Found via IP pivot from vififeu.shop

Indicator f3d6q6n.top Type domain Category SEO Poisoning Confidence medium VT Score 4/94 Source urlscan First Seen 2026-05-19 00:00:47 UTC Last Seen 2026-05-19 00:00:47 UTC urlscan View scan result ↗
Raw JSON
{
  "verdicts": {
    "score": 0,
    "malicious": false,
    "urlscan": {
      "malicious": false
    },
    "engines": {
      "score": 0,
      "malicious": false
    }
  },
  "submitter": {
    "country": "us"
  },
  "frames": {
    "length": 1
  },
  "usertags": [],
  "canonical": {
    "task": {
      "url": "f3d6q6n.top/qBsylow8Bm/1PP.xls"
    },
    "page": {
      "url": "f3d6q6n.top/qBsylow8Bm/1PP.xls"
    }
  },
  "task": {
    "visibility": "public",
    "method": "manual",
    "domain": "f3d6q6n.top",
    "apexDomain": "f3d6q6n.top",
    "time": "2024-10-15T15:13:34.846Z",
    "uuid": "5605a327-075f-4697-ad3c-87303378db98",
    "url": "https://f3d6q6n.top/qBsylow8Bm/1PP.xls"
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 0,
    "encodedDataLength": 0,
    "requests": 1
  },
  "meta": [],
  "scanner": {
    "country": "de"
  },
  "files": [
    {
      "filename": "1PP.xls",
      "sha256": "33d8fc7b5b56a18294e46f9cdde5d314ae3d2bc99a32d6f6c9af52cb38964df8",
      "filesize": 66048,
      "state": "completed",
      "mimeType": "application/x-dosexec",
      "mimeDescription": "PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows",
      "url": "https://f3d6q6n.top/qBsylow8Bm/1PP.xls"
    }
  ],
  "links": {
    "length": 0
  },
  "page": {
    "country": "US",
    "server": "nginx/1.24.0 (Ubuntu)",
    "ip": "216.245.184.84",
    "mimeType": "application/octet-stream",
    "url": "https://f3d6q6n.top/qBsylow8Bm/1PP.xls",
    "tlsValidDays": 89,
    "tlsAgeDays": 11,
    "tlsValidFrom": "2024-10-04T05:02:52.000Z",
    "domain": "f3d6q6n.top",
    "apexDomain": "f3d6q6n.top",
    "asnname": "BLNWX, US",
    "asn": "AS399629",
    "tlsIssuer": "E6",
    "status": "200"
  },
  "_id": "5605a327-075f-4697-ad3c-87303378db98",
  "_score": null,
  "sort": [
    1729005214846,
    "5605a327-075f-4697-ad3c-87303378db98"
  ],
  "result": "https://urlscan.io/api/v1/result/5605a327-075f-4697-ad3c-87303378db98/",
  "screenshot": "https://urlscan.io/screenshots/5605a327-075f-4697-ad3c-87303378db98.png"
}