URLScan
Malicious · engine verdict · score 99
Open reportURLScanOriginal source recordObserved: 14 fields
Observed: · Retrieved:
Report ID
019ed434-49e8-71ce-9309-15fe2689c876Final URL
http://remfix-santeh.online/HTTP response
200Redirects
- To
- https://remfix-santeh.online/
- From
- http://remfix-santeh.online/
- Status
- 307
- To
- http://remfix-santeh.online/
- From
- https://remfix-santeh.online/
- Status
- 301
- To
- http://remfix-santeh.online/
- From
- http://remfix-santeh.online/
- Status
- 307
IP address
147.45.157.4Contacted IP addresses
- 147.45.157.4
Autonomous systems (ASN)
- 9123
Server countries
- RU
Document hash
9751fd706dfeca9c26b68ca14e85b660a52ed3bc7fbaaa3c7f733c4e23a21fbbDomain age, days
1Registered domain age, days
1Page requests
2Provider verdicts
- Engine verdict
- Tags
- urlscan-ml
- urlscan-ml-60c5e22
- Score
- 99
- Malicious
- Yes
- Overall verdict
- Score
- 0
- Malicious
- No
HTTP headers
- Server
- nginx
- Content-type
- text/html; charset=utf-8
Original source fields · JSON
| Uuid | 019ed434-49e8-71ce-9309-15fe2689c876 |
|---|---|
| Final url | http://remfix-santeh.online/ |
| Status | 200 |
| Redirects | [
{
"to": "https://remfix-santeh.online/",
"from": "http://remfix-santeh.online/",
"status": 307
},
{
"to": "http://remfix-santeh.online/",
"from": "https://remfix-santeh.online/",
"status": 301
},
{
"to": "http://remfix-santeh.online/",
"from": "http://remfix-santeh.online/",
"status": 307
}
] |
| Ip | 147.45.157.4 |
| Contacted IP addresses | [
"147.45.157.4"
] |
| Asns | [
"9123"
] |
| Countries | [
"RU"
] |
| Document hash | 9751fd706dfeca9c26b68ca14e85b660a52ed3bc7fbaaa3c7f733c4e23a21fbb |
| Domain age days | 1 |
| Apex age days | 1 |
| Requests | 2 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 99,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "nginx",
"content-type": "text/html; charset=utf-8"
} |
Separate monitor record · date not recorded
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 019ed434-49e8-71ce-9309-15fe2689c876
- score
- null
- malicious
- null
- result_at
- null
- enriched_at
- 2026-06-25T08:19:53Z
- source_timestamps
- {"urlscan_result_at":null,"urlscan_enriched_at":"2026-06-25 10:19:53"}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim
