域安全和威胁情报

ww19.healthesxform.us

Name: ww19.healthesxform.us — PhishDestroy evidence record
Published: 2026-10-25
License: https://creativecommons.org/licenses/by/4.0/

查看证据

注册商: TLD Registrar Solutions
Resolved IP: 208.91.196.145
注册时间: 2024年3月13日

PhishDestroy评估高

63/100

证据评分

可用性 最后已知的活跃状态 最新存储的可达性观察观测时间 2026年10月25日 · 23:00 UTCHTTP 探测

风险信号

存储的 PhishDestroy 威胁列表

VirusTotal

0 / 92

发动机检测 · 2026-10-25

OTX

社区参考资料

Cloudflare Radar

无异常

源代码判定

页面快照

打开图库

域名年龄

956 days

已发送举报

—

无已发送记录

报告概览

ww19.healthesxform.us — 最后已知的活跃状态 (HTTP 200). 证据摘要: VirusTotal 0/92; URLScan capture; PhishDestroy score 63/100. 注册商: TLD Registrar Solutions.

为保留原始取证记录，下方的 PhishDestroy AI 详细分析仍使用英文。

分析

PhishDestroy威胁报告2026-10-25 14:50:38 UTC

Overview

The page excerpt “Do Not Sell or Share My Personal Information” was recorded by PhishDestroy’s intake AI and judged insufficient to prove malicious intent or brand impersonation. On 2026-10-25 the domain was first seen by PhishDestroy, returned HTTP 200 and displayed the same excerpt.

How the scam works

No specific fraud technique was observed on this page; the domain is simply listed as suspicious. In general, domains of this type could be used to harvest personal data, host phishing pages, or perform malicious redirects, but none of those actions were confirmed here.

证据

VirusTotal scanned the domain on 2026-10-25 and reported 0 detections from 92 engines. Google Safe Browsing checked the URL on the same day and did not flag it. urlscan.io captured the site on 2026-10-17, gave an engine‑generated malicious score of 83, but its overall verdict was non‑malicious. External blocklists showed 0 hits, OTX reported 0 pulses, and PhishDestroy’s internal blocklist marks the domain as listed.

基础设施

The DNS observation on 2026-10-24 recorded an A record of 208.91.196.145, which belongs to Confluence Networks Inc in the British Virgin Islands, and a CNAME to 9145.searchmagnified.com. The HTTP response captured on 2026-10-25 included a server header of nginx/1.28.0, a ZeroSSL ECC DV certificate for ww19.healthesxform.us, and the domain age was 26 days (the apex zone 1,458 days).

What to do

Avoid submitting personal or credential information to the site; if any credentials were entered, change them promptly. Security teams should block the exact domain ww19.healthesxform.us and monitor logs for connections to its recorded IP address.

实用链接

urlscan.io scan and screenshot Cloudflare Radar 报告 Stored capture screenshot Cloudflare Radar screenshot (2026-10-25T13:47:00Z)URLScan screenshot (2026-09-20T12:34:43Z)URLScan capture report URLScan screenshot (2026-09-30T13:48:27Z)URLScan capture report VirusTotal 报告 Google Safe Browsing status Archived copy Report phishing to Google Site owner? Request a review

来源证据VirusTotal 0 / 92 8 sources

URLScan

恶意 · 引擎判定 · 评分 83

2026-10-17 09:54 UTC

打开报告

URLScan来源原始记录观测时间: 2026-10-17 09:54:44 UTC20 个字段

观测时间: 2026-10-17T09:54:44Z · 检索到: 2026-10-25T13:47:25Z

报告 ID

01a14948-6916-7092-9e63-856eaa412184

最终网址

http://ww19.healthesxform.us/

HTTP 响应

200

重定向类型

sibling-domain

重定向

目标
https://www.healthesxform.us/
来源
http://www.healthesxform.us/
状态
307
目标
http://ww19.healthesxform.us/
来源
https://www.healthesxform.us/
状态
302
目标
https://ww19.healthesxform.us/
来源
http://ww19.healthesxform.us/
状态
307
目标
http://ww19.healthesxform.us/
来源
https://ww19.healthesxform.us/
状态
307

IP 地址

208.91.196.145

已联系的域名

l.cdn-fileserver.com
cdn.consentmanager.net
d.delivery.consentmanager.net
s.cdn-fileserver.com
s.yimg.com
msadsscale.microsoft.com
scripts.clarity.ms
searchresultsworld.com
www.healthesxform.us

已联系的 IP 地址

104.21.31.250
69.147.92.11
150.171.109.72
150.171.109.77
104.21.26.182
172.67.181.210
89.187.167.38
85.9.206.157
208.91.196.145
23.105.175.16

自治系统（ASN）

13335
14777
8075
60068
202053
40034
30633

服务器所在国家/地区

关联域名

findsearchresults.com
skenzo.com

文档哈希值

dfd661fe13e019a228233c2abfd3163f84b2976c08fc2006b03e001cf48c5971

JavaScript 全局变量

cmp_id
cmp_cdid
cmp_params
cmp_host
cmp_cdn
cmp_proto
cmp_codesrc
cmp_getsupportedLangs
cmp_getRTLLangs
cmp_getlang
cmp_addFrame
cmp_rc
cmp_stub
cmp_gpp_ping
cmp_gppstub
cmp_msghandler
cmp_setStub
cmp_setGppStub
__cmp
__uspapi
__gpp
cmp_utillities
cmp_gppmanifest
cmp_fibo
cmp_reader
cmp_writer
cmp_cs
cmp_lang
cmp_purpose
cmp_getFeatureTextSignature
cmp_hasNonStandardFeatureTexts
cmp_feature
cmp_stack
cmp_vendor
cmp_snapshot
cmp_storage
cmp_gpp_helper
cmp_api
cmp_contentblocking
cmp_behavior

Cookie

sid
__cmpcc
__cmpcccx175795
__cmpccpausps
visitor-id

浏览器存储键

cmp_gpcConsentModeEligible.40679ccc92462
__cmpcccx175795_ww19.healthesxform.us
__cmpcccx175795_expire_ww19.healthesxform.us
__cmpccpausps_ww19.healthesxform.us
__cmpccpausps_expire_ww19.healthesxform.us

域名年龄（天）

注册域名年龄（天）

1458

页面请求数

服务提供商评定结果

引擎判定

标签: urlscan-ml
urlscan-ml-60c5e22
评分: 83
恶意: 是

总体判定

评分: 0
恶意: 否

HTTP 头

服务器: nginx/1.28.0
Content-type: text/html

来源原始字段 · JSON

Uuid	01a14948-6916-7092-9e63-856eaa412184
Final url	http://ww19.healthesxform.us/
状态	200
已重定向	sibling-domain
重定向	[ { "to": "https://www.healthesxform.us/", "from": "http://www.healthesxform.us/", "status": 307 }, { "to": "http://ww19.healthesxform.us/", "from": "https://www.healthesxform.us/", "status": 302 }, { "to": "https://ww19.healthesxform.us/", "from": "http://ww19.healthesxform.us/", "status": 307 }, { "to": "http://ww19.healthesxform.us/", "from": "https://ww19.healthesxform.us/", "status": 307 } ]
Ip	208.91.196.145
已联系的域名	[ "l.cdn-fileserver.com", "cdn.consentmanager.net", "d.delivery.consentmanager.net", "s.cdn-fileserver.com", "s.yimg.com", "msadsscale.microsoft.com", "scripts.clarity.ms", "searchresultsworld.com", "www.healthesxform.us" ]
已联系的 IP 地址	[ "104.21.31.250", "69.147.92.11", "150.171.109.72", "150.171.109.77", "104.21.26.182", "172.67.181.210", "89.187.167.38", "85.9.206.157", "208.91.196.145", "23.105.175.16" ]
Asns	[ "13335", "14777", "8075", "60068", "202053", "40034", "30633" ]
Countries	[ "US", "GB", "DE", "VG" ]
关联域名	[ "findsearchresults.com", "skenzo.com" ]
文档哈希值	dfd661fe13e019a228233c2abfd3163f84b2976c08fc2006b03e001cf48c5971
Globals	[ "cmp_id", "cmp_cdid", "cmp_params", "cmp_host", "cmp_cdn", "cmp_proto", "cmp_codesrc", "cmp_getsupportedLangs", "cmp_getRTLLangs", "cmp_getlang", "cmp_addFrame", "cmp_rc", "cmp_stub", "cmp_gpp_ping", "cmp_gppstub", "cmp_msghandler", "cmp_setStub", "cmp_setGppStub", "__cmp", "__uspapi", "__gpp", "cmp_utillities", "cmp_gppmanifest", "cmp_fibo", "cmp_reader", "cmp_writer", "cmp_cs", "cmp_lang", "cmp_purpose", "cmp_getFeatureTextSignature", "cmp_hasNonStandardFeatureTexts", "cmp_feature", "cmp_stack", "cmp_vendor", "cmp_snapshot", "cmp_storage", "cmp_gpp_helper", "cmp_api", "cmp_contentblocking", "cmp_behavior" ]
Cookie	[ "sid", "__cmpcc", "__cmpcccx175795", "__cmpccpausps", "visitor-id" ]
Storage keys	[ "cmp_gpcConsentModeEligible.40679ccc92462", "__cmpcccx175795_ww19.healthesxform.us", "__cmpcccx175795_expire_ww19.healthesxform.us", "__cmpccpausps_ww19.healthesxform.us", "__cmpccpausps_expire_ww19.healthesxform.us" ]
域名年龄（天）	26
Apex age days	1458
请求	20
服务提供商评定结果	{ "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 83, "malicious": true }, "overall": { "score": 0, "malicious": false } }
HTTP 头	{ "server": "nginx/1.28.0", "content-type": "text/html" }

单独的监视器记录 · 日期未记录

单独存储的监控快照；不会替换主报告记录，也不会确定当前的可用性。

record_source: domain_monitor.urlscan
uuid: 01a14948-6916-7092-9e63-856eaa412184
report_url: https://urlscan.io/result/01a14948-6916-7092-9e63-856eaa412184/
评分: null
malicious: null
result_at: null
enriched_at: null
source_timestamps: {"urlscan_result_at":null,"urlscan_enriched_at":null}
timestamp_basis: Europe/Berlin，与现有报告中使用的格式一致；源时间戳按原样保留

VirusTotal

0 / 92 发动机检测 · 存储的摘要

2026-10-25 14:49 UTC

打开报告

VirusTotal来源原始记录观测时间: 2026-10-24 22:47:54 UTC11 个字段

观测时间: 2026-10-24T22:47:54Z · 检索到: 2026-10-25T14:49:50Z

供应商结果计数

超时: 0
无害: 55
恶意: 0
可疑的: 0
未检测到: 37

信誉评分

注册商

TLD Registrar Solutions Ltd.

创建

2024-03-13 09:14:32 UTC

有效期至

2027-03-13 09:14:32 UTC

已更新

2026-03-18 12:59:33 UTC

首次发现

2026-10-24 22:47:54 UTC

DNS 记录

TTL（秒）
300
类型
MX
值
~
优先级
300
TTL（秒）
900
类型
NS
值
ns2.cnomy.com
TTL（秒）
300
类型
SOA
负责人邮箱
abuse.confluence-networks.com
值
ns1.cnomy.com
TTL（秒）
300
类型
CNAME
值
9145.searchmagnified.com
TTL（秒）
900
类型
NS
值
ns1.cnomy.com
TTL（秒）
300
类型
TXT
值
v=spf1 a -all
TTL（秒）
11
类型
A
值
208.91.196.145

DNS 记录获取时间

2026-10-24 22:52:44 UTC

注册记录

注册商: TLD Registrar Solutions Ltd.
注册商 IANA ID: 1564
注册商 URL: www.tldregistrarsolutions.com
注册时间: 2024-03-13 09:14:32 UTC
已更新: 2026-03-18 12:59:33 UTC
有效期至: 2027-03-13 09:14:32 UTC
状态: clientTransferProhibited
域名服务器: ns1.thednscloud.com
ns2.thednscloud.com
DNSSEC: unsigned

来源原始字段 · JSON

供应商结果计数	{ "timeout": 0, "harmless": 55, "malicious": 0, "suspicious": 0, "undetected": 37 }
声誉	0
标签	[ "dga" ]
注册商	TLD Registrar Solutions Ltd.
创建	2024-03-13T09:14:32Z
有效期至	2027-03-13T09:14:32Z
已更新	2026-03-18T12:59:33Z
首次发现	2026-10-24T22:47:54Z
DNS 记录	[ { "ttl": 300, "type": "MX", "value": "~", "priority": 300 }, { "ttl": 900, "type": "NS", "value": "ns2.cnomy.com" }, { "ttl": 300, "type": "SOA", "rname": "abuse.confluence-networks.com", "value": "ns1.cnomy.com" }, { "ttl": 300, "type": "CNAME", "value": "9145.searchmagnified.com" }, { "ttl": 900, "type": "NS", "value": "ns1.cnomy.com" }, { "ttl": 300, "type": "TXT", "value": "v=spf1 a -all" }, { "ttl": 11, "type": "A", "value": "208.91.196.145" } ]
Dns at	2026-10-24T22:52:44Z
注册记录	{ "registrar": "TLD Registrar Solutions Ltd.", "registrar_iana_id": "1564", "registrar_url": "www.tldregistrarsolutions.com", "created": "2024-03-13T09:14:32Z", "updated": "2026-03-18T12:59:33Z", "expires": "2027-03-13T09:14:32Z", "status": [ "clientTransferProhibited" ], "nameservers": [ "ns1.thednscloud.com", "ns2.thednscloud.com" ], "dnssec": "unsigned" }

单独的源记录 · 0 malicious + 0 suspicious / 92 · 2026-10-24 22:47:54 UTC

上述摘要和此服务提供商记录是在不同时间收集的。两者均仍可查阅；恶意和可疑的分类结果分别显示。

record_source: collected_observations.vt
analysis_at: 2026-10-24T22:47:54Z
fetched_at: 2026-10-25T14:49:50Z
stats: {"timeout":0,"harmless":55,"malicious":0,"suspicious":0,"undetected":37}

OTX

无社区引用

2026-10-25 14:50 UTC

打开报告