WEBSITE ANALYSIS REPORT

http://agiaiwn.shop/

20 Oct 2026 · 14:09:53.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:09:21.152 GET 200 document 0 B 0 ms 5 alerts

14:09:21.816 GET 200 document 6.8 KB 62 ms 5 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://agiaiwn.shop/cgi-sys/defaultwebpage.cgi

IP / ASN

91.92.35.94

Unknown

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text
MIME type: text/html
First seen (UTC): 20 Oct 2026 · 14:09:57.299 UTC
Last seen (UTC): 20 Oct 2026 · 14:09:57.299 UTC
Times seen: 1

Size: 6.8 KB (6942 bytes)
MD5: 5ac5c8f751f9f9828d7746114211984f
SHA1: 38d72ee30ef164deeff0a9aeb3c97937c1145816
SHA256: 7141c6bb8a1eae83a4a13a6f8f46d75bfd193d455baee2db4d93b73129f1335d

Certificate information

Issuer: Let's Encrypt · YE1
Subject: agiaiwn.shop
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: B4:97:8F:D4:33:CE:F7:1A:69:90:AC:17:3B:6F:78:06:D4:1E:DC:AA
Valid from: Thu, 15 Oct 2026 00:44:09 GMT
Valid until: Wed, 13 Jan 2027 00:44:08 GMT

Technology fingerprints

LiteSpeed (Web servers)
LiteSpeed Cache (Caching, WordPress plugins)
HSTS (Security)
Litespeed Cache (Caching, WordPress plugins)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cgi-sys/defaultwebpage.cgi HTTP/1.1
Host: agiaiwn.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://agiaiwn.shop/
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
cache-control: no-transform
content-type: text/html
content-encoding: br
date: Tue, 20 Oct 2026 14:09:21 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
vary: Accept-Encoding
X-Firefox-Spdy: h2

14:09:21.994 GET 200 img 2.9 KB 55 ms 5 alerts

14:09:21.997 GET 200 img 3.1 KB 53 ms 5 alerts

14:09:21.999 GET 200 img 3.2 KB 78 ms 5 alerts

14:09:22.001 GET 200 img 5.5 KB 76 ms 5 alerts

14:09:22.003 GET 200 img 7.9 KB 76 ms 5 alerts

14:09:22.111 GET 404 img 10.1 KB 55 ms 5 alerts

http://agiaiwn.shop/

Domain graph

Hostnames

Connections