zemahms.xyz
SEO Poisoning Indicator zemahms.xyz Type domain Category SEO Poisoning Confidence high VT Score 3/94 Source urlscan First Seen 2026-06-07 16:00:09 UTC Last Seen 2026-06-08 16:00:11 UTC urlscan View scan result ↗
Raw JSON
{
"verdicts": {
"score": 0,
"malicious": false,
"urlscan": {
"malicious": false
},
"engines": {
"score": 67,
"malicious": true,
"hasVerdicts": true,
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
]
}
},
"submitter": {
"country": "it"
},
"frames": {
"length": 1
},
"usertags": [],
"canonical": {
"task": {
"url": "zemahms.xyz/downloads/zemahms-client.exe"
},
"page": {
"url": "zemahms.xyz/downloads/zemahms-client.exe"
}
},
"labels": [
"domain.apexdomain"
],
"task": {
"visibility": "public",
"method": "api",
"domain": "zemahms.xyz",
"apexDomain": "zemahms.xyz",
"time": "2026-06-07T14:44:43.575Z",
"uuid": "019ea28a-9677-720a-9212-3eba7a554232",
"url": "https://zemahms.xyz/downloads/zemahms-client.exe",
"tags": [
"@ecarlesi",
"possiblethreat"
]
},
"stats": {
"uniqIPs": 1,
"uniqCountries": 1,
"dataLength": 0,
"encodedDataLength": 0,
"requests": 1
},
"meta": [],
"scanner": {
"country": "is"
},
"files": [
{
"filename": "zemahms-client.exe",
"sha256": "8f7d0a518d0561b590d9e47c6a080af9e8ee5a704ee0b1c28cf088181b9a7bab",
"filesize": 9920523,
"state": "completed",
"mimeType": "application/x-dosexec",
"mimeDescription": "PE32 executable (GUI) Intel 80386, for MS Windows",
"url": "https://zemahms.xyz/downloads/zemahms-client.exe"
}
],
"links": {
"length": 0
},
"page": {
"country": "DE",
"server": "Caddy",
"ip": "49.13.205.118",
"apexDomainAgeDays": 0,
"mimeType": "application/octet-stream",
"url": "https://zemahms.xyz/downloads/zemahms-client.exe",
"tlsValidDays": 89,
"tlsAgeDays": 0,
"ptr": "static.118.205.13.49.clients.your-server.de",
"domainAgeDays": 0,
"tlsValidFrom": "2026-06-06T20:13:55.000Z",
"domain": "zemahms.xyz",
"apexDomain": "zemahms.xyz",
"asnname": "HETZNER-AS Hetzner Online GmbH, DE",
"asn": "AS24940",
"tlsIssuer": "YE1",
"status": "200"
},
"websockets": {
"totalBytesSent": 0,
"totalBytesReceived": 0,
"length": 0
},
"_id": "019ea28a-9677-720a-9212-3eba7a554232",
"_score": null,
"sort": [
1780843483575,
"019ea28a-9677-720a-9212-3eba7a554232"
],
"result": "https://urlscan.io/api/v1/result/019ea28a-9677-720a-9212-3eba7a554232/",
"screenshot": "https://urlscan.io/screenshots/019ea28a-9677-720a-9212-3eba7a554232.png"
} Campaign cluster — 1 pivot-discovered domain
| Domain | VT Score |
|---|---|
| admin.notbad.marketing | 0/94 |