WEBSITE ANALYSIS REPORT

http://365msnpay.fwh.is/

24 Sep 2026 · 00:56:14.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

00:55:47.085 GET 200 document 0 B 0 ms 4 alerts

00:55:47.531 GET 200 document 30.4 KB 76 ms 4 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://365msnpay.fwh.is/?i=1

IP / ASN

185.27.134.146

AS34119 · Wildcard UK Limited

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text, with CRLF line terminators
MIME type: text/html; charset=UTF-8
First seen (UTC): 24 Sep 2026 · 00:56:27.756 UTC
Last seen (UTC): 24 Sep 2026 · 00:56:27.756 UTC
Times seen: 1

Size: 30.4 KB (31176 bytes)
MD5: ba18d655e16ca4d0e342563fd72bd9dc
SHA1: cf4f831be9611c9c892db3af3b3b2edfef9edba6
SHA256: 762f70f2bf82bc496ccb9dde7993cd6d687ace3a17dd74cbd0d21f95756685a2

Certificate information

Issuer: ZeroSSL GmbH · ZeroSSL ECC DV SSL CA 2
Subject: fwh.is
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 38:82:1A:59:DB:C4:80:E6:C7:E5:1E:AC:5A:89:86:00:C6:B6:01:CD
Valid from: Wed, 08 Jul 2026 00:00:00 GMT
Valid until: Tue, 06 Oct 2026 23:59:59 GMT

Technology fingerprints

OpenResty (Web servers)
Nginx (Web servers, Reverse proxies)
Google Hosted Libraries (CDN)
jQuery:3.5.1 (JavaScript libraries)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /?i=1 HTTP/1.1
Host: 365msnpay.fwh.is
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://365msnpay.fwh.is/
Cookie: __test=b84d657c12586e88111d78cf40f8fcb7
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: openresty
Date: Thu, 24 Sep 2026 00:55:46 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 21 Aug 2026 18:56:11 GMT
ETag: W/"79c8-6599330a91f48"
Cache-Control: max-age=2592000, public, proxy-revalidate
Expires: Sat, 24 Oct 2026 00:55:46 GMT
Content-Encoding: br

00:55:47.848 GET 400 stylesheet 0 B 0 ms —

00:55:47.850 GET 200 stylesheet 99.6 KB 26 ms —

00:55:47.852 GET 200 script 87.4 KB 94 ms —

00:55:47.857 GET 200 img 190.8 KB 356 ms —

00:55:47.860 GET 200 img 45.0 KB 241 ms —

00:55:47.984 GET No response img 0 B 0 ms 1 alerts

00:55:48.029 GET 200 xhr 738 B 242 ms —

00:55:48.287 GET 404 img 0 B 0 ms —

http://365msnpay.fwh.is/

Domain graph

Hostnames

Connections