Report - funwiths.com/

Report Overview

Submitted URL
funwiths.com/
IP
162.240.175.120
ASN
#46606 UNIFIEDLAYER-AS-1
Submitted
2024-04-16 18:10:50
Access
public
Website Title
Shopify - Login
Final URL
funwiths.com/
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
20

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17	2024-04-16	463 B	7.2 kB	104.17.25.14
code.jquery.com	634	2005-12-10	2012-05-21	2024-04-16	438 B	24 kB	151.101.194.137
funwiths.com	unknown	unknown	No data	No data	2.2 kB	25 kB	162.240.175.120
maxcdn.bootstrapcdn.com	724	2012-05-25	2014-06-18	2024-04-16	930 B	45 kB	104.18.11.207

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	funwiths.com/	Shopify
2024-04-16	medium	funwiths.com/	Shopify
2024-04-16	medium	funwiths.com/	Shopify
2024-04-16	medium	funwiths.com/	Shopify
2024-04-16	medium	funwiths.com/	Shopify

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-04-16	medium	funwiths.com	Sinkholed
2024-04-16	medium	funwiths.com	Sinkholed
2024-04-16	medium	funwiths.com	Sinkholed
2024-04-16	medium	funwiths.com	Sinkholed
2024-04-16	medium	funwiths.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (4)

	URL	Size	First Seen	Last Seen
	funwiths.com/js/formjs.js	2.7 kB	2023-03-07	2024-04-25
Pretty URL funwiths.com/js/formjs.js IP 162.240.175.120 ASN #46606 UNIFIEDLAYER-AS-1 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 13:14:56 Last Seen2024-04-25 07:37:11 Times Seen33 Hash 7ceca37bdf614d64508ea8c9a990deb0 19914d9c3ae464052f5295f5fe3bb1924cc4837c 4ed2fb61191665d35f5676f5fa22b983de6cba1c8e8179da920b8b7daff25f1f Loading...

	code.jquery.com/jquery-3.2.1.slim.min.js	70 kB	2023-03-07	2024-04-29
Pretty URL code.jquery.com/jquery-3.2.1.slim.min.js IP 151.101.194.137 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:43 Last Seen2024-04-29 21:24:21 Times Seen106962 Hash 5f48fc77cac90c4778fa24ec9c57f37d 9e89d1515bc4c371b86f4cb1002fd8e377c1829f 9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398 Loading...

	cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	19 kB	2023-03-07	2024-04-29
Pretty URL cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js IP 104.17.25.14 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-04-29 21:24:21 Times Seen112554 Hash 70d3fda195602fe8b75e0097eed74dde c3b977aa4b8dfb69d651e07015031d385ded964b a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66 Loading...

	maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	49 kB	2023-03-07	2024-04-29
Pretty URL maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP 104.18.11.207 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:44 Last Seen2024-04-29 21:24:22 Times Seen137807 Hash 14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b Loading...

HTTP Transactions (9)

URL IP Response Size

cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js

104.17.25.14

200 OK

6.2 kB

URL GET HTTP/2
cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
IP
104.17.25.14:443
ASN
#13335 CLOUDFLARENET

Requested by
https://funwiths.com/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (19015)
Size
6.2 kB (6157 bytes)
Hash
70d3fda195602fe8b75e0097eed74dde
c3b977aa4b8dfb69d651e07015031d385ded964b
a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66

HTTP Headers

GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funwiths.com
DNT: 1
Connection: keep-alive
Referer: https://funwiths.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 18:10:25 GMT
content-type: application/javascript; charset=utf-8
content-length: 6157
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03fa9-4af4"
last-modified: Mon, 04 May 2020 16:15:37 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2735909
expires: Sun, 06 Apr 2025 18:10:25 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YWqb3%2FhWCHYffXJxyfdoFrMkA%2BpQrUzoK10gfYzkT1mh9w8sjBXjDinjHY9PVK2t%2BQH0oIrN1F3OLgtEQmJnKOScWwzAU6OXWS2dobMuozrEjSaHVlU62HYVGs2ph96jesfTaUFZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875621cf7d78b51d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

code.jquery.com/jquery-3.2.1.slim.min.js

151.101.194.137

200 OK

24 kB

URL GET HTTP/2
code.jquery.com/jquery-3.2.1.slim.min.js
IP
151.101.194.137:443
ASN
#54113 FASTLY

Requested by
https://funwiths.com/
Certificate
IssuerSectigo Limited
Subject*.jquery.com
FingerprintD2:19:0A:AD:CE:BB:9C:61:17:5D:29:4B:A2:54:E8:C6:91:B8:F9:8D
ValidityTue, 11 Jul 2023 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
JavaScript source, ASCII text, with very long lines (32012)
Size
24 kB (23856 bytes)
Hash
5f48fc77cac90c4778fa24ec9c57f37d
9e89d1515bc4c371b86f4cb1002fd8e377c1829f
9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398

HTTP Headers

GET /jquery-3.2.1.slim.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funwiths.com
DNT: 1
Connection: keep-alive
Referer: https://funwiths.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
etag: W/"28feccc0-10fdd"
cache-control: public, max-age=31536000, stale-while-revalidate=604800
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 16 Apr 2024 18:10:25 GMT
age: 761159
x-served-by: cache-lga21963-LGA, cache-hel1410025-HEL
x-cache: HIT, HIT
x-cache-hits: 40, 80421
x-timer: S1713291026.900083,VS0,VE0
vary: Accept-Encoding
content-length: 23856
X-Firefox-Spdy: h2

funwiths.com/css/style.css

162.240.175.120

200 OK

4.9 kB

URL GET HTTP/2
funwiths.com/css/style.css
IP
162.240.175.120:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://funwiths.com/
Certificate
IssuercPanel, Inc.
Subjectfunwiths.com
Fingerprint7A:2B:87:C3:B1:69:D6:93:3C:D6:4D:59:CC:69:A4:E8:00:D6:60:E7
ValidityMon, 15 Apr 2024 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
ASCII text
Size
4.9 kB (4869 bytes)
Hash
b3119e4ac1d5acc072b05bf3a23b03da
73417696464fe8c9967e91c635d33b12735f3f54
fab0e4d2f0b68864368586c2ae0225f319ff8a8311647e0f6770d85044de0db3

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Shopify
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /css/style.css HTTP/1.1
Host: funwiths.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funwiths.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Mon, 16 Mar 2020 17:47:32 GMT
accept-ranges: bytes
content-length: 4869
content-type: text/css
date: Tue, 16 Apr 2024 18:10:26 GMT
server: Apache
X-Firefox-Spdy: h2

funwiths.com/img/spf.svg

162.240.175.120

200 OK

3.7 kB

URL GET HTTP/2
funwiths.com/img/spf.svg
IP
162.240.175.120:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://funwiths.com/
Certificate
IssuercPanel, Inc.
Subjectfunwiths.com
Fingerprint7A:2B:87:C3:B1:69:D6:93:3C:D6:4D:59:CC:69:A4:E8:00:D6:60:E7
ValidityMon, 15 Apr 2024 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
SVG Scalable Vector Graphics image
Size
3.7 kB (3663 bytes)
Hash
db704da67c442f849ecc937746fa80c4
9896ba54e5ff1e3acfb65353bfcab2adfc9d8b40
aa398d5b8aba8c48c1da48d159ff93241e68e4eeccfa6e2a064e3b33c1fa9cc7

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Shopify
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/spf.svg HTTP/1.1
Host: funwiths.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funwiths.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sat, 05 Oct 2019 18:32:50 GMT
accept-ranges: bytes
content-length: 3663
content-type: image/svg+xml
date: Tue, 16 Apr 2024 18:10:26 GMT
server: Apache
X-Firefox-Spdy: h2

funwiths.com/js/formjs.js

162.240.175.120

200 OK

2.7 kB

URL GET HTTP/2
funwiths.com/js/formjs.js
IP
162.240.175.120:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://funwiths.com/
Certificate
IssuercPanel, Inc.
Subjectfunwiths.com
Fingerprint7A:2B:87:C3:B1:69:D6:93:3C:D6:4D:59:CC:69:A4:E8:00:D6:60:E7
ValidityMon, 15 Apr 2024 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
ASCII text
Size
2.7 kB (2670 bytes)
Hash
7ceca37bdf614d64508ea8c9a990deb0
19914d9c3ae464052f5295f5fe3bb1924cc4837c
4ed2fb61191665d35f5676f5fa22b983de6cba1c8e8179da920b8b7daff25f1f

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Shopify
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /js/formjs.js HTTP/1.1
Host: funwiths.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funwiths.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 06 Oct 2019 03:59:14 GMT
accept-ranges: bytes
content-length: 2670
content-type: application/javascript
date: Tue, 16 Apr 2024 18:10:26 GMT
server: Apache
X-Firefox-Spdy: h2

funwiths.com/img/shopify-favicon.png

162.240.175.120

200 OK

690 B

URL GET HTTP/2
funwiths.com/img/shopify-favicon.png
IP
162.240.175.120:443
ASN
#46606 UNIFIEDLAYER-AS-1

Requested by
https://funwiths.com/
Certificate
IssuercPanel, Inc.
Subjectfunwiths.com
Fingerprint7A:2B:87:C3:B1:69:D6:93:3C:D6:4D:59:CC:69:A4:E8:00:D6:60:E7
ValidityMon, 15 Apr 2024 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Size
690 B (690 bytes)
Hash
3dc89cbe4786b3ed44832463ca15ea5b
ed350aafb2495a67e74183b137955194287d2f18
0f387fa00a157385452513a9dbc3225458e42fce93b6c0f9451d53706ecf8f0d

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Shopify
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /img/shopify-favicon.png HTTP/1.1
Host: funwiths.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://funwiths.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
last-modified: Sun, 06 Oct 2019 00:07:25 GMT
accept-ranges: bytes
content-length: 690
content-type: image/png
date: Tue, 16 Apr 2024 18:10:26 GMT
server: Apache
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js

104.18.11.207

200 OK

15 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://funwiths.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
JavaScript source, ASCII text, with very long lines (48664)
Size
15 kB (14929 bytes)
Hash
14d449eb8876fa55e1ef3c2cc52b0c17
a9545831803b1359cfeed47e3b4d6bae68e40e99
e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b

HTTP Headers

GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funwiths.com
DNT: 1
Connection: keep-alive
Referer: https://funwiths.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 18:10:25 GMT
content-type: application/javascript; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"14d449eb8876fa55e1ef3c2cc52b0c17"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:46:36
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 5dad2e4a36f3568b511caa212f7f8409
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 875621cfcb69b4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css

104.18.11.207

200 OK

28 kB

URL GET HTTP/2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
IP
104.18.11.207:443
ASN
#13335 CLOUDFLARENET

Requested by
https://funwiths.com/
Certificate
IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63
ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT

File type
ASCII text, with very long lines (65325)
Size
28 kB (27805 bytes)
Hash
450fc463b8b1a349df717056fbb3e078
895125a4522a3b10ee7ada06ee6503587cbf95c5
2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d

HTTP Headers

GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://funwiths.com
DNT: 1
Connection: keep-alive
Referer: https://funwiths.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 16 Apr 2024 18:10:25 GMT
content-type: text/css; charset=utf-8
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
content-encoding: br
etag: W/"450fc463b8b1a349df717056fbb3e078"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 03/18/2024 12:51:41
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 1048
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 8f3a409760a902f6d66b0d6df3c35e56
cdn-cache: HIT
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 875621cfcb65b4f4-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

funwiths.com/

162.240.175.120

200 OK

12 kB

URL User Request GET HTTP/2
funwiths.com/
IP
162.240.175.120:443
ASN
#46606 UNIFIEDLAYER-AS-1

Certificate
IssuercPanel, Inc.
Subjectfunwiths.com
Fingerprint7A:2B:87:C3:B1:69:D6:93:3C:D6:4D:59:CC:69:A4:E8:00:D6:60:E7
ValidityMon, 15 Apr 2024 00:00:00 GMT - Sun, 14 Jul 2024 23:59:59 GMT

File type
data
Size
12 kB (11838 bytes)
Hash
a45c61726f1068432423ea00693bd824
c8e11f1ad5d6302dd70005119d67e4f372dea6ae
47eea7a1385b21dc25ea52969364328e0ecba1262d1841b1f2f8e9787345eca0

Detections

Analyzer	Verdict	Alert
OpenPhish	phishing	Shopify
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: funwiths.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
date: Tue, 16 Apr 2024 18:10:26 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (4)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (9)

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/2

IP

ASN

Requested by

Certificate

File type

Size