Found via IP pivot from scn33.xyz

Indicator everrextrading.com Type domain Category SEO Poisoning Confidence medium VT Score 0/94 Source urlscan First Seen 2026-05-15 00:00:04 UTC Last Seen 2026-05-15 00:00:04 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 0,
    "malicious": false,
    "urlscan": {
      "malicious": false
    },
    "engines": {
      "score": 91,
      "malicious": true,
      "hasVerdicts": true,
      "tags": [
        "urlscan-ml",
        "urlscan-ml-60c5e22"
      ]
    }
  },
  "submitter": {
    "country": "it"
  },
  "dom": {
    "size": 1174,
    "hash": "94bfc705557f9716edd37ed4970bed21320b16ae552001b45fe960c21096d67f"
  },
  "visible": {
    "brandname": "LifeSpeed Web Server"
  },
  "frames": {
    "length": 1
  },
  "usertags": [],
  "canonical": {
    "task": {
      "url": "everrextrading.com/xmlrpc0db0.html"
    },
    "page": {
      "url": "everrextrading.com/xmlrpc0db0.html"
    }
  },
  "screenshot": "https://urlscan.io/screenshots/019e0050-dbe8-73f9-ae1c-d991503ea0d9.png",
  "labels": [
    "visual.brandai"
  ],
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "everrextrading.com",
    "apexDomain": "everrextrading.com",
    "time": "2026-05-07T02:42:47.215Z",
    "uuid": "019e0050-dbe8-73f9-ae1c-d991503ea0d9",
    "url": "https://everrextrading.com/xmlrpc0db0.html?rsd",
    "tags": [
      "@ecarlesi",
      "possiblethreat",
      "phishing"
    ]
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 2480,
    "encodedDataLength": 2158,
    "requests": 2
  },
  "meta": [],
  "scanner": {
    "country": "il"
  },
  "links": {
    "length": 1
  },
  "page": {
    "country": "US",
    "server": "LiteSpeed",
    "ip": "199.188.200.169",
    "apexDomainAgeDays": 0,
    "language": "en",
    "mimeType": "text/html",
    "title": "403 Forbidden",
    "url": "https://everrextrading.com/xmlrpc0db0.html?rsd",
    "tlsValidDays": 198,
    "tlsAgeDays": 0,
    "ptr": "server238-1.web-hosting.com",
    "domainAgeDays": 0,
    "tlsValidFrom": "2026-05-07T00:00:00.000Z",
    "domain": "everrextrading.com",
    "apexDomain": "everrextrading.com",
    "asnname": "NAMECHEAP-NET - Namecheap, Inc., US",
    "asn": "AS22612",
    "tlsIssuer": "Sectigo Public Server Authentication CA DV R36",
    "status": "200"
  },
  "text": {
    "size": 259,
    "hash": "ef456c48ac85d05fbc70b2daf919855603b5ea6fbb4250e7cd4a4328e8dc4423"
  },
  "_id": "019e0050-dbe8-73f9-ae1c-d991503ea0d9",
  "_score": null,
  "sort": [
    1778121767215,
    "019e0050-dbe8-73f9-ae1c-d991503ea0d9"
  ],
  "image": {
    "size": 14590,
    "width": 1600,
    "hash": "601c3c1eee52558581662dcb24bbe1b74ad64b55934c4c7a9c97db5f477c0ec5",
    "height": 1200,
    "aspectratio": 1.33
  },
  "result": "https://urlscan.io/api/v1/result/019e0050-dbe8-73f9-ae1c-d991503ea0d9/"
}