Indicator virtualregionoffer.net Type domain Category Lure Page Confidence medium VT Score 3/94 Source urlscan First Seen 2026-04-19 16:00:47 UTC Last Seen 2026-10-12 00:00:18 UTC urlscan View scan result ↗
Raw JSON
{
  "submitter": {},
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "virtualregionoffer.net",
    "apexDomain": "virtualregionoffer.net",
    "time": "2026-04-19T02:07:30.141Z",
    "uuid": "019da37d-b834-75fa-8cee-b272266108b0",
    "url": "http://virtualregionoffer.net/instruction/file/ZoomInstallerSetup_trdy.exe",
    "tags": [
      "@ecarlesi",
      "threat",
      "malware"
    ]
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 0,
    "encodedDataLength": 0,
    "requests": 1
  },
  "files": [
    {
      "filename": "ZoomInstallerSetup_trdy.exe",
      "sha256": "76c4df8d162faf7f5c5b31da66e6d1de1fac2665750edcb52f395d1161934b00",
      "filesize": 11055520,
      "state": "completed",
      "mimeType": "application/x-dosexec",
      "mimeDescription": "PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, Nullsoft Installer self-extracting archive",
      "url": "https://virtualregionoffer.net/instruction/file/ZoomInstallerSetup_trdy.exe"
    }
  ],
  "page": {
    "country": "UA",
    "server": "LiteSpeed",
    "redirected": "https-only",
    "ip": "91.218.49.176",
    "apexDomainAgeDays": 1,
    "mimeType": "application/x-msdownload",
    "url": "https://virtualregionoffer.net/instruction/file/ZoomInstallerSetup_trdy.exe",
    "tlsValidDays": 89,
    "tlsAgeDays": 1,
    "domainAgeDays": 1,
    "tlsValidFrom": "2026-04-17T18:33:55.000Z",
    "domain": "virtualregionoffer.net",
    "apexDomain": "virtualregionoffer.net",
    "asnname": "virtualsystems Virtual Systems LLC, UA",
    "asn": "AS6698",
    "tlsIssuer": "R13",
    "status": "200"
  },
  "_id": "019da37d-b834-75fa-8cee-b272266108b0",
  "_score": null,
  "sort": [
    1776564450141,
    "019da37d-b834-75fa-8cee-b272266108b0"
  ],
  "result": "https://urlscan.io/api/v1/result/019da37d-b834-75fa-8cee-b272266108b0/",
  "screenshot": "https://urlscan.io/screenshots/019da37d-b834-75fa-8cee-b272266108b0.png"
}