URLScan
Malicious · engine verdict · score 97
SHA-256 5feb0782824b0e23a916610b2d8a86913223d8dbe6f9f256f2f2e10b6ba691fa
URLScanOriginal source recordObserved: 24 fields
Observed: · Retrieved:
Report ID
01a1a7e5-52fe-749a-95ba-995a61251bc4Final URL
https://saitostudio.live/HTTP response
200Redirect type
https-onlyRedirects
- To
- https://saitostudio.live/
- From
- http://saitostudio.live/
- Status
- 307
IP address
172.67.137.184Contacted domains
- platform.twitter.com
- syndication.twitter.com
- connect.facebook.net
- maxcdn.bootstrapcdn.com
- www.googletagmanager.com
- www.facebook.com
- stats.g.doubleclick.net
- analytics.google.com
- fonts.gstatic.com
- fonts.googleapis.com
Contacted IP addresses
- 57.144.248.1
- 172.66.0.227
- 2a00:1450:4001:c21::9c
- 2a00:1450:4001:c25::66
- 142.251.110.94
- 57.144.248.128
- 2a00:1450:4001:c17::5f
- 104.18.11.207
- 2a00:1450:4001:c17::61
- 146.75.116.157
- 172.67.137.184
Autonomous systems (ASN)
- 32934
- 13335
- 15169
- 54113
Server countries
- DE
- US
Linked domains
- ameblo.jp
- www.facebook.com
- twitter.com
- www.instagram.com
- cr-reserve.e-shops.jp
- saitostudio.hatenablog.com
- saitost.base.shop
- saitost.crayonsite.com
- x.com
Social media links
- https://www.facebook.com/share/1Hzrwvmk1u
- https://twitter.com/Saitostudio
- https://www.instagram.com/saitostudio
- https://x.com/intent/follow
- https://x.com/intent/user
- https://x.com/intent/tweet
Document hash
5feb0782824b0e23a916610b2d8a86913223d8dbe6f9f256f2f2e10b6ba691faScript hashes
- d18daeb210021d7d120e34aa7c981dc1bf2f2623bfdf1390266634ee99508c05
- f7e3b54f50c960960ad000492139b65aec02a98b033ad38e8ac71e7936940fbc
- 89d73b19c9406f717894352e1bbc4387dbd054361ad6645a726bf47503d172e7
- 3241c479f4bbb5e74ea5cd9e37f67c9a42c0b00552b0d746a5ae2a1ed9916538
- ddd648d1c881a011578754e95ee4cde7a250f4641619b25a2bcb270b101daaaf
- 8726b6725e0ac1df4e9028ab047e0e3643eeda1c4d84807bd25d7f5163dc07d2
- 4bcebaf5e931e7c1a3c911ff48ee5473d6104e630caf8b29fcd6653074bafa3d
- 41bc4d4fe88139d6ee89abfcb2abac71e1430d85dbffc0be7c8f6bd36f4ced7e
- cf2070d7c4d62ab345a12d2ec161a35bd729d28da9e35b2c48cceeca7c6b6a7c
JavaScript globals
- $
- jQuery
- jQuery111108391865832332459
- SliderPro
- SliderProSlide
- SliderProUtils
- debug
- gtag
- dataLayer
- FB
- __twttrll
- twttr
- __twttr
- FB_LOCAL_GLOBAL
- __DEV__
- __buffer
- google_tag_data
- google_tag_manager
- onYouTubeIframeAPIReady
- gaGlobal
Cookies
- SESS_PUBLISH
- _ga_3T5CKB4TC3
- _ga
- __cf_bm
TLS session and certificate
- Subject alternative names
- saitostudio.live
- *.saitostudio.live
- Cipher
- AES_128_GCM
- Issuer
- WE1
- Subject
- saitostudio.live
- Protocol
- QUIC
- Valid until
- Valid from
Domain age, days
93Registered domain age, days
93Certificate age, days
34Certificate validity, days
90Page requests
82Provider verdicts
- Engine verdict
- Tags
- urlscan-ml
- urlscan-ml-2aab354
- Score
- 97
- Malicious
- Yes
- Overall verdict
- Score
- 0
- Malicious
- No
HTTP headers
- Server
- cloudflare
- Content-type
- text/html
- X-frame-options
- SAMEORIGIN
- X-content-type-options
- nosniff
- Priority
- u=0,i
Original source fields · JSON
| Uuid | 01a1a7e5-52fe-749a-95ba-995a61251bc4 |
|---|---|
| Final url | https://saitostudio.live/ |
| Status | 200 |
| Redirected | https-only |
| Redirects | [
{
"to": "https://saitostudio.live/",
"from": "http://saitostudio.live/",
"status": 307
}
] |
| Ip | 172.67.137.184 |
| Contacted domains | [
"platform.twitter.com",
"syndication.twitter.com",
"connect.facebook.net",
"maxcdn.bootstrapcdn.com",
"www.googletagmanager.com",
"www.facebook.com",
"stats.g.doubleclick.net",
"analytics.google.com",
"fonts.gstatic.com",
"fonts.googleapis.com"
] |
| Contacted IP addresses | [
"57.144.248.1",
"172.66.0.227",
"2a00:1450:4001:c21::9c",
"2a00:1450:4001:c25::66",
"142.251.110.94",
"57.144.248.128",
"2a00:1450:4001:c17::5f",
"104.18.11.207",
"2a00:1450:4001:c17::61",
"146.75.116.157",
"172.67.137.184"
] |
| Asns | [
"32934",
"13335",
"15169",
"54113"
] |
| Countries | [
"DE",
"US"
] |
| Linked domains | [
"ameblo.jp",
"www.facebook.com",
"twitter.com",
"www.instagram.com",
"cr-reserve.e-shops.jp",
"saitostudio.hatenablog.com",
"saitost.base.shop",
"saitost.crayonsite.com",
"x.com"
] |
| Social | [
"https://www.facebook.com/share/1Hzrwvmk1u",
"https://twitter.com/Saitostudio",
"https://www.instagram.com/saitostudio",
"https://x.com/intent/follow",
"https://x.com/intent/user",
"https://x.com/intent/tweet"
] |
| Document hash | 5feb0782824b0e23a916610b2d8a86913223d8dbe6f9f256f2f2e10b6ba691fa |
| Script hashes | [
"d18daeb210021d7d120e34aa7c981dc1bf2f2623bfdf1390266634ee99508c05",
"f7e3b54f50c960960ad000492139b65aec02a98b033ad38e8ac71e7936940fbc",
"89d73b19c9406f717894352e1bbc4387dbd054361ad6645a726bf47503d172e7",
"3241c479f4bbb5e74ea5cd9e37f67c9a42c0b00552b0d746a5ae2a1ed9916538",
"ddd648d1c881a011578754e95ee4cde7a250f4641619b25a2bcb270b101daaaf",
"8726b6725e0ac1df4e9028ab047e0e3643eeda1c4d84807bd25d7f5163dc07d2",
"4bcebaf5e931e7c1a3c911ff48ee5473d6104e630caf8b29fcd6653074bafa3d",
"41bc4d4fe88139d6ee89abfcb2abac71e1430d85dbffc0be7c8f6bd36f4ced7e",
"cf2070d7c4d62ab345a12d2ec161a35bd729d28da9e35b2c48cceeca7c6b6a7c"
] |
| Globals | [
"$",
"jQuery",
"jQuery111108391865832332459",
"SliderPro",
"SliderProSlide",
"SliderProUtils",
"debug",
"gtag",
"dataLayer",
"FB",
"__twttrll",
"twttr",
"__twttr",
"FB_LOCAL_GLOBAL",
"__DEV__",
"__buffer",
"google_tag_data",
"google_tag_manager",
"onYouTubeIframeAPIReady",
"gaGlobal"
] |
| Cookies | [
"SESS_PUBLISH",
"_ga_3T5CKB4TC3",
"_ga",
"__cf_bm"
] |
| Tls | {
"san": [
"saitostudio.live",
"*.saitostudio.live"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "saitostudio.live",
"protocol": "QUIC",
"valid_to": "2026-12-30T14:45:30Z",
"valid_from": "2026-10-01T13:46:49Z"
} |
| Domain age days | 93 |
| Apex age days | 93 |
| Tls age days | 34 |
| Tls valid days | 90 |
| Requests | 82 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-2aab354"
],
"score": 97,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html",
"x-frame-options": "SAMEORIGIN",
"x-content-type-options": "nosniff",
"priority": "u=0,i"
} |
Separate monitor record · date not recorded
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 01a0189e-acf7-7215-8024-38308085372f
- score
- null
- malicious
- null
- result_at
- null
- enriched_at
- null
- source_timestamps
- {"urlscan_result_at":null,"urlscan_enriched_at":null}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim