virtualregionoffer.net
Lure Page Indicator virtualregionoffer.net Type domain Category Lure Page Confidence medium VT Score 3/94 Source urlscan First Seen 2026-04-19 16:00:47 UTC Last Seen 2026-10-12 00:00:18 UTC urlscan View scan result ↗
Raw JSON
{
"submitter": {},
"task": {
"visibility": "public",
"method": "api",
"domain": "virtualregionoffer.net",
"apexDomain": "virtualregionoffer.net",
"time": "2026-04-19T02:07:30.141Z",
"uuid": "019da37d-b834-75fa-8cee-b272266108b0",
"url": "http://virtualregionoffer.net/instruction/file/ZoomInstallerSetup_trdy.exe",
"tags": [
"@ecarlesi",
"threat",
"malware"
]
},
"stats": {
"uniqIPs": 1,
"uniqCountries": 1,
"dataLength": 0,
"encodedDataLength": 0,
"requests": 1
},
"files": [
{
"filename": "ZoomInstallerSetup_trdy.exe",
"sha256": "76c4df8d162faf7f5c5b31da66e6d1de1fac2665750edcb52f395d1161934b00",
"filesize": 11055520,
"state": "completed",
"mimeType": "application/x-dosexec",
"mimeDescription": "PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, Nullsoft Installer self-extracting archive",
"url": "https://virtualregionoffer.net/instruction/file/ZoomInstallerSetup_trdy.exe"
}
],
"page": {
"country": "UA",
"server": "LiteSpeed",
"redirected": "https-only",
"ip": "91.218.49.176",
"apexDomainAgeDays": 1,
"mimeType": "application/x-msdownload",
"url": "https://virtualregionoffer.net/instruction/file/ZoomInstallerSetup_trdy.exe",
"tlsValidDays": 89,
"tlsAgeDays": 1,
"domainAgeDays": 1,
"tlsValidFrom": "2026-04-17T18:33:55.000Z",
"domain": "virtualregionoffer.net",
"apexDomain": "virtualregionoffer.net",
"asnname": "virtualsystems Virtual Systems LLC, UA",
"asn": "AS6698",
"tlsIssuer": "R13",
"status": "200"
},
"_id": "019da37d-b834-75fa-8cee-b272266108b0",
"_score": null,
"sort": [
1776564450141,
"019da37d-b834-75fa-8cee-b272266108b0"
],
"result": "https://urlscan.io/api/v1/result/019da37d-b834-75fa-8cee-b272266108b0/",
"screenshot": "https://urlscan.io/screenshots/019da37d-b834-75fa-8cee-b272266108b0.png"
} Campaign cluster — 37 pivot-discovered domains
| Domain | VT Score |
|---|---|
| cashoutroblox.com | 8/94 |
| 67boost.top | 13/94 |
| bobuxfunds.com | 15/94 |
| luxop.guru | 0/94 |
| devco.guru | 0/94 |
| lukecombsmerch.com.camilacabelloapparel.com | 0/94 |
| kdh-merch.com | 0/94 |
| blackpink-merch.com | 0/94 |
| mwitmersnftsforsale.com | 0/94 |
| mail.lightburnmachines.com | 0/94 |
| giftzy.click | 6/94 |
| buxfunds.com | 15/94 |
| twice-merch.com | 0/94 |
| redeembux.com | 11/94 |
| newjeansstore.com.1versemerchandise.com | 1/94 |
| stephencurrymerch.com | 0/94 |
| lebronjamesmerch.com | 0/94 |
| karimbenzemamerch.com | 0/94 |
| twice-merch.com.idlemerch.com | 1/94 |
| narutomerchstore.com | 0/94 |
| txtmerchandise.com | 0/94 |
| robloxcashout.com | 14/94 |
| aurelianoil.eu | 0/94 |
| taylorswiftmerchstore.com | 6/94 |
| mileycyrusmerchstore.com | 0/94 |
| beyoncemerchstore.com | 1/94 |
| sofiaisellamerch.com | 2/94 |
| vincentmasonstore.com | 0/94 |
| rihannastore.com | 0/94 |
| jasonderulostore.com | 0/94 |
| addisonraestore.com | 0/94 |
| gg9.live | 2/94 |
| katseyemerchandise.shop | 0/94 |
| robux.media | 19/94 |
| newjeansstore.com | 1/94 |
| robloxpays.com | 18/94 |
| got7merch.com.bmwmapparel.com | 0/94 |