WEBSITE ANALYSIS REPORT

http://agiaiwn.shop/

20 Oct 2026 · 14:09:53.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:09:21.152 GET 200 document 0 B 0 ms 5 alerts

14:09:21.816 GET 200 document 6.8 KB 62 ms 5 alerts

14:09:21.994 GET 200 img 2.9 KB 55 ms 5 alerts

Transaction #03

Request / response

URL

GET HTTPS

https://agiaiwn.shop/img-sys/IP_changed.png

IP / ASN

91.92.35.94

Unknown

Requested by: https://agiaiwn.shop/cgi-sys/defaultwebpage.cgi

Resource information

File type: PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
MIME type: image/png
First seen (UTC): 13 Apr 2023 · 09:27:24.000 UTC
Last seen (UTC): 20 Oct 2026 · 14:36:12.076 UTC
Times seen: 32041

Size: 2.9 KB (2939 bytes)
MD5: ec081653bd4c836483e6d612588d18ec
SHA1: 91c7e4cfa061808881575a875741773a949a9e0a
SHA256: b19da51b5e9c9b29cd8523d85d92e99e4812c891c394929c9bf67557f560672c

Certificate information

Issuer: Let's Encrypt · YE1
Subject: agiaiwn.shop
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: B4:97:8F:D4:33:CE:F7:1A:69:90:AC:17:3B:6F:78:06:D4:1E:DC:AA
Valid from: Thu, 15 Oct 2026 00:44:09 GMT
Valid until: Wed, 13 Jan 2027 00:44:08 GMT

Technology fingerprints

Litespeed Cache (Caching, WordPress plugins)
LiteSpeed (Web servers)
LiteSpeed Cache (Caching, WordPress plugins)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /img-sys/IP_changed.png HTTP/1.1
Host: agiaiwn.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://agiaiwn.shop/cgi-sys/defaultwebpage.cgi
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=4, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
cache-control: no-transform, public, max-age=604800
expires: Tue, 27 Oct 2026 14:09:22 GMT
content-type: image/png
last-modified: Tue, 11 Feb 2025 05:07:52 GMT
accept-ranges: bytes
content-length: 2939
date: Tue, 20 Oct 2026 14:09:22 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

14:09:21.997 GET 200 img 3.1 KB 53 ms 5 alerts

14:09:21.999 GET 200 img 3.2 KB 78 ms 5 alerts

14:09:22.001 GET 200 img 5.5 KB 76 ms 5 alerts

14:09:22.003 GET 200 img 7.9 KB 76 ms 5 alerts

14:09:22.111 GET 404 img 10.1 KB 55 ms 5 alerts

http://agiaiwn.shop/

Domain graph

Hostnames

Connections