Indicator download.bimcollab.com Type domain Category Lure Page Confidence medium VT Score 0/94 Source urlscan First Seen 2026-04-18 13:31:12 UTC Last Seen 2026-05-01 00:00:53 UTC urlscan View scan result ↗
Raw JSON
{
  "submitter": {},
  "task": {
    "visibility": "public",
    "method": "api",
    "domain": "download.bimcollab.com",
    "apexDomain": "bimcollab.com",
    "time": "2026-03-10T19:41:55.870Z",
    "uuid": "019cd944-b207-729e-b57e-1d2b9961c5f9",
    "url": "https://download.bimcollab.com/BIMcollab%20Zoom%209.7%20build%2034.exe"
  },
  "stats": {
    "uniqIPs": 1,
    "uniqCountries": 1,
    "dataLength": 0,
    "encodedDataLength": 0,
    "requests": 1
  },
  "files": [
    {
      "filename": "BIMcollab Zoom 9.7 build 34.exe",
      "filesize": 379208760,
      "state": "canceled",
      "url": "https://download.bimcollab.com/BIMcollab%20Zoom%209.7%20build%2034.exe"
    }
  ],
  "page": {
    "country": "US",
    "ip": "13.107.213.45",
    "apexDomainAgeDays": 4099,
    "mimeType": "application/x-msdownload",
    "url": "https://download.bimcollab.com/BIMcollab%20Zoom%209.7%20build%2034.exe",
    "tlsValidDays": 184,
    "tlsAgeDays": 3,
    "domainAgeDays": 1175,
    "tlsValidFrom": "2026-03-07T00:00:00.000Z",
    "domain": "download.bimcollab.com",
    "apexDomain": "bimcollab.com",
    "asnname": "MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation, US",
    "asn": "AS8075",
    "tlsIssuer": "GeoTrust TLS RSA CA G1",
    "status": "200"
  },
  "_id": "019cd944-b207-729e-b57e-1d2b9961c5f9",
  "_score": null,
  "sort": [
    1773171715870,
    "019cd944-b207-729e-b57e-1d2b9961c5f9"
  ],
  "result": "https://urlscan.io/api/v1/result/019cd944-b207-729e-b57e-1d2b9961c5f9/",
  "screenshot": "https://urlscan.io/screenshots/019cd944-b207-729e-b57e-1d2b9961c5f9.png"
}

Campaign cluster — 65 pivot-discovered domains

Domain VT Score
packages.microsoft.com 0/94
myenergysolarpro.dei.gr 1/94
krs.microsoft.com 0/94
support.microsoft.com 0/94
auth.atlas-hub.co.uk 0/94
reportfraud.microsoft.com 0/94
bbrown.perkspot.com 0/94
gremio.net 0/94
uatemswebplatformfde-c8bshteng4cphxdk.a02.azurefd.net 0/94
signin-hris-uat.aikbank.rs 0/94
riverty.app 0/94
img1.niftyimages.com 0/94
www.santanderaspire.co.uk 0/94
auth.hackthebank.nl 15/94
msevents.microsoft.com 0/94
www.doctorican.fr 2/94
www.capitalonesettlement.com 0/94
www.brother.de 0/94
br.linkedin.com 0/94
mhginsurance.com 0/94
es.linkedin.com 0/94
vscode.dev 0/94
myenergysolar.dei.gr 0/94
myenergyheatpump.dei.gr 1/94
login.dei.gr 0/94
order.weissratings.com 0/94
de.linkedin.com 0/94
weisscryptoinvestor.com 1/94
www.crodapersonalcare.com 0/94
qa103.incident.croda.com 0/94
www.weatherbys.bank 0/94
www.cscdbs.com 0/94
thesafemoneyreport.com 0/94
motors1st.com 0/94
fourhands.com 0/94
albatrossfinancialgroup.com 0/94
www.willkie.com 0/94
app.pro10x.com 0/94
w.deliveryslip.com 0/94
apav.pt 0/94
www.motionapplied.com 0/94
cdn-order.weissratings.com 0/94
cccc.org.uk 2/94
mh-holdingpage.co.uk 0/94
artisanfsonline.com 0/94
www.eastwestbank.com.cn 0/94
www.unoform.com 0/94
www.rbsinternational.com 0/94
www.anymatik.be 0/94
www.globalknowledge.com 0/94
www.precastcontiga.heidelbergmaterials.se 0/94
www.pulte.com 0/94
ckck.bz 1/94
www.ey.com 0/94
my.postmagnet.it 0/94
app-5783.younium.net 0/94
in.linkedin.com 0/94
landing.it-internal-support.co.uk 0/94
www.mcsharepoint.com 6/94
creditcheckup.co.uk 0/94
be.linkedin.com 0/94
rrrffffdddd-epasf8apcdh5a4f3.z03.azurefd.net 0/94
sso.svensktnaringsliv.se 0/94
shipmentportal.online 0/94
cloud.corptax.com 0/94