URLScan
Malicious · engine verdict · score 99
Open reportURLScanOriginal source recordObserved: 21 fields
Observed: · Retrieved:
Report ID
01a179cf-55d0-711c-9a47-6fbdb3a7d7d4Final URL
https://net-rowdex.org/HTTP response
200Redirect type
https-onlyRedirects
- To
- https://net-rowdex.org/
- From
- http://net-rowdex.org/
- Status
- 307
- To
- http://net-rowdex.org/
- From
- https://net-rowdex.org/
- Status
- 307
- To
- https://net-rowdex.org/
- From
- http://net-rowdex.org/
- Status
- 301
IP address
158.94.210.119Contacted IP addresses
- 158.94.210.119
Autonomous systems (ASN)
- 202412
Server countries
- NL
Document hash
aa8fb7b26656f96836b333b423dc778cba12e0cd939df06ac568da75ad1aca3aScript hashes
- 8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce
JavaScript globals
- __dclq
- __dclOrig
- __dclFlush
- __smsCheckBeforeSubmit
- __isSmsEnabled
- __isSmsVerified
- intlTelInput
Cookies
- connect.sid
TLS session and certificate
- Subject alternative names
- *.net-rowdex.org
- net-rowdex.org
- Cipher
- AES_128_GCM
- Issuer
- YE2
- Subject
- net-rowdex.org
- Protocol
- TLS 1.3
- Valid until
- Valid from
Domain age, days
6Registered domain age, days
6Certificate age, days
1Certificate validity, days
89Page requests
7Provider verdicts
- Engine verdict
- Tags
- urlscan-ml
- urlscan-ml-60c5e22
- Score
- 99
- Malicious
- Yes
- Overall verdict
- Score
- 0
- Malicious
- No
HTTP headers
- Content-type
- text/html; charset=utf-8
- X-content-type-options
- nosniff
- Referrer-policy
- same-origin
Original source fields · JSON
| Uuid | 01a179cf-55d0-711c-9a47-6fbdb3a7d7d4 |
|---|---|
| Final url | https://net-rowdex.org/ |
| Status | 200 |
| Redirected | https-only |
| Redirects | [
{
"to": "https://net-rowdex.org/",
"from": "http://net-rowdex.org/",
"status": 307
},
{
"to": "http://net-rowdex.org/",
"from": "https://net-rowdex.org/",
"status": 307
},
{
"to": "https://net-rowdex.org/",
"from": "http://net-rowdex.org/",
"status": 301
}
] |
| Ip | 158.94.210.119 |
| Contacted IP addresses | [
"158.94.210.119"
] |
| Asns | [
"202412"
] |
| Countries | [
"NL"
] |
| Document hash | aa8fb7b26656f96836b333b423dc778cba12e0cd939df06ac568da75ad1aca3a |
| Script hashes | [
"8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce"
] |
| Globals | [
"__dclq",
"__dclOrig",
"__dclFlush",
"__smsCheckBeforeSubmit",
"__isSmsEnabled",
"__isSmsVerified",
"intlTelInput"
] |
| Cookies | [
"connect.sid"
] |
| Tls | {
"san": [
"*.net-rowdex.org",
"net-rowdex.org"
],
"cipher": "AES_128_GCM",
"issuer": "YE2",
"subject": "net-rowdex.org",
"protocol": "TLS 1.3",
"valid_to": "2027-01-23T15:11:24Z",
"valid_from": "2026-10-25T15:11:25Z"
} |
| Domain age days | 6 |
| Apex age days | 6 |
| Tls age days | 1 |
| Tls valid days | 89 |
| Requests | 7 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 99,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"content-type": "text/html; charset=utf-8",
"x-content-type-options": "nosniff",
"referrer-policy": "same-origin"
} |
Separate monitor record · date not recorded
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 01a179cf-55d0-711c-9a47-6fbdb3a7d7d4
- score
- null
- malicious
- null
- result_at
- null
- enriched_at
- null
- source_timestamps
- {"urlscan_result_at":null,"urlscan_enriched_at":null}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim
