URLScan
Malicious
Open reportURLScanOriginal source recordObserved: 23 fields
Observed: · Retrieved:
| Uuid | 01a173f0-7a96-7514-943d-bad9ab4b73c3 |
|---|---|
| Final url | https://xaman-information.pages.dev/ |
| Status | 200 |
| Redirected | https-only |
| Redirects | [
{
"to": "https://xaman-information.pages.dev/",
"from": "http://xaman-information.pages.dev/",
"status": 307
}
] |
| Ip | 188.114.96.3 |
| Contacted domains | [
"xrpl-scaner.com",
"crossmark.io",
"play-lh.googleusercontent.com",
"pbs.twimg.com",
"api.ipify.org"
] |
| Contacted IP addresses | [
"172.67.162.171",
"76.76.21.21",
"2a00:1450:4001:c17::77",
"146.75.116.159",
"172.67.74.152",
"188.114.96.3"
] |
| Asns | [
"13335",
"16509",
"15169",
"54113"
] |
| Countries | [
"US",
"DE"
] |
| Linked domains | [
"xaman.app",
"help.xaman.app",
"play.google.com",
"apps.apple.com",
"webflow-proxy-cdn.xaman.app",
"xrpl-labs.com",
"github.com",
"xumm.app",
"x.com",
"www.youtube.com",
"www.linkedin.com"
] |
| Social | [
"https://github.com/XRPL-Labs/Xaman-Issue-Tracker/blob/master/RESPONSIBLE-DISCLOSURE.md",
"https://x.com/xrpllabs",
"https://x.com/XamanWallet",
"https://x.com/xamanwallet",
"https://www.youtube.com/@XamanApp"
] |
| Document hash | 68612cc9f0afb35c354196d4f2eff443848828a5829a1b51e473e39a66ca0fbe |
| Script hashes | [
"696c135f7ad08d2714a53e8e68b37b17554185780741fb7c0896ad94601b1e15",
"cc64b8100b163485bfb151a8f4f039da0bf9d22684746c0b862355ab6d91d4fd"
] |
| Globals | [
"_0x2ef6",
"_0xcbc15",
"_0x16b7",
"__ledgerLogsListen",
"XRPLWalletConnect",
"__xamanSeedP"
] |
| Tls | {
"san": [
"*.xaman-information.pages.dev",
"xaman-information.pages.dev"
],
"cipher": "AES_128_GCM",
"issuer": "YE2",
"subject": "xaman-information.pages.dev",
"protocol": "QUIC",
"valid_to": "2027-01-23T10:33:53Z",
"valid_from": "2026-10-25T10:33:54Z"
} |
| Domain age days | 0 |
| Apex age days | 0 |
| Tls age days | 0 |
| Tls valid days | 89 |
| Requests | 29 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 99,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"genericcrypto"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"Generic Crypto"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin"
} |
Separate monitor record · date not recorded
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 01a173f0-7a96-7514-943d-bad9ab4b73c3
- score
- null
- malicious
- null
- result_at
- null
- enriched_at
- null
- source_timestamps
- {"urlscan_result_at":null,"urlscan_enriched_at":null}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim
