URLScan
Malicious · engine verdict · score 92
SHA-256 396a9838e7679a2a2bb6572676286a55bd2ef08be55df0e28a5aed5d43a68407
URLScanOriginal source recordObserved: 23 fields
Observed: · Retrieved:
Report ID
01a1aabd-94be-72ec-ac12-89f9278d33e6Final URL
https://tezaqsha.com/HTTP response
200Redirect type
https-onlyRedirects
- To
- https://tezaqsha.com/
- From
- http://tezaqsha.com/
- Status
- 307
IP address
172.67.223.134Contacted domains
- mc.yandex.com
- mc.yandex.ru
- www.google-analytics.com
- www.googletagmanager.com
Contacted IP addresses
- 216.239.38.178
- 87.250.250.119
- 142.250.207.8
- 172.67.223.134
Autonomous systems (ASN)
- 15169
- 13238
- 13335
Server countries
- US
- RU
Document hash
396a9838e7679a2a2bb6572676286a55bd2ef08be55df0e28a5aed5d43a68407Script hashes
- d99c56bd4bb817edbf36324b372b2d5c7b7aa66813b92e3d172a7c6db5894b03
- 580ad8c58061a4dde99bde0a56905e382f0568516ee2f5b84dbfb52085709021
- 2a1edf81f32a49b1eacafc3546b371bca024c82a9191836e274d90890212e9df
- 54da0b77ac10ef9203acc5c393b5bfc54e41b1427f7778445cb48f67202b47a9
- 15872cd81985433aaea803e123067db177a6afb26f8adb682dcdcafb1e3a1b50
- ed871b0ef364b6a42e28a6c79708266bff343c6a4a432e8e772dbbb3fc52c2f7
- 5175d1eb7349c7d66033523b9175936559b05efe2506a58364988392576394ed
- 0a1973f3c6175c2655da2d796c0b590a07352ee8c22aed1a49cd90513fa34b02
- 56a87c02cd86bbb073b7da9e91fe99380e72784c1be2cd786d7d4432bdabdffb
- 2c33149ff5dbf9efc73667e4ee53ccc3054b9bdddfc12359560ae7ad5071f588
JavaScript globals
- gtag
- dataLayer
- __vite_rsc_client_require__
- __vite_rsc_require__
- next
- __VINEXT_RSC_BOOTSTRAP_STATE__
- __VINEXT_LINK_PREFETCH_ROUTES__
- __VINEXT_PAGES_LINK_PREFETCH_ROUTES__
- __VINEXT_CLIENT_REWRITES__
- __VINEXT_RSC_ROOT__
- ym
- __VINEXT_HYDRATED_AT
- __NEXT_HYDRATED
- __NEXT_HYDRATED_AT
- google_tag_data
- google_tag_manager
- onYouTubeIframeAPIReady
- gaGlobal
- Ya
- yaCounter109525107
Cookies
- _ga_KZC5YTJZJC
- _ga
- bh
- _ym_uid
- _ym_d
- _ym_isad
- sync_cookie_csrf
- yabs-sid
- i
- yandexuid
- yuidss
- ymex
Browser storage keys
- tz_attribution_v1
- _ymBRC
- _ym_synced
- _ym109525107_lsid
- _ym_uid
- _ym_retryReqs
- _ym_jn
- _ym109525107:0_reqNum
TLS session and certificate
- Subject alternative names
- tezaqsha.com
- www.tezaqsha.com
- *.www.tezaqsha.com
- Cipher
- AES_128_GCM
- Issuer
- WE1
- Subject
- tezaqsha.com
- Protocol
- QUIC
- Valid until
- Valid from
Domain age, days
160Registered domain age, days
160Certificate age, days
10Certificate validity, days
90Page requests
39Provider verdicts
- Engine verdict
- Tags
- urlscan-ml
- urlscan-ml-2aab354
- Score
- 92
- Malicious
- Yes
- Overall verdict
- Score
- 0
- Malicious
- No
HTTP headers
- Server
- cloudflare
- Content-type
- text/html; charset=utf-8
- Strict-transport-security
- max-age=31536000; includeSubDomains
- Content-security-policy
- default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors https://metrika.yandex.ru https://analytics.yandex.by https://analytics.yandex.com https://analytics.yandex.com.tr https://analy
- X-content-type-options
- nosniff
- Referrer-policy
- strict-origin-when-cross-origin
- Permissions-policy
- camera=(), microphone=(), geolocation=(), payment=(), browsing-topics=()
- Priority
- u=0,i
- Content-language
- ru-KZ
- Link
- </_next/static/_vinext_fonts/geist-8ac0455e797f/geist-98bbbccb.woff2>; rel=preload; as=font; type=font/woff2; crossorigin, </_next/static/_vinext_fonts/geist-mono-00e989178794/geist-mono-013b2f2f.woff
Original source fields · JSON
| Uuid | 01a1aabd-94be-72ec-ac12-89f9278d33e6 |
|---|---|
| Final url | https://tezaqsha.com/ |
| Status | 200 |
| Redirected | https-only |
| Redirects | [
{
"to": "https://tezaqsha.com/",
"from": "http://tezaqsha.com/",
"status": 307
}
] |
| Ip | 172.67.223.134 |
| Contacted domains | [
"mc.yandex.com",
"mc.yandex.ru",
"www.google-analytics.com",
"www.googletagmanager.com"
] |
| Contacted IP addresses | [
"216.239.38.178",
"87.250.250.119",
"142.250.207.8",
"172.67.223.134"
] |
| Asns | [
"15169",
"13238",
"13335"
] |
| Countries | [
"US",
"RU"
] |
| Document hash | 396a9838e7679a2a2bb6572676286a55bd2ef08be55df0e28a5aed5d43a68407 |
| Script hashes | [
"d99c56bd4bb817edbf36324b372b2d5c7b7aa66813b92e3d172a7c6db5894b03",
"580ad8c58061a4dde99bde0a56905e382f0568516ee2f5b84dbfb52085709021",
"2a1edf81f32a49b1eacafc3546b371bca024c82a9191836e274d90890212e9df",
"54da0b77ac10ef9203acc5c393b5bfc54e41b1427f7778445cb48f67202b47a9",
"15872cd81985433aaea803e123067db177a6afb26f8adb682dcdcafb1e3a1b50",
"ed871b0ef364b6a42e28a6c79708266bff343c6a4a432e8e772dbbb3fc52c2f7",
"5175d1eb7349c7d66033523b9175936559b05efe2506a58364988392576394ed",
"0a1973f3c6175c2655da2d796c0b590a07352ee8c22aed1a49cd90513fa34b02",
"56a87c02cd86bbb073b7da9e91fe99380e72784c1be2cd786d7d4432bdabdffb",
"2c33149ff5dbf9efc73667e4ee53ccc3054b9bdddfc12359560ae7ad5071f588"
] |
| Globals | [
"gtag",
"dataLayer",
"__vite_rsc_client_require__",
"__vite_rsc_require__",
"next",
"__VINEXT_RSC_BOOTSTRAP_STATE__",
"__VINEXT_LINK_PREFETCH_ROUTES__",
"__VINEXT_PAGES_LINK_PREFETCH_ROUTES__",
"__VINEXT_CLIENT_REWRITES__",
"__VINEXT_RSC_ROOT__",
"ym",
"__VINEXT_HYDRATED_AT",
"__NEXT_HYDRATED",
"__NEXT_HYDRATED_AT",
"google_tag_data",
"google_tag_manager",
"onYouTubeIframeAPIReady",
"gaGlobal",
"Ya",
"yaCounter109525107"
] |
| Cookies | [
"_ga_KZC5YTJZJC",
"_ga",
"bh",
"_ym_uid",
"_ym_d",
"_ym_isad",
"sync_cookie_csrf",
"yabs-sid",
"i",
"yandexuid",
"yuidss",
"ymex"
] |
| Storage keys | [
"tz_attribution_v1",
"_ymBRC",
"_ym_synced",
"_ym109525107_lsid",
"_ym_uid",
"_ym_retryReqs",
"_ym_jn",
"_ym109525107:0_reqNum"
] |
| Tls | {
"san": [
"tezaqsha.com",
"www.tezaqsha.com",
"*.www.tezaqsha.com"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "tezaqsha.com",
"protocol": "QUIC",
"valid_to": "2027-01-24T05:45:00Z",
"valid_from": "2026-10-26T04:45:05Z"
} |
| Domain age days | 160 |
| Apex age days | 160 |
| Tls age days | 10 |
| Tls valid days | 90 |
| Requests | 39 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-2aab354"
],
"score": 92,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"strict-transport-security": "max-age=31536000; includeSubDomains",
"content-security-policy": "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors https://metrika.yandex.ru https://analytics.yandex.by https://analytics.yandex.com https://analytics.yandex.com.tr https://analy",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin",
"permissions-policy": "camera=(), microphone=(), geolocation=(), payment=(), browsing-topics=()",
"priority": "u=0,i",
"content-language": "ru-KZ",
"link": "</_next/static/_vinext_fonts/geist-8ac0455e797f/geist-98bbbccb.woff2>; rel=preload; as=font; type=font/woff2; crossorigin, </_next/static/_vinext_fonts/geist-mono-00e989178794/geist-mono-013b2f2f.woff"
} |
Separate monitor record · date not recorded
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 019fa7fa-de73-77f8-a173-ac42cf3d042d
- score
- null
- malicious
- null
- result_at
- null
- enriched_at
- null
- source_timestamps
- {"urlscan_result_at":null,"urlscan_enriched_at":null}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim