URLScan
Malicious
SHA-256 b26880dd4a7813843badf16b99e8c86a11fde7db1ebf9a3bad4422625e650871
URLScanOriginal source recordObserved: 23 fields
Observed: · Retrieved:
Report ID
01a19429-4ddf-70ac-97f0-9c928bdf8a25Final URL
https://ai-trustwallet-restored.netlify.app/HTTP response
200Redirect type
https-onlyRedirects
- To
- https://ai-trustwallet-restored.netlify.app/
- From
- http://ai-trustwallet-restored.netlify.app/
- Status
- 307
IP address
98.84.224.111Reverse DNS (PTR)
ec2-98-84-224-111.compute-1.amazonaws.comContacted domains
- static.zdassets.com
- theme.zdassets.com
- support.trustwallet.com
Contacted IP addresses
- 104.16.219.229
- 216.198.53.3
- 98.84.224.111
Autonomous systems (ASN)
- 13335
- 209242
- 14618
Server countries
- US
Linked domains
- support.trustwallet.com
- community.trustwallet.com
- trustwallet.com
- apps.apple.com
- play.google.com
- www.zendesk.com
Document hash
b26880dd4a7813843badf16b99e8c86a11fde7db1ebf9a3bad4422625e650871Script hashes
- 3f1432bb8646d5c12d085baac3cb84c5de933132b37766e155eba0723cd7fa55
- 0a7006dbb5e976b8d61720007902de944905e9caef9ada0fa309b610a29872dd
- 97e68b99bcb0b9a46e5d76a1779690cc3b213c722ee41ff3fb5fcffce6a58b4e
- e419b62ae35cc3a7204d6b535399f76b1c902636d1400208df525519141d6793
JavaScript globals
- I18N
- Zendesk
- HelpCenter
- webpackJsonp
- regeneratorRuntime
- I18n
- __CF$cv$params
TLS session and certificate
- Subject alternative names
- *.netlify.app
- netlify.app
- Cipher
- AES_128_GCM
- Issuer
- DigiCert Global G2 TLS RSA SHA256 2020 CA1
- Subject
- *.netlify.app
- Protocol
- TLS 1.3
- Valid until
- Valid from
Domain age, days
237Registered domain age, days
237Certificate age, days
257Certificate validity, days
396Page requests
15Provider verdicts
- Engine verdict
- Tags
- urlscan-ml
- urlscan-ml-60c5e22
- Score
- 89
- Malicious
- Yes
- Overall verdict
- Tags
- phishing
- Score
- 100
- Brands
- trustwallet
- Malicious
- Yes
- Categories
- phishing
- URLScan verdict
- Tags
- phishing
- Score
- 100
- Brands
- Trustwallet
- Malicious
- Yes
- Categories
- phishing
HTTP headers
- Server
- Netlify
- Content-type
- text/html; charset=UTF-8
- Strict-transport-security
- max-age=31536000; includeSubDomains; preload
Original source fields · JSON
| Uuid | 01a19429-4ddf-70ac-97f0-9c928bdf8a25 |
|---|---|
| Final url | https://ai-trustwallet-restored.netlify.app/ |
| Status | 200 |
| Redirected | https-only |
| Redirects | [
{
"to": "https://ai-trustwallet-restored.netlify.app/",
"from": "http://ai-trustwallet-restored.netlify.app/",
"status": 307
}
] |
| Ip | 98.84.224.111 |
| Ptr | ec2-98-84-224-111.compute-1.amazonaws.com |
| Contacted domains | [
"static.zdassets.com",
"theme.zdassets.com",
"support.trustwallet.com"
] |
| Contacted IP addresses | [
"104.16.219.229",
"216.198.53.3",
"98.84.224.111"
] |
| Asns | [
"13335",
"209242",
"14618"
] |
| Countries | [
"US"
] |
| Linked domains | [
"support.trustwallet.com",
"community.trustwallet.com",
"trustwallet.com",
"apps.apple.com",
"play.google.com",
"www.zendesk.com"
] |
| Document hash | b26880dd4a7813843badf16b99e8c86a11fde7db1ebf9a3bad4422625e650871 |
| Script hashes | [
"3f1432bb8646d5c12d085baac3cb84c5de933132b37766e155eba0723cd7fa55",
"0a7006dbb5e976b8d61720007902de944905e9caef9ada0fa309b610a29872dd",
"97e68b99bcb0b9a46e5d76a1779690cc3b213c722ee41ff3fb5fcffce6a58b4e",
"e419b62ae35cc3a7204d6b535399f76b1c902636d1400208df525519141d6793"
] |
| Globals | [
"I18N",
"Zendesk",
"HelpCenter",
"webpackJsonp",
"regeneratorRuntime",
"I18n",
"__CF$cv$params"
] |
| Tls | {
"san": [
"*.netlify.app",
"netlify.app"
],
"cipher": "AES_128_GCM",
"issuer": "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
"subject": "*.netlify.app",
"protocol": "TLS 1.3",
"valid_to": "2027-03-19T23:59:59Z",
"valid_from": "2026-02-16T00:00:00Z"
} |
| Domain age days | 237 |
| Apex age days | 237 |
| Tls age days | 257 |
| Tls valid days | 396 |
| Requests | 15 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 89,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"trustwallet"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"Trustwallet"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP headers | {
"server": "Netlify",
"content-type": "text/html; charset=UTF-8",
"strict-transport-security": "max-age=31536000; includeSubDomains; preload"
} |
Separate monitor record · date not recorded
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 01a19429-4ddf-70ac-97f0-9c928bdf8a25
- score
- null
- malicious
- null
- result_at
- null
- enriched_at
- null
- source_timestamps
- {"urlscan_result_at":null,"urlscan_enriched_at":null}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim