Report - teaspill.fun/%5C

Report Overview

Visitedpublic

2025-08-02 17:58:18

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
teaspill.fun	unknown	2025-07-27	2025-08-02	2025-08-02	1.8 kB	17 kB	167.172.206.235

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Detection System	Indicator	Verdict	Alert
Quad9 DNS	teaspill.fun	malicious	Sinkholed

JavaScript (0)

HTTP Transactions (4)

URL IP Response Size

GET teaspill.fun/favicon.ico

167.172.206.235

200 OK

15 kB

URL GET HTTPS

teaspill.fun/favicon.ico

IP / ASN

167.172.206.235

#14061 DIGITALOCEAN-ASN

Requested byhttps://teaspill.fun/%5C

Resource Info

File typeMS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel

First Seen2025-08-02

Last Seen2025-08-02

Times Seen1

Size15 kB (15406 bytes)

MD51b3c0ee15a62505ad9b257e561a75f34

SHA189209515ed472d47fb5b6009cad42fea6ae2b938

SHA256753255e6f7453553f35fa1d1a81e6677c1b6327b869e6e68425dce2449e98e61

Certificate Info

IssuerLet's Encrypt

Subjectteaspill.fun

Fingerprint27:C3:B6:FC:F4:14:40:82:82:84:49:44:C8:53:F7:3F:62:AB:3D:DB

ValiditySun, 27 Jul 2025 21:41:48 GMT - Sat, 25 Oct 2025 21:41:47 GMT

Technology Fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: teaspill.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://teaspill.fun/%5C
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 02 Aug 2025 17:57:56 GMT
content-type: image/vnd.microsoft.icon
last-modified: Sat, 02 Aug 2025 17:35:33 GMT
vary: Accept-Encoding
etag: W/"688e4c65-3c2e"
content-encoding: br
X-Firefox-Spdy: h2

GET teaspill.fun/%5C

167.172.206.235

404 Not Found

146 B

URL User Request GET HTTPS

teaspill.fun/%5C

IP / ASN

167.172.206.235

#14061 DIGITALOCEAN-ASN

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-03-07

Last Seen2025-08-10

Times Seen214789

Size146 B (146 bytes)

MD58eec510e57f5f732fd2cce73df7b73ef

SHA13c0af39ecb3753c5fee3b53d063c7286019eac3b

SHA25655f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Certificate Info

IssuerLet's Encrypt

Subjectteaspill.fun

Fingerprint27:C3:B6:FC:F4:14:40:82:82:84:49:44:C8:53:F7:3F:62:AB:3D:DB

ValiditySun, 27 Jul 2025 21:41:48 GMT - Sat, 25 Oct 2025 21:41:47 GMT

Technology Fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /%5C HTTP/1.1
Host: teaspill.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Sat, 02 Aug 2025 17:57:55 GMT
content-type: text/html
content-length: 146
vary: Accept-Encoding
X-Firefox-Spdy: h2

GET teaspill.fun/%5C

144.202.10.83

301 Moved Permanently

146 B

URL User Request GET HTTP

teaspill.fun/%5C

IP / ASN

144.202.10.83

#20473 AS-VULTR

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-10

Times Seen5753512

Size146 B (146 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Technology Fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /%5C HTTP/1.1
Host: teaspill.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 02 Aug 2025 17:57:56 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://teaspill.fun/%5C

GET teaspill.fun/%5C

167.172.206.235

404 Not Found

146 B

URL User Request GET HTTPS

teaspill.fun/%5C

IP / ASN

167.172.206.235

#14061 DIGITALOCEAN-ASN

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-03-07

Last Seen2025-08-10

Times Seen214789

Size146 B (146 bytes)

MD58eec510e57f5f732fd2cce73df7b73ef

SHA13c0af39ecb3753c5fee3b53d063c7286019eac3b

SHA25655f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

Certificate Info

IssuerLet's Encrypt

Subjectteaspill.fun

Fingerprint27:C3:B6:FC:F4:14:40:82:82:84:49:44:C8:53:F7:3F:62:AB:3D:DB

ValiditySun, 27 Jul 2025 21:41:48 GMT - Sat, 25 Oct 2025 21:41:47 GMT

Technology Fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /%5C HTTP/1.1
Host: teaspill.fun
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 404 Not Found
server: nginx
date: Sat, 02 Aug 2025 17:57:56 GMT
content-type: text/html
content-length: 146
vary: Accept-Encoding
X-Firefox-Spdy: h2