URLScan
Malicious · engine verdict · score 52
SHA-256 24cfede0b5c54975ad1cf54bca44792152b7db9471a51862b77f45349233af26
URLScanOriginal source recordObserved: 23 fields
Observed: · Retrieved:
Report ID
01a188df-b44a-7723-8664-961d38fd362eFinal URL
https://gbsell.com/HTTP response
200Redirect type
https-onlyRedirects
- To
- https://gbsell.com/
- From
- http://gbsell.com/
- Status
- 307
IP address
82.221.139.204Contacted domains
- www.google-analytics.com
- api.gbsell.com
- fonts.gstatic.com
- www.googletagmanager.com
- fonts.googleapis.com
Contacted IP addresses
- 142.251.210.35
- 172.253.63.138
- 142.251.211.104
- 142.251.163.95
- 82.221.139.204
Autonomous systems (ASN)
- 15169
- 50613
Server countries
- US
- IS
Document hash
71bba73a1ef074fd54073e7d2f3fd0f60246b058903923d34b0c840825cf0ad9Script hashes
- 34a796f6b79a6e9c199c49534b204ccdcbc42579ec590324b20e53c365f44a7e
- 32184692815a9624ace6d743fd3d3bc9d0934e58af2d1678ccbf2d176f550927
JavaScript globals
- gtag
- dataLayer
- google_tag_data
- google_tag_manager
- onYouTubeIframeAPIReady
- gaGlobal
- webpackChunkgbsell_frontend
- __reactRouterVersion
- currentVersion
- storedVersion
Cookies
- _ga
- _ga_TZ656BWCKY
Browser storage keys
- appVersion
TLS session and certificate
- Subject alternative names
- api.gbsell.com
- gbsell.com
- www.gbsell.com
- Cipher
- AES_128_GCM
- Issuer
- YR2
- Subject
- gbsell.com
- Protocol
- TLS 1.3
- Valid until
- Valid from
Domain age, days
3182Differs from the registration date in WHOIS (2026-09-12), which gives 47 days on the scan date 2026-10-29. The two sources disagree; both values are kept as recorded.
Registered domain age, days
3182Differs from the registration date in WHOIS (2026-09-12), which gives 47 days on the scan date 2026-10-29. The two sources disagree; both values are kept as recorded.
Certificate age, days
47Certificate validity, days
89Page requests
16Provider verdicts
- Engine verdict
- Tags
- urlscan-ml
- urlscan-ml-60c5e22
- Score
- 52
- Malicious
- Yes
- Overall verdict
- Score
- 0
- Malicious
- No
HTTP headers
- Server
- nginx/1.18.0 (Ubuntu)
- Content-type
- text/html
Original source fields · JSON
| Uuid | 01a188df-b44a-7723-8664-961d38fd362e |
|---|---|
| Final url | https://gbsell.com/ |
| Status | 200 |
| Redirected | https-only |
| Redirects | [
{
"to": "https://gbsell.com/",
"from": "http://gbsell.com/",
"status": 307
}
] |
| Ip | 82.221.139.204 |
| Contacted domains | [
"www.google-analytics.com",
"api.gbsell.com",
"fonts.gstatic.com",
"www.googletagmanager.com",
"fonts.googleapis.com"
] |
| Contacted IP addresses | [
"142.251.210.35",
"172.253.63.138",
"142.251.211.104",
"142.251.163.95",
"82.221.139.204"
] |
| Asns | [
"15169",
"50613"
] |
| Countries | [
"US",
"IS"
] |
| Document hash | 71bba73a1ef074fd54073e7d2f3fd0f60246b058903923d34b0c840825cf0ad9 |
| Script hashes | [
"34a796f6b79a6e9c199c49534b204ccdcbc42579ec590324b20e53c365f44a7e",
"32184692815a9624ace6d743fd3d3bc9d0934e58af2d1678ccbf2d176f550927"
] |
| Globals | [
"gtag",
"dataLayer",
"google_tag_data",
"google_tag_manager",
"onYouTubeIframeAPIReady",
"gaGlobal",
"webpackChunkgbsell_frontend",
"__reactRouterVersion",
"currentVersion",
"storedVersion"
] |
| Cookies | [
"_ga",
"_ga_TZ656BWCKY"
] |
| Storage keys | [
"appVersion"
] |
| Tls | {
"san": [
"api.gbsell.com",
"gbsell.com",
"www.gbsell.com"
],
"cipher": "AES_128_GCM",
"issuer": "YR2",
"subject": "gbsell.com",
"protocol": "TLS 1.3",
"valid_to": "2026-12-11T11:45:45Z",
"valid_from": "2026-09-12T11:45:46Z"
} |
| Domain age days | 3182 Differs from the registration date in WHOIS (2026-09-12), which gives 47 days on the scan date 2026-10-29. The two sources disagree; both values are kept as recorded. |
| Apex age days | 3182 Differs from the registration date in WHOIS (2026-09-12), which gives 47 days on the scan date 2026-10-29. The two sources disagree; both values are kept as recorded. |
| Tls age days | 47 |
| Tls valid days | 89 |
| Requests | 16 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 52,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "nginx/1.18.0 (Ubuntu)",
"content-type": "text/html"
} |
Separate monitor record · 2026-10-30 04:30 UTC
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 01a188df-b44a-7723-8664-961d38fd362e
- score
- 0
- malicious
- false
- result_at
- 2026-10-30T04:30:24Z
- enriched_at
- 2026-11-01T09:17:52Z
- source_timestamps
- {"urlscan_result_at":"2026-10-30 05:30:24","urlscan_enriched_at":"2026-11-01 10:17:52"}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim
