Found via IP pivot from googlemeeting.click

Indicator us-04-web.one Type domain Category Lure Page Confidence medium VT Score 18/94 Source urlscan First Seen 2026-04-22 08:00:46 UTC Last Seen 2026-04-26 08:00:28 UTC urlscan View scan result ↗
Raw JSON
{
  "submitter": {},
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "us-04-web.one",
    "apexDomain": "us-04-web.one",
    "time": "2026-04-20T14:54:26.468Z",
    "uuid": "019dab62-9e0b-742b-9201-1df4ad45fa67",
    "url": "https://us-04-web.one/doc/docsssu/docu.php"
  },
  "stats": {
    "uniqIPs": 3,
    "uniqCountries": 2,
    "dataLength": 91762,
    "encodedDataLength": 55811,
    "requests": 4
  },
  "page": {
    "country": "US",
    "server": "LiteSpeed",
    "redirected": "same-domain",
    "ip": "104.225.130.131",
    "apexDomainAgeDays": 25,
    "language": "en",
    "mimeType": "text/html",
    "title": "Account Suspended",
    "url": "https://us-04-web.one/cgi-sys/suspendedpage.cgi",
    "tlsValidDays": 89,
    "tlsAgeDays": 25,
    "ptr": "fl-s2.serverpanel.com",
    "domainAgeDays": 25,
    "tlsValidFrom": "2026-03-25T20:15:14.000Z",
    "domain": "us-04-web.one",
    "apexDomain": "us-04-web.one",
    "asnname": "SHOCK-1 - Shock Hosting LLC, US",
    "asn": "AS395092",
    "tlsIssuer": "R13",
    "status": "200"
  },
  "_id": "019dab62-9e0b-742b-9201-1df4ad45fa67",
  "_score": null,
  "sort": [
    1776696866468,
    "019dab62-9e0b-742b-9201-1df4ad45fa67"
  ],
  "result": "https://urlscan.io/api/v1/result/019dab62-9e0b-742b-9201-1df4ad45fa67/",
  "screenshot": "https://urlscan.io/screenshots/019dab62-9e0b-742b-9201-1df4ad45fa67.png"
}