 0/94
webmail.igetvapeshopau.com 0/94
cpcontacts.igetvapeshopau.com 0/94
igetvapeshopau.com 3/94
autodiscover.igetvapeshopau.com 0/94
cpcalendars.igetvapeshopau.com 0/94
cpanel.igetvapeshopau.com 0/94
autoconfig.netabogados.best 7/94
apexusconsulting.com 2/94
www.nichecontentsolutions.com.redbagproductions.com 0/94
nichecontentsolutions.com.redbagproductions.com 0/94
www.betamina.org.bonusunlocked.info 0/94
betamina.org.bonusunlocked.info 0/94
betamina.org 2/94
fenixbet.org 0/94
proficientgrowthinvt.org 5/94
prothomastrain.com 3/94
worldcupfinalstickets.com 2/94
www.glp1reset.com.redbagproductions.com 0/94
theunion-ai.com 0/94
lngod.net 0/94
a101-online.shop 14/94
tlcbabog.click 0/94
tlcajasbc.shop 0/94
tlcajasac.pro 0/94
tclbcajas.click 5/94
tclbcajas.shop 0/94
telebacajasempresas.help 3/94
telecartonrempresa.shop 0/94
netabogados.click 0/94