URLScan
Malicious · engine verdict · score 100
SHA-256 21ef12e8362ec36e41634d87fb156ec12475617d4c41da216a2f63ac82dcd60e
URLScanOriginal source recordObserved: 23 fields
Observed: · Retrieved:
Report ID
01a1a9c3-355c-7789-8c0f-e4efad25b65fFinal URL
https://spax-wallet.sbs/HTTP response
200IP address
85.121.177.177Reverse DNS (PTR)
srv1.example.comContacted domains
- www.gstatic.com
- play.google.com
- youtube.googleapis.com
- drive.google.com
- apis.google.com
- fonts.gstatic.com
- content-workspacevideo-pa.googleapis.com
- ogads-pa.clients6.google.com
- ssl.gstatic.com
- bootstrap.smartsuppchat.com
- fonts.googleapis.com
- www.smartsuppchat.com
- api.country.is
- lh3.googleusercontent.com
Contacted IP addresses
- 172.217.112.4
- 142.250.68.195
- 142.250.68.206
- 142.251.211.99
- 142.251.153.7
- 172.217.115.4
- 142.250.68.202
- 52.29.168.79
- 142.250.72.10
- 142.250.217.131
- 79.127.235.52
- 142.251.45.206
- 104.26.1.226
- 85.121.177.177
Autonomous systems (ASN)
- 15169
- 16509
- 60068
- 13335
- 200019
Server countries
- US
- DE
- SG
- RO
Linked domains
- accounts.google.com
Document hash
21ef12e8362ec36e41634d87fb156ec12475617d4c41da216a2f63ac82dcd60eScript hashes
- 4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4
JavaScript globals
- _xk
- _tf20
- _smartsupp
- smartsupp
- checkAccess
- __cfBeacon
- SMARTSUPP_LOADED
- $smartsupp
Cookies
- NID
Browser storage keys
- spax_hero_timer_end
- xtoken_presale_end
TLS session and certificate
- Subject alternative names
- spax-wallet.sbs
- Cipher
- AES_128_GCM
- Issuer
- YE1
- Subject
- spax-wallet.sbs
- Protocol
- TLS 1.3
- Valid until
- Valid from
Domain age, days
14Registered domain age, days
14Certificate age, days
1Certificate validity, days
89Page requests
107Provider verdicts
- Engine verdict
- Tags
- urlscan-ml
- urlscan-ml-2aab354
- Score
- 100
- Malicious
- Yes
- Overall verdict
- Score
- 0
- Malicious
- No
HTTP headers
- Server
- nginx/1.24.0 (Ubuntu)
- Content-type
- text/html
Original source fields · JSON
| Uuid | 01a1a9c3-355c-7789-8c0f-e4efad25b65f |
|---|---|
| Final url | https://spax-wallet.sbs/ |
| Status | 200 |
| Ip | 85.121.177.177 |
| Ptr | srv1.example.com |
| Contacted domains | [
"www.gstatic.com",
"play.google.com",
"youtube.googleapis.com",
"drive.google.com",
"apis.google.com",
"fonts.gstatic.com",
"content-workspacevideo-pa.googleapis.com",
"ogads-pa.clients6.google.com",
"ssl.gstatic.com",
"bootstrap.smartsuppchat.com",
"fonts.googleapis.com",
"www.smartsuppchat.com",
"api.country.is",
"lh3.googleusercontent.com"
] |
| Contacted IP addresses | [
"172.217.112.4",
"142.250.68.195",
"142.250.68.206",
"142.251.211.99",
"142.251.153.7",
"172.217.115.4",
"142.250.68.202",
"52.29.168.79",
"142.250.72.10",
"142.250.217.131",
"79.127.235.52",
"142.251.45.206",
"104.26.1.226",
"85.121.177.177"
] |
| Asns | [
"15169",
"16509",
"60068",
"13335",
"200019"
] |
| Countries | [
"US",
"DE",
"SG",
"RO"
] |
| Linked domains | [
"accounts.google.com"
] |
| Document hash | 21ef12e8362ec36e41634d87fb156ec12475617d4c41da216a2f63ac82dcd60e |
| Script hashes | [
"4b77eae349a8cbcea7133cf3640a64ebf1f69d54d8f6469d7be6fdc188ca4ca4"
] |
| Globals | [
"_xk",
"_tf20",
"_smartsupp",
"smartsupp",
"checkAccess",
"__cfBeacon",
"SMARTSUPP_LOADED",
"$smartsupp"
] |
| Cookies | [
"NID"
] |
| Storage keys | [
"spax_hero_timer_end",
"xtoken_presale_end"
] |
| Tls | {
"san": [
"spax-wallet.sbs"
],
"cipher": "AES_128_GCM",
"issuer": "YE1",
"subject": "spax-wallet.sbs",
"protocol": "TLS 1.3",
"valid_to": "2027-02-01T16:32:25Z",
"valid_from": "2026-11-03T16:32:26Z"
} |
| Domain age days | 14 |
| Apex age days | 14 |
| Tls age days | 1 |
| Tls valid days | 89 |
| Requests | 107 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-2aab354"
],
"score": 100,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "nginx/1.24.0 (Ubuntu)",
"content-type": "text/html"
} |