VirusTotal
1 / 92 engine detections
打开报告scanana.co:冒充 Ethereum,PhishDestroy 于 2026-10-23 检测到。风险:高(67/100)。注册商:NameCheap。状态:最后已知的活跃状态。托管:Cogent Communications。PhishDestroy 已发送1 份滥用举报。VirusTotal:1/92 个引擎标记。请勿输入登录凭据,也不要连接钱包。
“New Private Tab”
冒充 Ethereum: scanana.co — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 1/92 (Kaspersky); URLQuery 2 det.; URLScan capture; PhishDestroy score 67/100. 注册商: NameCheap.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
1 / 92 engine detections
打开报告2 det.
打开报告3 community references
打开报告provider verdict: clean
打开报告无威胁标记
打开报告页面快照
打开报告结果反映各来源的采集时间。零检出不代表安全。OTX 引用为社区发布的内容。
PhishDestroy threat report
PhishDestroy’s automated intake on 2026-10-23 flagged scanana.co because VirusTotal reported one malicious detection. The recorded page title “Scanana – AI Crypto Portfolio Tracker” and the excerpt “Connect your wallet to discover profit opportunities, paperhanded coins, and get AI trading insights.” indicate a request for wallet connection, which the intake AI identified as a typical wallet‑drainer lure. An HTTP 200 response was recorded on 2026-10-23, confirming the site served content at that time.
A wallet drainer offers a service that appears to read only public blockchain data, then asks the user to connect a cryptocurrency wallet via a non‑custodial interface. If the user approves, the site can obtain transaction permissions and move funds without the user’s knowledge.
VirusTotal analysis on 2026-09-25 flagged the domain as malicious once, with Kaspersky labeling it as phishing. Google Safe Browsing checked on 2026-10-23 did not flag the URL. urlscan captured screenshots on 2026-09-13 and returned a clean verdict. OTX listed three pulses referencing the domain as of 2026-10-23. PhishDestroy’s internal blocklist marked the domain as malicious on 2026-10-23, while no external blocklists reported it (external_count 0).
The domain was registered with NameCheap on 2026-09-08 and expires on 2027-09-08. The recorded IP was 170.75.160.175, an address owned by Cogent Communications in Canada. The site used a Let’s Encrypt certificate valid from 2026-09-08 to 2026-12-07. Nameservers were dns1.registrar-servers.com and dns2.registrar-servers.com.
If you visited the site and connected a wallet, revoke any approvals granted and consider moving assets to a new wallet with a fresh seed phrase. Change any passwords used on the site. Defenders should block the domain, monitor outbound connections to 170.75.160.175, and log any attempts to access scanana.co.
已存档的页面、网络和扫描器观测结果,按来源和观测时间分组。
观察到: · Retrieved:
| Uuid | 01a1676e-f4cd-769a-8c8b-62ce47f6364e |
|---|---|
| Final url | https://scanana.co/ |
| 状态 | 200 |
| Ip | 170.75.160.175 |
| Ptr | 175.160.75.170.lunanode-rdns.com |
| Contacted domains | [
"fonts.gstatic.com",
"fonts.googleapis.com",
"plural-upright.defex.cc"
] |
| Contacted IP addresses | [
"173.194.45.94",
"172.217.222.95",
"170.75.160.175"
] |
| Asns | [
"15169",
"174"
] |
| Countries | [
"US",
"CA"
] |
| Linked domains | [
"x.com"
] |
| Social | [
"https://x.com/Theblue221205"
] |
| Document hash | 9827a115263a510b2e60aca2212e1d8d70d0817649758f64f9bbcb8b19c496d1 |
| Script hashes | [
"535d5be05cc6efcb00db6b8bdf165151ee1419fb1c8a65c5001ada6397e38da2"
] |
| Globals | [
"sendVisitNotification",
"sendDemoNotification",
"sendWalletNotification",
"sendChoiceNotification",
"openWalletTrustModal",
"closeWalletTrustModal",
"startDemo",
"closeDemoModal",
"showDemoStep",
"playDemoSequence",
"continueAfterAnalysisChoice",
"selectDemoCoin",
"startScanning",
"walletTrustModal",
"scanTokensBtn",
"closeWalletTrustModalBtn",
"walletModalTrigger",
"animationStyle",
"demoModal",
"watchDemoBtn",
"closeDemoModalBtn",
"demoCloseBtn",
"currentDemoStep",
"demoInterval",
"selectedAnalysisType",
"selectedDemoCoin"
] |
| Tls | {
"san": [
"scanana.co",
"www.scanana.co"
],
"cipher": "AES_128_GCM",
"issuer": "YR1",
"subject": "scanana.co",
"protocol": "TLS 1.3",
"valid_to": "2026-12-07T00:52:32Z",
"valid_from": "2026-09-08T00:52:33Z"
} |
| 域名年龄(天) | 45 |
| Apex age days | 45 |
| Tls age days | 45 |
| TLS 有效天数 | 89 |
| Requests | 22 |
| Provider verdicts | {
"engines": {
"tags": [
"urlscan-ml",
"urlscan-ml-60c5e22"
],
"score": 95,
"malicious": true
},
"overall": {
"score": 0,
"malicious": false
}
} |
| HTTP headers | {
"server": "nginx",
"content-type": "text/html; charset=utf-8",
"strict-transport-security": "max-age=31536000;"
} |
观察到: · Retrieved:
| Uuid | a4a96356-0aa7-4a4e-9df2-e1d768df33d3 |
|---|---|
| Final url | https://scanana.co/ |
| 状态 | 200 |
| History | [
{
"url": "https://scanana.co/",
"status": 200
}
] |
| DOM structure hash | fe0d23e7e70a6be0a365d19d664a2a3829d36ed71b96da196054563a105908d3 |
| Document hash | 9827a115263a510b2e60aca2212e1d8d70d0817649758f64f9bbcb8b19c496d1 |
| Radar rank | {
"bucket": ">200000"
} |
| DNS 记录 | [
{
"name": "scanana.co",
"type": "A",
"value": "170.75.160.175"
}
] |
| DNSSEC 有效 | false |
| Ip | 170.75.160.175 |
观察到: · Retrieved:
| Vendor result counts | {
"timeout": 0,
"harmless": 53,
"malicious": 1,
"suspicious": 0,
"undetected": 38
} |
|---|---|
| Vendor labels | {
"Kaspersky": "phishing"
} |
| Reputation | 0 |
| 注册商 | NAMECHEAP INC |
| 创建 | 2026-09-08T00:32:23Z |
| Expires | 2027-09-08T23:59:59Z |
| Updated | 2026-09-08T00:32:26Z |
| 首次发现 | 2026-09-08T02:09:29Z |
| DNS 记录 | [
{
"ttl": 1799,
"type": "A",
"value": "170.75.160.175"
},
{
"ttl": 1800,
"type": "TXT",
"value": "v=spf1 include:spf.efwd.registrar-servers.com ~all"
},
{
"ttl": 1800,
"type": "NS",
"value": "dns2.registrar-servers.com"
},
{
"ttl": 1800,
"type": "NS",
"value": "dns1.registrar-servers.com"
},
{
"ttl": 1800,
"type": "MX",
"value": "eforward2.registrar-servers.com",
"priority": 10
},
{
"ttl": 1800,
"type": "MX",
"value": "eforward3.registrar-servers.com",
"priority": 10
},
{
"ttl": 1800,
"type": "MX",
"value": "eforward5.registrar-servers.com",
"priority": 20
},
{
"ttl": 3601,
"type": "SOA",
"rname": "hostmaster.registrar-servers.com",
"value": "dns1.registrar-servers.com"
},
{
"ttl": 1800,
"type": "MX",
"value": "eforward1.registrar-servers.com",
"priority": 10
},
{
"ttl": 1800,
"type": "MX",
"value": "eforward4.registrar-servers.com",
"priority": 15
}
] |
| Dns at | 2026-09-25T16:01:50Z |
| Jarm | 29d29d15d29d29d00041d41d000000df133019600a83abfb096ff3e86cd79d |
| Certificate | {
"san": [
"scanana.co",
"www.scanana.co"
],
"issuer": "Let's Encrypt / YR1",
"serial": "66fadd4840c19aeebbde70cb3a3da42fa4",
"sha256": "497a1006b3a9d817be40bf91c1305b576bb6024e353d37b5a08e9a51da5b58e8",
"subject": "scanana.co",
"valid_to": "2026-12-07T00:52:32Z",
"valid_from": "2026-09-08T00:52:33Z"
} |
| 注册记录 | {
"registrar": "NAMECHEAP INC",
"registrar_iana_id": "1068",
"registrar_url": "http://www.namecheap.com",
"created": "2026-09-08T00:32:23Z",
"updated": "1-01-01T00:00:00Z",
"expires": "2027-09-08T00:32:23Z",
"status": [
"addPeriod",
"clientTransferProhibited",
"serverTransferProhibited"
],
"nameservers": [
"dns1.registrar-servers.com",
"dns2.registrar-servers.com"
],
"dnssec": "unsigned"
} |
| Mail configuration | {
"mx": [
"eforward3.registrar-servers.com",
"eforward4.registrar-servers.com",
"eforward5.registrar-servers.com",
"eforward1.registrar-servers.com",
"eforward2.registrar-servers.com"
],
"spf": "v=spf1 include:spf.efwd.registrar-servers.com ~all",
"spf_lookups": 1
} |
|---|---|
| CAA 记录 | {
"domain": "scanana.co"
} |
| Protective DNS results | {
"resolvers": 12,
"blocked_count": 0
} |
| Web archive observations | {
"last": "2026-10-23T06:23:49Z",
"first": "2026-09-10T01:08:11Z",
"changes": 2,
"days_archived": 4,
"scans_per_day": 0.07,
"avg_page_bytes": 11066
} |
| 页面标题与元数据 | {
"title": "Scanana - AI Crypto Portfolio Tracker"
} |
| 表单与混合内容 | {
"no_sri": [
"https://plural-upright.defex.cc/_nuxt/assets/index.js"
],
"third_party_scripts": 1
} |
| 状态 | {
"up": true,
"code": 200,
"timings": {
"dns": 3,
"tls": 123,
"wait": 118,
"connect": 108,
"download": 219
},
"response_ms": 571
} |
| TLS connection | {
"alpn": "h2",
"cipher": "TLS_AES_128_GCM_SHA256",
"protocol": "TLSv1.3",
"versions": [
"TLSv1.2",
"TLSv1.3"
],
"authorized": true,
"forward_secrecy": true
} |
| Ports | {
"open": [
21,
22,
53,
80,
443
]
} |
| Carbon | {
"bytes": 73249,
"co2_grams": 0.0027,
"cleaner_than": 29
} |
| Dns server | {
"ns": [
{
"ip": "156.154.132.200",
"host": "dns1.registrar-servers.com"
},
{
"ip": "156.154.133.200",
"host": "dns2.registrar-servers.com"
}
],
"zone": "scanana.co"
} |
| Location | {
"ip": "170.75.160.175",
"asn": "174",
"org": "Cogent Communications",
"city": "Toronto",
"country": "CA"
} |
| Ssl | {
"issuer": "Let's Encrypt / YR1",
"subject": "scanana.co"
} |
| DNS 记录 | {
"A": [
"170.75.160.175"
],
"MX": [
"{\"exchange\": \"eforward5.registrar-servers.com\", \"priority\": 20}",
"{\"exchange\": \"eforward2.registrar-servers.com\", \"priority\": 10}",
"{\"exchange\": \"eforward3.registrar-servers.com\", \"priority\": 10}",
"{\"exchange\": \"eforward4.registrar-servers.com\", \"priority\": 15}",
"{\"exchange\": \"eforward1.registrar-servers.com\", \"priority\": 10}"
],
"NS": [
"dns1.registrar-servers.com",
"dns2.registrar-servers.com"
],
"SOA": "{\"nsname\": \"dns1.registrar-servers.com\", \"hostmaster\": \"hostmaster.registrar-servers.com\", \"serial\": 1788831728, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3601}",
"TXT": [
"v=spf1 include:spf.efwd.registrar-servers.com ~all"
]
} |
| Dnssec | {
"ds": false,
"rrsig": false,
"dnskey": false
} |
| Hsts | {
"header": "max-age=31536000;",
"message": "HSTS header does not include all subdomains."
} |
| HTTP security policies | {
"xFrameOptions": false,
"referrerPolicy": false,
"xXSSProtection": false,
"permissionsPolicy": false,
"xContentTypeOptions": false,
"contentSecurityPolicy": false,
"strictTransportPolicy": "max-age=31536000;",
"crossOriginOpenerPolicy": false,
"crossOriginEmbedderPolicy": false,
"crossOriginResourcePolicy": false
} |
| Get ip | {
"ip": "170.75.160.175",
"family": 4
} |
| Redirects | {
"chain": [
"https://scanana.co"
]
} |
| Page links | {
"external": [
"https://x.com/Theblue221205"
],
"external_count": 1,
"internal_count": 1
} |
| 注册记录 | {
"registrar": "NameCheap, Inc.",
"created": "2026-09-08T00:32:23Z",
"updated": "2026-10-07T10:04:31Z",
"expires": "2027-09-08T23:59:59Z",
"status": [
"serverTransferProhibited https://icann.org/epp",
"clientTransferProhibited https://icann.org/epp"
],
"nameservers": [
"dns1.registrar-servers.com",
"dns2.registrar-servers.com"
]
} |
| HTTP headers | {
"headers": {
"server": "nginx",
"content-type": "text/html; charset=utf-8",
"strict-transport-security": "max-age=31536000;"
}
} |
不是。PhishDestroy 将 scanana.co 归类为“冒充 Ethereum”(风险:高,67/100),首次检测于 2026-10-23。VirusTotal:1/92 个引擎标记。请将该网站视为不安全。
不安全。请勿在 scanana.co 连接钱包、签署消息或批准代币。钓鱼网站会请求授权(approve、setApprovalForAll、Permit2),让运营者转走你的资产,而已确认的交易无法撤销。
更改你在该网站输入过的所有密码,并开启双重验证。如果你连接过钱包或签署过任何内容,请撤销授权,并将剩余资金转到新钱包;切勿透露助记词。分步指南:紧急处理指南。
dns1.registrar-servers.comdns2.registrar-servers.comeforward2.registrar-servers.compriority 10eforward3.registrar-servers.compriority 10eforward5.registrar-servers.compriority 20eforward1.registrar-servers.compriority 10eforward4.registrar-servers.compriority 15位置信息描述的是 IP 网络。
497a1006b3a9d817be40bf91c1305b576bb6024e353d37b5a08e9a51da5b58e8scanana.cowww.scanana.co已保存的证书元数据。未带时区的证书日期按存档原样显示。传输加密并不能证明该网站值得信任。
Hostnames retained in the domain record or Certificate Transparency cache. A hostname alone does not establish current availability or malicious activity.
www.scanana.coDomain recordThe original observation time is not recorded for these hostnames.
Google PageSpeed Insights — 移动端性能审核: scanana.co · checked Oct 23, 2026
由本地采集流程保留的带时间戳的响应元数据。以下各项数值均对应所显示的存档时间。
https://scanana.co/Server: nginxContent-Type: text/html; charset=utf-8Content-Encoding: gzipbyteskeep-alivegzip11443text/html; charset=utf-8Fri, 23 Oct 2026 06:23:52 GMT"11e21-65b9b77e00f83-gzip"Wed, 16 Sep 2026 15:39:09 GMTnginxmax-age=31536000;Accept-Encoding由采集器保留的数值;较长的值可能在采集时被截短。
估算时间描述的是一个观测时间窗口。它并不能证明注册商采取了措施,也不代表网站变为不可访问的确切时刻。
比较浏览器与爬虫各自收到的内容,并检查是否存在 Keitaro 流量分发。
alive_content: raw=ok; http=200; via=https_proxy; server=nginx
scanana.co
由监测程序和来源采集器保留的带日期变更记录。最新观测排在最前;来源状态并不能证明站点已被下架。
未知→live_content
content_served
可访问
已存储 52 个仿冒域名
PD-20261023-9D4583 Recipient: abuse@namecheap.com 如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
选择您所在的国家/地区以获取 官方网络犯罪联系人 或 创建投诉草稿 →。
Template-based draft · optional AI wording assistance requires separate consent
请根据您提供过的信息选择相应的步骤。请将本报告的副本与您自己的记录一并保存。
停止使用可疑网站。请通过官方应用或您已信任的网址访问真正的服务。
请将原始邮件、收据、消息和截图保存在安全的地方。基于事实的时间线有助于受理机构了解事件经过。 IC3 evidence guidance ↗
scanana.co)即使你并不了解所有细节—— 不管怎样都要提交报告. 即使信息不完整,对调查仍有帮助。
举报并不能保证追回损失或启动调查,但及时、准确的交易数据可以帮助执法机构和服务提供商追踪事件。
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
本报告汇总了已保存的页面快照、注册与网络记录、扫描器结果以及 PhishDestroy 举报历史。每个来源均保留各自的观测日期。打开来源报告即可查看原始结果。
AI 辅助分析的撰写时间: 。该分析描述的是当时可获得的证据;之后的来源核查结果可能有所变化。
快照记录的是当时显示的内容。扫描器结果记录的是该服务商在检查时的评估。有效证书或零检出结果都不能保证安全。