mhelpin.xyz
SEO Poisoning Indicator mhelpin.xyz Type domain Category SEO Poisoning Confidence high VT Score 0/94 Source urlscan First Seen 2026-05-21 08:00:55 UTC Last Seen 2026-05-22 16:00:59 UTC urlscan View scan result ↗
Raw JSON
{
"verdicts": {
"score": 0,
"malicious": false,
"urlscan": {
"malicious": false
},
"engines": {
"score": 100,
"malicious": true,
"hasVerdicts": true,
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
]
}
},
"submitter": {
"country": "it"
},
"dom": {
"size": 11902,
"hash": "1a21e501819c74ba585d738abe3ec53506b9c9dba4077d2f06983bbca21996a8"
},
"frames": {
"length": 1
},
"usertags": [],
"canonical": {
"task": {
"url": "mhelpin.xyz/UltraViewer.exe"
},
"page": {
"url": "mhelpin.xyz/UltraViewer.exe"
}
},
"screenshot": "https://urlscan.io/screenshots/019e4718-4a52-736d-b3ee-0efb6395c7d8.png",
"task": {
"visibility": "public",
"method": "api",
"domain": "mhelpin.xyz",
"apexDomain": "mhelpin.xyz",
"time": "2026-05-20T20:33:59.839Z",
"uuid": "019e4718-4a52-736d-b3ee-0efb6395c7d8",
"url": "https://mhelpin.xyz/UltraViewer.exe",
"tags": [
"@ecarlesi",
"possiblethreat"
]
},
"stats": {
"uniqIPs": 1,
"uniqCountries": 1,
"dataLength": 11855,
"encodedDataLength": 12019,
"requests": 2
},
"meta": [],
"scanner": {
"country": "nl"
},
"files": [
{
"filename": "UltraViewer.exe",
"sha256": "020aac79a14717e316a593155ca778dd3e253b888bf62633b174838d35df7f41",
"filesize": 3648408,
"state": "completed",
"mimeType": "application/x-dosexec",
"mimeDescription": "PE32 executable (GUI) Intel 80386, for MS Windows",
"url": "https://mhelpin.xyz/UltraViewer.exe"
}
],
"links": {
"length": 0
},
"page": {
"country": "NL",
"server": "openresty/1.29.2.3",
"ip": "192.142.10.5",
"apexDomainAgeDays": 0,
"language": "nl",
"mimeType": "text/html",
"title": "Even geduld…",
"url": "https://mhelpin.xyz/UltraViewer.exe",
"tlsValidDays": 89,
"tlsAgeDays": 0,
"ptr": "cp11.ams1.ultacp.com",
"domainAgeDays": 0,
"tlsValidFrom": "2026-05-20T03:03:22.000Z",
"domain": "mhelpin.xyz",
"apexDomain": "mhelpin.xyz",
"asnname": "ULTAHOST-AS Ultahost, Inc., US",
"asn": "AS214036",
"tlsIssuer": "R13",
"status": "200"
},
"text": {
"size": 6199,
"hash": "82fd4b86ff3de0257533292b14c0348a29812dd13cd68c43686d6784dcd8a966"
},
"websockets": {
"totalBytesSent": 0,
"totalBytesReceived": 0,
"length": 0
},
"_id": "019e4718-4a52-736d-b3ee-0efb6395c7d8",
"_score": null,
"sort": [
1779309239839,
"019e4718-4a52-736d-b3ee-0efb6395c7d8"
],
"image": {
"size": 13421,
"width": 1600,
"hash": "e102358465e2a7d846284f0c17fb6cde2caf9bec004fe341795e0d2f40230d8a",
"height": 1200,
"aspectratio": 1.33
},
"result": "https://urlscan.io/api/v1/result/019e4718-4a52-736d-b3ee-0efb6395c7d8/"
}