OTX
无社区引用
打开报告“Anmeldeformular für Prüfungen”
casestudyouiazza.pages.dev — 最后已知的活跃状态 (HTTP 200). 证据摘要: PhishDestroy score 68/100. 注册商: Cloudflare.
The evidence summary below uses retained observations. Each source keeps its own collection date.
结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
Edge-IP 声誉不属于此域。
brett.ns.cloudflare.commariah.ns.cloudflare.com位置信息描述的是 IP 网络。
41434f8fd3baa230505f5c74c280c59d4444924d3070fe28db1bbc4828e33976casestudyouiazza.pages.dev*.casestudyouiazza.pages.dev已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 01a16b81-582d-70ee-9282-059e0cb0a98f |
|---|---|
| Final url | https://casestudyouiazza.pages.dev/ |
| 状态 | 200 |
| 已重定向 | https-only |
| Redirects | [
{
"to": "https://casestudyouiazza.pages.dev/",
"from": "http://casestudyouiazza.pages.dev/",
"status": 307
}
] |
| Ip | 172.66.44.69 |
| Contacted domains | [
"www.haw-landshut.de",
"img.icons8.com",
"ajax.googleapis.com",
"stackpath.bootstrapcdn.com"
] |
| Contacted IP addresses | [
"94.16.111.123",
"2a02:6ea0:d300::41",
"2404:6800:4006:800::200a",
"104.18.10.207",
"172.66.44.69"
] |
| Asns | [
"197540",
"60068",
"15169",
"13335"
] |
| Countries | [
"DE",
"JP",
"AU"
] |
| Document hash | 8debca4e5064e58e3e774135f6d4a5122f8eca97efc6737e2df90d4f043b6262 |
| Globals | [
"$",
"jQuery",
"handleFormSubmit"
] |
| Tls | {
"san": [
"casestudyouiazza.pages.dev",
"*.casestudyouiazza.pages.dev"
],
"cipher": "AES_128_GCM",
"issuer": "WE1",
"subject": "casestudyouiazza.pages.dev",
"protocol": "QUIC",
"valid_to": "2027-01-18T06:55:23Z",
"valid_from": "2026-10-20T05:55:26Z"
} |
| 域名年龄(天) | 1186 |
| Apex age days | 1186 |
| Tls age days | 3 |
| TLS 有效天数 | 90 |
| Requests | 9 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 99,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin"
} |
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 47,
"malicious": 15,
"suspicious": 0,
"undetected": 30
} |
|---|---|
| Vendor labels | {
"DNS8": "phishing",
"ESET": "phishing",
"VIPRE": "phishing",
"G-Data": "phishing",
"Lionic": "phishing",
"Sophos": "phishing",
"Webroot": "malicious",
"Fortinet": "phishing",
"SOCRadar": "phishing",
"Kaspersky": "phishing",
"LevelBlue": "phishing",
"Gridinsoft": "phishing",
"BitDefender": "phishing",
"alphaMountain.ai": "phishing",
"Forcepoint ThreatSeeker": "phishing"
} |
| Reputation | 0 |
| Tags | [
"dga"
] |
| Categories | {
"alphaMountain.ai": "Phishing (alphaMountain.ai)"
} |
| 注册商 | CloudFlare, Inc. |
| 创建 | 2020-09-02T02:33:29Z |
| Expires | 2026-09-02T02:33:29Z |
| Updated | 2025-03-17T14:56:22Z |
| 首次发现 | 2024-01-19T00:54:21Z |
| DNS 记录 | [
{
"ttl": 21600,
"type": "NS",
"value": "brett.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:310c::ac42:2fbb"
},
{
"ttl": 1800,
"type": "SOA",
"rname": "dns.cloudflare.com",
"value": "brett.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "A",
"value": "172.66.44.69"
},
{
"ttl": 300,
"type": "A",
"value": "172.66.47.187"
},
{
"ttl": 21600,
"type": "NS",
"value": "mariah.ns.cloudflare.com"
},
{
"ttl": 300,
"type": "AAAA",
"value": "2606:4700:310c::ac42:2c45"
}
] |
| Dns at | 2026-10-13T09:46:24Z |
| Jarm | 27d40d40d00040d00042d43d00041df04c41293ba84f6efe3a613b22f983e6 |
| Certificate | {
"san": [
"casestudyouiazza.pages.dev",
"*.casestudyouiazza.pages.dev"
],
"issuer": "Google Trust Services / WE1",
"serial": "a41bdbdc1034652a13bb63242e4ad7b3",
"sha256": "41434f8fd3baa230505f5c74c280c59d4444924d3070fe28db1bbc4828e33976",
"subject": "casestudyouiazza.pages.dev",
"valid_to": "2026-11-19T23:05:41Z",
"valid_from": "2026-08-21T22:08:04Z"
} |
| 注册记录 | {
"registrar": "CloudFlare, Inc.",
"registrar_iana_id": "1910",
"registrar_url": "None",
"created": "2020-09-02T02:33:29Z",
"updated": "2023-09-04T18:15:07Z",
"expires": "2026-09-02T02:33:29Z",
"status": [
"clientDeleteProhibited",
"clientTransferProhibited",
"clientUpdateProhibited",
"clientdeleteprohibited",
"clienttransferprohibited",
"clientupdateprohibited"
],
"nameservers": [
"adi.ns.cloudflare.com",
"karl.ns.cloudflare.com"
],
"dnssec": "unsigned"
} |
| Mail configuration | {
"spf_lookups": 0
} |
|---|---|
| CAA 记录 | {
"domain": "casestudyouiazza.pages.dev"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_by": [
"CloudFlare Family"
],
"blocked_count": 1
} |
| Web archive observations | {
"last": "2025-03-07T09:02:17Z",
"first": "2023-09-24T17:54:22Z",
"changes": 2,
"days_archived": 8,
"scans_per_day": 0.01,
"avg_page_bytes": 1138
} |
| Trackers | {
"requests": 5,
"trackers": [
{
"name": "Bootstrap CDN",
"company": "BootstrapCDN",
"country": "US",
"category": "Hosting",
"requests": 1
},
{
"name": "Google APIs",
"company": "Google",
"country": "US",
"category": "Hosting",
"requests": 1
}
]
} |
| 表单与混合内容 | {
"no_sri": [
"https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"
],
"third_party_scripts": 1
} |
| 状态 | {
"up": true,
"code": 200,
"timings": {
"dns": 137,
"tls": 33,
"wait": 60,
"connect": 14,
"download": 1
},
"response_ms": 245
} |
| TLS connection | {
"alpn": "h2",
"cipher": "TLS_AES_256_GCM_SHA384",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
80,
443,
8080
]
} |
| Carbon | {
"bytes": 3193,
"co2_grams": 0.0001,
"cleaner_than": 95
} |
| Dns server | {
"ns": [
{
"ip": "173.245.59.76",
"host": "brett.ns.cloudflare.com"
},
{
"ip": "172.64.34.200",
"host": "mariah.ns.cloudflare.com"
}
],
"zone": "casestudyouiazza.pages.dev"
} |
| Location | {
"ip": "2a06:98c1:3120::3",
"asn": "13335",
"org": "CloudFLARENET-EU",
"city": "London",
"country": "GB"
} |
| Ssl | {
"issuer": "Google Trust Services / WE1",
"subject": "casestudyouiazza.pages.dev"
} |
| DNS 记录 | {
"A": [
"188.114.97.3",
"188.114.96.3"
],
"NS": [
"mariah.ns.cloudflare.com",
"brett.ns.cloudflare.com"
],
"SOA": "{\"nsname\": \"brett.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2417965037, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
"AAAA": [
"2a06:98c1:3121::3",
"2a06:98c1:3120::3"
]
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"message": "Site does not serve any HSTS headers."
} |
| HTTP security policies | {
"xFrameOptions": false,
"referrerPolicy": "strict-origin-when-cross-origin",
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": "nosniff",
"contentSecurityPolicy": false,
"strictTransportPolicy": false,
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Firewall | {
"waf": "Cloudflare",
"has_waf": true
} |
| Get ip | {
"ip": "2a06:98c1:3121::3",
"family": 6
} |
| Redirects | {
"chain": [
"https://casestudyouiazza.pages.dev"
]
} |
| Page links | {
"internal_count": 1
} |
| HTTP headers | {
"headers": {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8",
"x-content-type-options": "nosniff",
"referrer-policy": "strict-origin-when-cross-origin"
}
} |
由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。
可访问
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
casestudyouiazza.pages.dev
列入名单的域名至少会收到一份滥用举报;此条目没有保留的通知记录。
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
IC3 does not accept attachments. Keep original evidence for investigators. IC3 guidance
Federal tips line1-800-CALL-FBICurrent service: Report Fraud. England, Wales and Northern Ireland. Scotland: 101.
Contact centre0300 123 2040选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
casestudyouiazza.pages.dev)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。