WEBSITE ANALYSIS REPORT

http://fiordlandoutdoors.co.nz/

28 Aug 2026 · 18:48:37.000 UTCpublic

Report tags: phishing ghostframe aitm
Submit tags

Request review

Phishing detected

2 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

app.wonderchat.io45 captured requests
arclight.vimeo.com3 captured requests
assets.flodesk.com7 captured requests
f.vimeocdn.com4 captured requests
fiordlandoutdoors.co.nz1 captured requests
form.flodesk.com7 captured requests
i.vimeocdn.com2 captured requests
p.typekit.net1 captured requests
player.vimeo.com1 captured requests
res.cloudinary.com2 captured requests
use.typekit.net3 captured requests
usercontent.flodesk.com4 captured requests
vimeo.com6 captured requests
vod-adaptive-ak.vimeocdn.com12 captured requests
www.fiordlandoutdoors.co.nz32 captured requests
www.google.com1 captured requests
www.googletagmanager.com2 captured requests

Connections

app.wonderchat.io → res.cloudinary.comLoads from2 captured connections
fiordlandoutdoors.co.nz → www.fiordlandoutdoors.co.nzRedirects to1 captured connections
player.vimeo.com → arclight.vimeo.comCalls3 captured connections
player.vimeo.com → f.vimeocdn.comLoads from4 captured connections
player.vimeo.com → i.vimeocdn.comLoads from2 captured connections
player.vimeo.com → vimeo.comCalls6 captured connections
player.vimeo.com → vod-adaptive-ak.vimeocdn.comCalls12 captured connections
www.fiordlandoutdoors.co.nz → app.wonderchat.ioCalls3 captured connections
www.fiordlandoutdoors.co.nz → app.wonderchat.ioEmbeds1 captured connections
www.fiordlandoutdoors.co.nz → app.wonderchat.ioLoads from1 captured connections
www.fiordlandoutdoors.co.nz → assets.flodesk.comLoads from7 captured connections
www.fiordlandoutdoors.co.nz → form.flodesk.comCalls7 captured connections
www.fiordlandoutdoors.co.nz → p.typekit.netLoads from1 captured connections
www.fiordlandoutdoors.co.nz → player.vimeo.comEmbeds1 captured connections
www.fiordlandoutdoors.co.nz → use.typekit.netLoads from3 captured connections
www.fiordlandoutdoors.co.nz → usercontent.flodesk.comLoads from4 captured connections
www.fiordlandoutdoors.co.nz → www.google.comCalls1 captured connections
www.fiordlandoutdoors.co.nz → www.googletagmanager.comLoads from2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)	Method	Status	Type	Size	Duration	Signals
18:47:49.126	GET	301	document	0 B	1007 ms	—

18:47:50.141	GET	200	document	244.0 KB	2073 ms	—

18:47:52.336	GET	200	stylesheet	1.9 KB	519 ms	—

18:47:52.338	GET	200	stylesheet	132.1 KB	1843 ms	—

18:47:52.339	GET	200	script	67.3 KB	143 ms	1 alerts

18:47:52.349	GET	200	img	6.1 KB	936 ms	—

18:47:52.352	GET	200	img	6.3 KB	392 ms	—

18:47:52.353	GET	200	img	6.0 KB	970 ms	—

18:47:52.354	GET	200	img	6.9 KB	957 ms	—

18:47:52.355	GET	200	img	5.6 KB	992 ms	—

18:47:52.356	GET	200	img	4.6 KB	955 ms	—

18:47:52.366	GET	200	script	237.8 KB	2157 ms	—

18:47:52.368	GET	200	img	3.5 KB	950 ms	—

18:47:52.369	GET	200	img	1.9 KB	943 ms	—

18:47:52.370	GET	200	img	1.0 KB	1007 ms	—

18:47:52.371	GET	200	img	4.1 KB	954 ms	—

18:47:52.372	GET	200	img	4.1 KB	945 ms	—

18:47:52.373	GET	200	img	2.9 KB	921 ms	—

18:47:52.878	GET	200	stylesheet	5 B	22 ms	—

18:47:54.193	GET	200	script	191.9 KB	52 ms	—

18:47:54.199	GET	200	script	490.8 KB	146 ms	—

18:47:54.264	GET	200	font	17.9 KB	17 ms	—

18:47:54.267	GET	200	img	163.7 KB	1223 ms	—

18:47:54.268	GET	200	img	48.4 KB	1535 ms	—

18:47:54.270	GET	200	img	108.1 KB	1254 ms	—

18:47:54.271	GET	200	img	45.9 KB	1621 ms	—

18:47:54.272	GET	200	img	54.0 KB	1593 ms	—

18:47:54.273	GET	200	img	125.0 KB	1830 ms	—

18:47:54.274	GET	200	img	102.5 KB	1879 ms	—

18:47:54.275	GET	200	img	69.1 KB	984 ms	—

18:47:54.276	GET	200	img	143.4 KB	1857 ms	—

18:47:54.277	GET	200	img	64.2 KB	1558 ms	—

18:47:54.279	GET	200	img	81.2 KB	1572 ms	—

18:47:54.280	GET	200	img	259.3 KB	2076 ms	—

18:47:54.319	GET	200	font	51.8 KB	1839 ms	—

18:47:54.321	GET	200	font	18.2 KB	2 ms	—

18:47:54.323	GET	200	subdocument	20.8 KB	307 ms	—
Transaction #36 Request / response URL GET HTTPS https://player.vimeo.com/video/943079216?&background=1&h=43ea834afa IP / ASN 162.159.128.61 AS13335 · CLOUDFLARENET Transaction actions#36 Investigate Download resource20.8 KB (21296 bytes) Resource unavailableThe captured bytes cannot be retrieved. External sources Requested by https://www.fiordlandoutdoors.co.nz/ Resource information File type HTML document, ASCII text, with very long lines (13648) MIME type text/html; charset=UTF-8 First seen (UTC) 28 Aug 2026 · 18:48:57.840 UTC Last seen (UTC) 28 Aug 2026 · 18:48:57.840 UTC Times seen 1 Size 20.8 KB (21296 bytes) MD5 94e7a6e7e4efafe407ea5a1e72230fb6 SHA1 b2848bc7ea5cb5530bd4afcaaffa831b99a08ccf SHA256 885f0c65c0f34e5076bce8643a7c8915547d7cc90c4f5b0f7c13aa8d2dcd1baf Certificate information Issuer Google Trust Services · WE1 Subject vimeo.com Protocol / cipher TLSv1.3 · TLS_AES_128_GCM_SHA256 SHA1 fingerprint 02:E7:0D:04:46:55:06:0A:EE:48:48:F0:26:63:DB:71:1C:D2:28:E6 Valid from Mon, 06 Jul 2026 12:14:02 GMT Valid until Sun, 04 Oct 2026 13:14:00 GMT Technology fingerprints Amazon S3 (CDN) Cloudflare Bot Management (Security) Amazon Web Services (PaaS) Varnish (Caching) HSTS (Security) Cloudflare (CDN) HTTP headers Request headers GET /video/943079216?&background=1&h=43ea834afa HTTP/1.1 Host: player.vimeo.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br, zstd Sec-Fetch-Storage-Access: none Sec-GPC: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Priority: u=6 Pragma: no-cache Cache-Control: no-cache Response headers HTTP/2 200 date: Fri, 28 Aug 2026 18:47:54 GMT content-type: text/html; charset=UTF-8 cf-ray: a3257cb49da95696-OSL cf-cache-status: DYNAMIC set-cookie: __cf_bm=4lP3XFHB7C8gKbDd2K6xFOE08xz1Je.3lGMByIUtnic-1787942874.3412704-1.0.1.1-ab5_vm6aMFragfs19Rs4Y4maEdF3k31qF53sk2IgCcUQ2r83klAltToL1pvaEXET1LuZOOLdSyCCZjN4s7aqE85TqhjBCfUzScRN0DB85eaXDE0LIR18kM2Abo9f96iL; HttpOnly; SameSite=None; Secure; Path=/; Domain=vimeo.com; Expires=Fri, 28 Aug 2026 19:17:54 GMT cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 expires: Fri, 15 Dec 1985 19:30:00 GMT link: <https://lensflare.vimeo.com>; rel=preconnect; crossorigin, <https://arclight.vimeo.com>; rel=preconnect; crossorigin, <https://i.vimeocdn.com>; rel=preconnect; crossorigin, <https://f.vimeocdn.com>; rel=preconnect; crossorigin server: cloudflare strict-transport-security: max-age=31536000; includeSubDomains; preload vary: Origin, Referer, Accept-Encoding via: 1.1 varnish, 1.1 varnish content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' https://.vimeocdn.com 'unsafe-eval' resource: https://vimeo.com https://imasdk.googleapis.com/ https://adservice.google.com/ https://s0.2mdn.net/instream/video/ https://browser-intake-datadoghq.com https://src.litix.io https://www.gstatic.com https://cdn.kollective.app/ https://wirewax.s3.eu-west-1.amazonaws.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://embedder-sdk.wirewax.com https://embedder-sdk.wirewax.video https://embedder-sdk.wirewax.tv https://.vimeo.work; style-src 'self' 'unsafe-inline' https://.vimeocdn.com https://fonts.googleapis.com https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://edge-player5.wirewax.com https://edge-player5.wirewax.video; connect-src 'self' ws: wss: https://vimeo.com https://api.vimeo.com https://csi.gstatic.com https://.akamaized.net https://.akamaized-staging.net https://.vimeocdn.com https://drm.vhx.com/v2/fairplay/cert https://wv.service.expressplay.com https://fp.service.expressplay.com https://pr.service.expressplay.com https://storage.googleapis.com https://browser-intake-datadoghq.com https://live-api.cloud.vimeo.com https://.litix.io/ https://collector.vhx.tv https://collector.vhxstaging.com https://.kollective.app https://.kollective.app:31015 https://.kollectivecd.com https://.paychex.com https://.hivestreaming.com https://vimeo.magisto.com https://stage.vimeo.magisto.com https://stage-proxy.vimeo.magisto.com https://interactive.create.vimeo.com https://.wirewax.com https://.wirewax.video https://.wirewax.tv https://wirewax.s3.eu-west-1.amazonaws.com https://sqs.us-east-1.amazonaws.com https://sqs.eu-west-1.amazonaws.com https://s3-eu-west-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://player-telemetry.vimeo.com https://lensflare.vimeo.com https://arclight.vimeo.com https://orion.bendingspoons.com https://pico.bendingspoons.com https://.vimeo.work; font-src data: https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://branding.cdn.magisto.com https://d2by6sxflmuwyq.cloudfront.net https://fonts.gstatic.com https://player.vimeo.com; img-src 'self' data: https://player.vimeo.com https://i.vimeocdn.com https://secure-b.vimeocdn.com https://f.vimeocdn.com https://.vimeocdn.com https://vimeo.com https://secure.gravatar.com https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pagead2.googlesyndication.com https://i.vimeocdn.com https://duysrfiajusdh.cloudfront.net https://d263mgllkjh2k2.cloudfront.net https://storage.googleapis.com https://wirewax.s3.eu-west-1.amazonaws.com https://studio-media.wirewax.com https://studio-media.wirewax.video https://edge-assets.wirewax.com https://edge-assets.wirewax.video https://maps.googleapis.com android-webview-video-poster: https://.vimeo.work; object-src 'self' https://.vimeocdn.com https://.akamaized.net https://.akamaized-staging.net; media-src 'self' blob: https://.vimeocdn.com https://.akamaized.net https://.akamaized-staging.net https://.gvt1.com https://live-api.cloud.vimeo.com https://captions.vimeo.com https://captions-eu.vimeo.com; frame-src 'self' https://; worker-src blob:; report-uri /_csp cross-origin-resource-policy: cross-origin x-backend-server: srv001 x-bapp-server: player-backend-68f8b6f656-2dgr5 x-cache: MISS, MISS x-cache-hits: 0, 0 x-content-type-options: nosniff x-host: player-backend-68f8b6f656-2dgr5 x-link-match: 104 x-player-backend: g x-served-by: cache-iad-kcgs7200171-IAD, cache-bma-essb1270057-BMA x-timer: S1787942874.366486,VS0,VE197 x-xss-protection: 1; mode=block content-encoding: gzip alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2
18:47:54.646	GET	200	script	103.5 KB	109 ms	—

18:47:54.647	GET	200	script	211.4 KB	113 ms	—

18:47:54.650	GET	200	script	8.6 KB	101 ms	—

18:47:54.651	GET	200	script	27.7 KB	101 ms	—

18:47:54.653	GET	200	xhr	26.2 KB	190 ms	—

18:47:54.654	GET	200	xhr	31.6 KB	400 ms	—

18:47:54.660	GET	200	fetch	965 B	264 ms	1 alerts

18:47:54.665	GET	302	script	0 B	19 ms	—

18:47:54.688	GET	200	script	21.0 KB	33 ms	—

18:47:54.714	GET	200	script	907.1 KB	63 ms	—

18:47:54.716	GET	200	script	320.0 KB	267 ms	—

18:47:54.718	GET	200	stylesheet	232.7 KB	45 ms	—

18:47:54.741	GET	200	script	538.3 KB	112 ms	—

http://fiordlandoutdoors.co.nz/

Domain graph

Hostnames

Connections

Network requests

Transaction #36

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://fiordlandoutdoors.co.nz/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #36

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

http://fiordlandoutdoors.co.nz/

Domain graph

Network requests