Indicator update50lite.net Type domain Category Lure Page Confidence high VT Score 5/94 Source urlscan First Seen 2026-04-18 13:31:12 UTC Last Seen 2026-04-19 16:00:47 UTC urlscan View scan result ↗
Raw JSON
{
  "submitter": {},
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "update50lite.net",
    "apexDomain": "update50lite.net",
    "time": "2026-03-29T07:48:46.238Z",
    "uuid": "019d3890-fa95-743f-b9f0-c8d224f8c371",
    "url": "https://update50lite.net/Zoom.us/",
    "tags": [
      "@ecarlesi",
      "threat",
      "malware"
    ]
  },
  "stats": {
    "uniqIPs": 4,
    "uniqCountries": 2,
    "dataLength": 64047,
    "encodedDataLength": 50820,
    "requests": 6
  },
  "files": [
    {
      "filename": "Zoom_em_eu_EXMZmT3o_installer_Win7-Win11_x86_x64.msi",
      "filesize": 114102272,
      "state": "canceled",
      "url": "https://update50lite.net/Zoom.us/Windows/Zoom_em_eu_EXMZmT3o_installer_Win7-Win11_x86_x64.msi"
    }
  ],
  "page": {
    "country": "US",
    "server": "LiteSpeed",
    "redirected": "same-domain",
    "ip": "198.252.98.80",
    "apexDomainAgeDays": 1,
    "language": "en",
    "mimeType": "text/html",
    "title": "Zoom Client Update",
    "url": "https://update50lite.net/Zoom.us/Windows/invite.php",
    "tlsValidDays": 89,
    "tlsAgeDays": 1,
    "domainAgeDays": 1,
    "tlsValidFrom": "2026-03-27T17:38:43.000Z",
    "domain": "update50lite.net",
    "apexDomain": "update50lite.net",
    "asnname": "HAWKHOST - Hawk Host Inc., CA",
    "asn": "AS20068",
    "tlsIssuer": "R13",
    "status": "200"
  },
  "_id": "019d3890-fa95-743f-b9f0-c8d224f8c371",
  "_score": null,
  "sort": [
    1774770526238,
    "019d3890-fa95-743f-b9f0-c8d224f8c371"
  ],
  "result": "https://urlscan.io/api/v1/result/019d3890-fa95-743f-b9f0-c8d224f8c371/",
  "screenshot": "https://urlscan.io/screenshots/019d3890-fa95-743f-b9f0-c8d224f8c371.png"
}

Campaign cluster — 82 pivot-discovered domains

Domain VT Score
webdisk.katedralpangkalpinang.com 0/94
webdisk.jjhuthotel.com 0/94
cpcontacts.jjhuthotel.com 0/94
autodiscover.jntconnectrun.com 0/94
cpcontacts.katedralpangkalpinang.com 0/94
autodiscover.katedralpangkalpinang.com 0/94
cpcalendars.jjhuthotel.com 0/94
www.threelettersbrooklyn.com.w303ofc1.com 0/94
www.leucabrindisi.com.serviziotaxih24.com 0/94
www.medanlink.com.aatotosuper.xyz 2/94
medanlink.com.aatotosuper.xyz 0/94
leccebrindisi.com.serviziotaxih24.com 2/94
mail.jnt7vipxjpn.site 0/94
www.leccebrindisi.com.serviziotaxih24.com 2/94
autodiscover.eduliteramalang.com 0/94
webdisk.eduliteramalang.com 0/94
mail.ptbumiindonesia.co.id 0/94
cpcalendars.eduliteramalang.com 0/94
cpcontacts.eduliteramalang.com 0/94
cpanel.eduliteramalang.com 0/94
mail.marinawelford.com 0/94
mail.slot777max351.online 0/94
livermoregames.com.ampku-id.com 0/94
cardozaplayer.com.aatotosuper.xyz 0/94
mail.slot888max358.online 0/94
mail.bos77vip.site 0/94
mail.slot888max354.online 0/94
www.serviziotaxih24.com 0/94
www.cardozaplayer.com.aatotosuper.xyz 1/94
thesocialmediastudio.com.aatotosuper.xyz 1/94
www.fairplaygolfhotel.com.aatotosuper.xyz 0/94
venusvaporizer.com.tinymightvape.com 0/94
gingertwinsies.com 0/94
mail.jnt7vip.site 0/94
mail.hokix100vip.site 0/94
mail.surga57.site 0/94
mail.scatter33vipxjpn.site 0/94
webdisk.scatter33vipxjpn.site 0/94
cpanel.scatter33vipxjpn.site 0/94
cpcontacts.scatter33vipxjpn.site 0/94
autodiscover.scatter33vipxjpn.site 0/94
cpcalendars.scatter33vipxjpn.site 0/94
webmail.scatter33vipxjpn.site 0/94
mail.slot888gacorx3.online 0/94
mail.slot888gacorx7.online 0/94
mail.888siniyuk13x.online 0/94
mail.thereliablenews.com 0/94
mail.hokix100vipxjpn.site 0/94
mail.bos77vipxjpn.site 0/94
mail.kangtotovip77.shop 0/94
mail.777win888.shop 0/94
mail.777win77.shop 0/94
mail.spacemanwin8.shop 0/94
mail.kangtotojpx391.shop 0/94
mail.sbobetvip888.shop 0/94
mail.kangtotojp125.shop 0/94
mail.spaceman555.shop 0/94
mail.slot888gacorx4.online 0/94
mail.slot777jp125.shop 0/94
mail.slot777vip88.shop 0/94
mail.sbobetwin555.shop 0/94
mail.slot777gacorx4.online 0/94
mail.slot888jpx391.shop 0/94
mail.888hoki555.shop 0/94
mail.slot777win555.shop 0/94
mail.kangtotowin555.shop 0/94
mail.888win88.shop 0/94
mail.888win777.shop 0/94
mail.spacemanjpx391.shop 0/94
mail.tkagency.mom 0/94
mail.polaslotjpx2.shop 0/94
mail.slot777jpgacrx2.shop 0/94
mail.jmarblejpx1.shop 0/94
mail.slot888jpgacrx2.shop 0/94
mail.slot777jpgacrx3.shop 0/94
mail.polaslotjpx3.shop 0/94
mail.balapkelerengx2.shop 0/94
mail.antirungkatxjp1.shop 0/94
mail.spacemanjp125.shop 0/94
mail.slot888vip777.shop 0/94
brentgaines.com 0/94
mail.sbobetvip88.shop 0/94