URLScan
Schädlich
Bericht öffnenURLScanOriginal source recordRetrieved: 22 fields
Beobachtet: · Retrieved:
| Uuid | 01a172a2-bbab-76ff-849f-5dea54c32830 |
|---|---|
| Final url | https://docu-2025.2025-doc2026.workers.dev/ |
| Status | 200 |
| Weitergeleitet | https-only |
| Redirects | [
{
"to": "https://docu-2025.2025-doc2026.workers.dev/",
"from": "http://docu-2025.2025-doc2026.workers.dev/",
"status": 307
}
] |
| Ip | 172.67.133.78 |
| Contacted domains | [
"fonts.gstatic.com",
"cdnjs.cloudflare.com",
"encrypted-tbn0.gstatic.com",
"www.irs.gov",
"fonts.googleapis.com",
"code.jquery.com"
] |
| Contacted IP addresses | [
"172.217.222.94",
"173.194.205.139",
"23.12.145.138",
"104.17.25.14",
"173.194.175.95",
"151.101.193.155",
"172.67.133.78"
] |
| Asns | [
"15169",
"20940",
"13335",
"54113"
] |
| Countries | [
"US"
] |
| Linked domains | [
"www.irs.gov",
"www.usa.gov"
] |
| Document hash | 2c3157522559a25c09e45f6d5a5d006890ea6fed19b13b8d56b6c91c366ce515 |
| Globals | [
"showPage",
"detectOS",
"initLandingPage",
"CONFIG",
"osInfo",
"isVerified",
"captchaBox",
"captchaCheckbox",
"continueBtn"
] |
| Cookies | [
"akaalb_DMAF_ALB_PROD"
] |
| Tls | {
"san": [
"*.2025-doc2026.workers.dev",
"2025-doc2026.workers.dev"
],
"cipher": "AES_128_GCM",
"issuer": "YE2",
"subject": "2025-doc2026.workers.dev",
"protocol": "QUIC",
"valid_to": "2027-01-11T18:40:23Z",
"valid_from": "2026-10-13T18:40:24Z"
} |
| Domainalter in Tagen | 10 |
| Apex age days | 10 |
| Tls age days | 11 |
| TLS-Gültigkeit in Tagen | 89 |
| Requests | 12 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 75,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"irs"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"IRS"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html;charset=UTF-8"
} |
Separate monitor record · date not recorded
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 01a172a2-bbab-76ff-849f-5dea54c32830
- score
- null
- malicious
- null
- result_at
- null
- enriched_at
- null
- source_timestamps
- {"urlscan_result_at":null,"urlscan_enriched_at":null}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim
