URLScan
恶意
SHA-256 ab3f25d898dfbb4f62d7cad3bfe97260ea05ea9174411abebf2a62deb07da54b
URLScan来源原始记录观测时间: 22 个字段
观测时间: · 检索到:
报告 ID
01a17bf0-df85-718d-af02-78c2c6b00f1f最终 URL
https://ethcom.xyz/HTTP 响应
200重定向类型
https-only重定向
- 目标
- https://ethcom.xyz/
- 来源
- http://ethcom.xyz/
- 状态
- 307
IP 地址
104.21.78.239已联系的域名
- fonts.gstatic.com
- fonts.googleapis.com
- cdn.tailwindcss.com
- static.cloudflareinsights.com
- telegram.org
已联系的 IP 地址
- 142.251.40.227
- 104.16.79.73
- 142.250.190.234
- 104.26.3.143
- 149.154.167.99
- 104.21.78.239
自治系统(ASN)
- 15169
- 13335
- 62041
服务器所在国家/地区
- US
- NL
文档哈希值
ab3f25d898dfbb4f62d7cad3bfe97260ea05ea9174411abebf2a62deb07da54b脚本哈希值
- d9c4991b78d7e8900a72083dfa662dbd394e573fea11a648a5ad48a96a061af4
JavaScript 全局变量
- Telegram
- TelegramGameProxy_receiveEvent
- TelegramGameProxy
- tailwind
- /template.html
- render
- __cfBeacon
- __obfStringKey
- require
- eip6963ProviderDetails
- litPropertyMetadata
- reactiveElementVersions
- litHtmlVersions
- litElementVersions
- ondefecated
- ModalController
- __EVMLIB
- __diagnosticsInstalled
- addresses
- container
- time
- cd
- canvas
- ctx
- width
- height
- count
- particles
浏览器存储键
- __telegram__initParams
TLS 会话与证书
- 使用者备用名称(SAN)
- *.ethcom.xyz
- ethcom.xyz
- 加密套件
- AES_128_GCM
- 签发者
- YE2
- 使用者(Subject)
- ethcom.xyz
- 协议
- QUIC
- 到期时间
- 生效时间
域名年龄(天)
1351注册域名年龄(天)
1351证书年龄(天)
8证书有效期(天)
89页面请求数
17服务提供商评定结果
- 引擎判定
- 标签
- urlscan-ml
- urlscan-ml-60c5e22
- 评分
- 89
- 恶意
- 是
- 总体判定
- 标签
- phishing
- 评分
- 100
- 品牌
- tether
- 恶意
- 是
- 分类
- phishing
- URLScan 判定
- 标签
- phishing
- 评分
- 100
- 品牌
- Tether
- 恶意
- 是
- 分类
- phishing
HTTP 头
- 服务器
- cloudflare
- Content-type
- text/html; charset=utf-8
来源原始字段 · JSON
| Uuid | 01a17bf0-df85-718d-af02-78c2c6b00f1f |
|---|---|
| Final url | https://ethcom.xyz/ |
| 状态 | 200 |
| 已重定向 | https-only |
| 重定向 | [
{
"to": "https://ethcom.xyz/",
"from": "http://ethcom.xyz/",
"status": 307
}
] |
| Ip | 104.21.78.239 |
| 已联系的域名 | [
"fonts.gstatic.com",
"fonts.googleapis.com",
"cdn.tailwindcss.com",
"static.cloudflareinsights.com",
"telegram.org"
] |
| 已联系的 IP 地址 | [
"142.251.40.227",
"104.16.79.73",
"142.250.190.234",
"104.26.3.143",
"149.154.167.99",
"104.21.78.239"
] |
| Asns | [
"15169",
"13335",
"62041"
] |
| Countries | [
"US",
"NL"
] |
| 文档哈希值 | ab3f25d898dfbb4f62d7cad3bfe97260ea05ea9174411abebf2a62deb07da54b |
| 脚本哈希值 | [
"d9c4991b78d7e8900a72083dfa662dbd394e573fea11a648a5ad48a96a061af4"
] |
| Globals | [
"Telegram",
"TelegramGameProxy_receiveEvent",
"TelegramGameProxy",
"tailwind",
"/template.html",
"render",
"__cfBeacon",
"__obfStringKey",
"require",
"eip6963ProviderDetails",
"litPropertyMetadata",
"reactiveElementVersions",
"litHtmlVersions",
"litElementVersions",
"ondefecated",
"ModalController",
"__EVMLIB",
"__diagnosticsInstalled",
"addresses",
"container",
"time",
"cd",
"canvas",
"ctx",
"width",
"height",
"count",
"particles"
] |
| Storage keys | [
"__telegram__initParams"
] |
| Tls | {
"san": [
"*.ethcom.xyz",
"ethcom.xyz"
],
"cipher": "AES_128_GCM",
"issuer": "YE2",
"subject": "ethcom.xyz",
"protocol": "QUIC",
"valid_to": "2027-01-16T20:18:20Z",
"valid_from": "2026-10-18T20:18:21Z"
} |
| 域名年龄(天) | 1351 |
| Apex age days | 1351 |
| Tls age days | 8 |
| TLS 有效天数 | 89 |
| 请求 | 17 |
| 服务提供商评定结果 | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 89,
"malicious": true
},
"overall": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"tether"
],
"malicious": true,
"categories": [
"phishing"
]
},
"urlscan": {
"tags": [
"phishing"
],
"score": 100,
"brands": [
"Tether"
],
"malicious": true,
"categories": [
"phishing"
]
}
} |
| HTTP 头 | {
"server": "cloudflare",
"content-type": "text/html; charset=utf-8"
} |
单独的监视器记录 · 日期未记录
单独存储的监控快照;不会替换主报告记录,也不会确定当前的可用性。
- record_source
- domain_monitor.urlscan
- uuid
- 01a17bf0-df85-718d-af02-78c2c6b00f1f
- 评分
- null
- malicious
- null
- result_at
- null
- enriched_at
- 2026-10-27T09:11:06Z
- source_timestamps
- {"urlscan_result_at":null,"urlscan_enriched_at":"2026-10-27 10:11:06"}
- timestamp_basis
- Europe/Berlin,与现有报告中使用的格式一致;源时间戳按原样保留
