Names Stop Here
208.91.196.145URLScan
Malicious · engine verdict · score 32
SHA-256 edf93bf9143e3d59c2d9ac62ea1d2d64c3917caf846e937cb31a6e61e6bbbce2
URLScanOriginal source recordObserved: 22 fields
Observed: · Retrieved:
Report ID
01a132c0-db87-720b-9452-cff1d6229960Final URL
https://ww19.ouroborosbrowse.com/HTTP response
200Redirect type
off-domainRedirects
- To
- https://virustota.com/
- From
- http://virustota.com/
- Status
- 307
- To
- http://virustota.com/
- From
- https://virustota.com/
- Status
- 302
- To
- https://virustota.com/
- From
- http://virustota.com/
- Status
- 307
- To
- http://virustota.com/
- From
- https://virustota.com/
- Status
- 302
- To
- http://virustota.com/
- From
- http://virustota.com/
- Status
- 307
- To
- http://virustota.com/
- From
- http://virustota.com/
- To
- https://ouroborosbrowse.com/obs/offer/gp
- From
- http://virustota.com/
- To
- http://ww19.ouroborosbrowse.com/
- From
- https://ouroborosbrowse.com/obs/offer/gp
- Status
- 302
- To
- https://ww19.ouroborosbrowse.com/
- From
- http://ww19.ouroborosbrowse.com/
- Status
- 307
IP address
208.91.196.145Contacted domains
- l.cdn-fileserver.com
- virustota.com
- d.delivery.consentmanager.net
- s.cdn-fileserver.com
- cdn.consentmanager.net
- s.yimg.com
- msadsscale.microsoft.com
- scripts.clarity.ms
- searchresultsworld.com
- ouroborosbrowse.com
Contacted IP addresses
- 172.67.181.210
- 69.147.92.11
- 150.171.110.17
- 104.21.26.182
- 152.233.2.15
- 85.9.205.94
- 104.21.31.250
- 208.91.196.145
- 185.150.189.123
- 173.239.8.164
Autonomous systems (ASN)
- 13335
- 14777
- 8075
- 60068
- 202053
- 40034
- 23470
- 27257
Server countries
- US
- GB
- DE
- VG
Linked domains
- findsearchresults.com
- skenzo.com
Document hash
2cf36db9e7c6613e64ba9ba049331e04594450a83ae69d537d62177e1b23dccaJavaScript globals
- cmp_id
- cmp_cdid
- cmp_params
- cmp_host
- cmp_cdn
- cmp_proto
- cmp_codesrc
- cmp_getsupportedLangs
- cmp_getRTLLangs
- cmp_getlang
- cmp_addFrame
- cmp_rc
- cmp_stub
- cmp_gpp_ping
- cmp_gppstub
- cmp_msghandler
- cmp_setStub
- cmp_setGppStub
- __cmp
- __uspapi
- __gpp
- olaSyncCount
- __bdata
- checkDNS
- cmp_utillities
- cmp_gppmanifest
- cmp_fibo
- cmp_reader
- cmp_writer
- cmp_cs
- cmp_lang
- cmp_purpose
- cmp_feature
- cmp_stack
- cmp_vendor
- cmp_snapshot
- cmp_storage
- cmp_gpp_helper
- cmp_api
- cmp_contentblocking
Cookies
- ipc
- sid
- __cmpcc
- visitor-id
- __cmpcccx175795
Browser storage keys
- cmp_gpcConsentModeEligible.40679ccc92462
- __cmpcccx175795_ww19.ouroborosbrowse.com
- __cmpcccx175795_expire_ww19.ouroborosbrowse.com
Domain age, days
0Differs from the registration date in WHOIS (2025-02-10), which gives 610 days on the scan date 2026-10-13. The two sources disagree; both values are kept as recorded.
Registered domain age, days
1449Differs from the registration date in WHOIS (2025-02-10), which gives 610 days on the scan date 2026-10-13. The two sources disagree; both values are kept as recorded.
Certificate age, days
2323Certificate validity, days
3650Page requests
21Provider verdicts
- Engine verdict
- Tags
- urlscan-ml
- urlscan-ml-60c5e22
- Score
- 32
- Malicious
- Yes
- Overall verdict
- Score
- 0
- Malicious
- No
HTTP headers
- Server
- nginx/1.28.2
- Content-type
- text/html;charset=utf-8
Original source fields · JSON
| Uuid | 01a132c0-db87-720b-9452-cff1d6229960 |
|---|---|
| Final url | https://ww19.ouroborosbrowse.com/ |
| Status | 200 |
| Redirected | off-domain |
| Redirects | [
{
"to": "https://virustota.com/",
"from": "http://virustota.com/",
"status": 307
},
{
"to": "http://virustota.com/",
"from": "https://virustota.com/",
"status": 302
},
{
"to": "https://virustota.com/",
"from": "http://virustota.com/",
"status": 307
},
{
"to": "http://virustota.com/",
"from": "https://virustota.com/",
"status": 302
},
{
"to": "http://virustota.com/",
"from": "http://virustota.com/",
"status": 307
},
{
"to": "http://virustota.com/",
"from": "http://virustota.com/"
},
{
"to": "https://ouroborosbrowse.com/obs/offer/gp",
"from": "http://virustota.com/"
},
{
"to": "http://ww19.ouroborosbrowse.com/",
"from": "https://ouroborosbrowse.com/obs/offer/gp",
"status": 302
},
{
"to": "https://ww19.ouroborosbrowse.com/",
"from": "http://ww19.ouroborosbrowse.com/",
"status": 307
}
] |
| Ip | 208.91.196.145 |
| Contacted domains | [
"l.cdn-fileserver.com",
"virustota.com",
"d.delivery.consentmanager.net",
"s.cdn-fileserver.com",
"cdn.consentmanager.net",
"s.yimg.com",
"msadsscale.microsoft.com",
"scripts.clarity.ms",
"searchresultsworld.com",
"ouroborosbrowse.com"
] |
| Contacted IP addresses | [
"172.67.181.210",
"69.147.92.11",
"150.171.110.17",
"104.21.26.182",
"152.233.2.15",
"85.9.205.94",
"104.21.31.250",
"208.91.196.145",
"185.150.189.123",
"173.239.8.164"
] |
| Asns | [
"13335",
"14777",
"8075",
"60068",
"202053",
"40034",
"23470",
"27257"
] |
| Countries | [
"US",
"GB",
"DE",
"VG"
] |
| Linked domains | [
"findsearchresults.com",
"skenzo.com"
] |
| Document hash | 2cf36db9e7c6613e64ba9ba049331e04594450a83ae69d537d62177e1b23dcca |
| Globals | [
"cmp_id",
"cmp_cdid",
"cmp_params",
"cmp_host",
"cmp_cdn",
"cmp_proto",
"cmp_codesrc",
"cmp_getsupportedLangs",
"cmp_getRTLLangs",
"cmp_getlang",
"cmp_addFrame",
"cmp_rc",
"cmp_stub",
"cmp_gpp_ping",
"cmp_gppstub",
"cmp_msghandler",
"cmp_setStub",
"cmp_setGppStub",
"__cmp",
"__uspapi",
"__gpp",
"olaSyncCount",
"__bdata",
"checkDNS",
"cmp_utillities",
"cmp_gppmanifest",
"cmp_fibo",
"cmp_reader",
"cmp_writer",
"cmp_cs",
"cmp_lang",
"cmp_purpose",
"cmp_feature",
"cmp_stack",
"cmp_vendor",
"cmp_snapshot",
"cmp_storage",
"cmp_gpp_helper",
"cmp_api",
"cmp_contentblocking"
] |
| Cookies | [
"ipc",
"sid",
"__cmpcc",
"visitor-id",
"__cmpcccx175795"
] |
| Storage keys | [
"cmp_gpcConsentModeEligible.40679ccc92462",
"__cmpcccx175795_ww19.ouroborosbrowse.com",
"__cmpcccx175795_expire_ww19.ouroborosbrowse.com"
] |
| Domain age days | 0 Differs from the registration date in WHOIS (2025-02-10), which gives 610 days on the scan date 2026-10-13. The two sources disagree; both values are kept as recorded. |
| Apex age days | 1449 Differs from the registration date in WHOIS (2025-02-10), which gives 610 days on the scan date 2026-10-13. The two sources disagree; both values are kept as recorded. |
| Tls age days | 2323 |
| Tls valid days | 3650 |
| Requests | 21 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 32,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "nginx/1.28.2",
"content-type": "text/html;charset=utf-8"
} |
Separate monitor record · 2026-10-26 04:30 UTC
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 01a132c0-db87-720b-9452-cff1d6229960
- score
- 0
- malicious
- false
- result_at
- 2026-10-26T04:30:28Z
- enriched_at
- 2026-10-26T09:18:01Z
- source_timestamps
- {"urlscan_result_at":"2026-10-26 05:30:28","urlscan_enriched_at":"2026-10-26 10:18:01"}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim
Microsoft
Cloudflare
Yandex
ESET
Bitdefender
Norton
Symantec
Avira
Avast / AVG
Kaspersky
Dr.Web
Netcraft
PhishTank
APWG eCX
PhishStats
Phish.Report
PolySwarm
CheckPhish
Quttera
URLquery
Criminal IP
CRDF
Scamadviser
MyWOT
