URLScan
Malicious · engine verdict · score 99
SHA-256 d73e1dfb771717f7e330e7590800cc1174635dcf2311971e82fbb35c98ed14d9
URLScanOriginal source recordObserved: 25 fields
Observed: · Retrieved:
Report ID
01a1aafb-05d2-7006-ac7f-9e113423b179Final URL
https://xoilac-17-euro.lol/HTTP response
200Redirect type
https-onlyRedirects
- To
- https://xoilac-17-euro.lol/
- From
- http://xoilac-17-euro.lol/
- Status
- 307
IP address
43.159.105.108Contacted domains
- img.cltvap.cc
- www.google-analytics.com
- cdn.xoilac-17-euro.lol
- fonts.gstatic.com
- api.gvapi.cc
- www.googletagmanager.com
- unpkg.byted-static.com
- server.ws-xyz.com
- video-home.gvapi.cc
- unpkg.com
- fonts.googleapis.com
- s1.what-on.com
Contacted IP addresses
- 142.251.16.138
- 192.178.218.94
- 104.21.14.239
- 104.18.0.22
- 163.181.60.206
- 172.253.63.97
- 142.251.179.95
- 43.159.105.108
Autonomous systems (ASN)
- 15169
- 13335
- 24429
- 139341
Server countries
- US
- SG
Linked domains
- refvsbh.com
- t.me
- xoilactvttbd.com
- maps.app.goo.gl
- colascore.net
Social media links
- https://t.me/vsbet88888888888888888
Document hash
d73e1dfb771717f7e330e7590800cc1174635dcf2311971e82fbb35c98ed14d9Script hashes
- 5aac27d30bcbb9b7c760c38cb7e0208970ea3237e92ddc75f3fd65699ed69e7a
- d7ddbd7c20761f41006a68d0875c0294c18f1aebd383efec05d433010bfbb83d
JavaScript globals
- gtag
- dataLayer
- _wpemojiSettings
- scrollFunction
- scrollToTop
- RealtimeWebSocketClient
- loadMatchesFromCache
- saveMatchesToCache
- initFilterCountCache
- updateFilterCounts
- sportName
- fixtime
- formatDate
- getApiDomain
- getVideoHomeApiDomain
- showLoading
- showErrorWithSuggestions
- fetchWithTimeout
- refreshMatches
- createMatchCard
- preloadVideoMetadata
- getMatchList
- renderAllMatches
- filterMatches
- transformWebSocketMatches
- initMatchesWebSocket
- startFallbackPolling
- google_tag_data
- google_tag_manager
- onYouTubeIframeAPIReady
- gaGlobal
- Player
- regeneratorRuntime
- HlsPlayer
- clampFloatingVideo
- matches
- scrollTopButton
- LS_MATCHES_KEY
- LS_MATCHES_TTL
- filterCountCache
Cookies
- _ga_TM77WL0G13
- _ga
- _ga_PS12HWWRCL
- _ga_B6GK69FTR0
- _ga_YG4SN1ER0E
- _ga_D7J3205Z6B
- _ga_LNWLQQB5FK
- _ga_YBFYCCTJYF
- _ga_XRDG5H0SQ9
- _ga_0RQ3P5C1TD
- _ga_9GFBLD3Z8B
- _ga_V8GXMSME5N
Browser storage keys
- wpEmojiSettingsSupports
- colatv_matches_v1
TLS session and certificate
- Subject alternative names
- xoilac-17-euro.lol
- Cipher
- AES_256_GCM
- Issuer
- TrustAsia DV TLS RSA CA 2025
- Subject
- xoilac-17-euro.lol
- Protocol
- TLS 1.3
- Valid until
- Valid from
Domain age, days
1005Differs from the registration date in WHOIS (2026-11-01), which gives 3 days on the scan date 2026-11-05. The two sources disagree; both values are kept as recorded.
Registered domain age, days
1005Differs from the registration date in WHOIS (2026-11-01), which gives 3 days on the scan date 2026-11-05. The two sources disagree; both values are kept as recorded.
Certificate age, days
2Certificate validity, days
89Page requests
857Provider verdicts
- Engine verdict
- Tags
- urlscan-ml
- urlscan-ml-2aab354
- Score
- 99
- Malicious
- Yes
- Overall verdict
- Score
- 0
- Malicious
- No
HTTP headers
- Server
- TencentEdgeOne
- Content-type
- text/html
- X-cache
- HIT
- X-cache-hits
- 1
Original source fields · JSON
| Uuid | 01a1aafb-05d2-7006-ac7f-9e113423b179 |
|---|---|
| Final url | https://xoilac-17-euro.lol/ |
| Status | 200 |
| Redirected | https-only |
| Redirects | [
{
"to": "https://xoilac-17-euro.lol/",
"from": "http://xoilac-17-euro.lol/",
"status": 307
}
] |
| Ip | 43.159.105.108 |
| Contacted domains | [
"img.cltvap.cc",
"www.google-analytics.com",
"cdn.xoilac-17-euro.lol",
"fonts.gstatic.com",
"api.gvapi.cc",
"www.googletagmanager.com",
"unpkg.byted-static.com",
"server.ws-xyz.com",
"video-home.gvapi.cc",
"unpkg.com",
"fonts.googleapis.com",
"s1.what-on.com"
] |
| Contacted IP addresses | [
"142.251.16.138",
"192.178.218.94",
"104.21.14.239",
"104.18.0.22",
"163.181.60.206",
"172.253.63.97",
"142.251.179.95",
"43.159.105.108"
] |
| Asns | [
"15169",
"13335",
"24429",
"139341"
] |
| Countries | [
"US",
"SG"
] |
| Linked domains | [
"refvsbh.com",
"t.me",
"xoilactvttbd.com",
"maps.app.goo.gl",
"colascore.net"
] |
| Social | [
"https://t.me/vsbet88888888888888888"
] |
| Document hash | d73e1dfb771717f7e330e7590800cc1174635dcf2311971e82fbb35c98ed14d9 |
| Script hashes | [
"5aac27d30bcbb9b7c760c38cb7e0208970ea3237e92ddc75f3fd65699ed69e7a",
"d7ddbd7c20761f41006a68d0875c0294c18f1aebd383efec05d433010bfbb83d"
] |
| Globals | [
"gtag",
"dataLayer",
"_wpemojiSettings",
"scrollFunction",
"scrollToTop",
"RealtimeWebSocketClient",
"loadMatchesFromCache",
"saveMatchesToCache",
"initFilterCountCache",
"updateFilterCounts",
"sportName",
"fixtime",
"formatDate",
"getApiDomain",
"getVideoHomeApiDomain",
"showLoading",
"showErrorWithSuggestions",
"fetchWithTimeout",
"refreshMatches",
"createMatchCard",
"preloadVideoMetadata",
"getMatchList",
"renderAllMatches",
"filterMatches",
"transformWebSocketMatches",
"initMatchesWebSocket",
"startFallbackPolling",
"google_tag_data",
"google_tag_manager",
"onYouTubeIframeAPIReady",
"gaGlobal",
"Player",
"regeneratorRuntime",
"HlsPlayer",
"clampFloatingVideo",
"matches",
"scrollTopButton",
"LS_MATCHES_KEY",
"LS_MATCHES_TTL",
"filterCountCache"
] |
| Cookies | [
"_ga_TM77WL0G13",
"_ga",
"_ga_PS12HWWRCL",
"_ga_B6GK69FTR0",
"_ga_YG4SN1ER0E",
"_ga_D7J3205Z6B",
"_ga_LNWLQQB5FK",
"_ga_YBFYCCTJYF",
"_ga_XRDG5H0SQ9",
"_ga_0RQ3P5C1TD",
"_ga_9GFBLD3Z8B",
"_ga_V8GXMSME5N"
] |
| Storage keys | [
"wpEmojiSettingsSupports",
"colatv_matches_v1"
] |
| Tls | {
"san": [
"xoilac-17-euro.lol"
],
"cipher": "AES_256_GCM",
"issuer": "TrustAsia DV TLS RSA CA 2025",
"subject": "xoilac-17-euro.lol",
"protocol": "TLS 1.3",
"valid_to": "2027-01-31T23:59:59Z",
"valid_from": "2026-11-03T00:00:00Z"
} |
| Domain age days | 1005 Differs from the registration date in WHOIS (2026-11-01), which gives 3 days on the scan date 2026-11-05. The two sources disagree; both values are kept as recorded. |
| Apex age days | 1005 Differs from the registration date in WHOIS (2026-11-01), which gives 3 days on the scan date 2026-11-05. The two sources disagree; both values are kept as recorded. |
| Tls age days | 2 |
| Tls valid days | 89 |
| Requests | 857 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-2aab354"
],
"score": 99,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "TencentEdgeOne",
"content-type": "text/html",
"x-cache": "HIT",
"x-cache-hits": "1"
} |
Separate monitor record · date not recorded
Separate stored monitor snapshot; does not replace the primary report record or establish current availability.
- record_source
- domain_monitor.urlscan
- uuid
- 01a1a7b3-ee97-767f-9f2e-d6a6d1b567c2
- score
- null
- malicious
- null
- result_at
- null
- enriched_at
- null
- source_timestamps
- {"urlscan_result_at":null,"urlscan_enriched_at":null}
- timestamp_basis
- Europe/Berlin, as used by the existing report; source timestamps are retained verbatim