whizcraft.co.uk - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned whizcraft.co.uk and returned a unknown verdict (score -2), categorised as credential-harvest. The page resolved to 161.97.85.141 on Contabo GmbH in DE. 5 domains and 1 IP were contacted, over 22 HTTP requests. 1 malware sample communicates with this URL. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -2) · Confidence 8%
- Scanned URL:
https://whizcraft.co.uk/ - Domain: whizcraft.co.uk · IP: 161.97.85.141 · AS51167 · DE
- Server: Apache
- Page title: Whizcraft Ltd | Home Handmade, Crafts, Artisanal, Unique Products, Custom, Handcrafted
- HTTP status: 200 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Sep 13 10: · subject CN=whizcraft.co.uk
- HTTP requests captured: 22
- Scan tier: fast · observed 2026-08-19 16:00:25 UTC
Malware communicating with this URL (1)
These samples were observed contacting or being served from whizcraft.co.uk. Each links to its full analysis.
- 6a0c4d60698fb2a975e162927eae77c0ab523dad39b21821313488413f0e6554 - referenced ·
6a0c4d60698fb2a975e162927eae77c0· first seen 2026-08-19
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- Credential-harvesting form
Detected technologies
- Apache
- jQuery
- Bootstrap
Contacted infrastructure
- 161.97.85.141 - AS51167 Contabo GmbH (Germany)
Observed indicators
- whizcraft.co.uk
- cdnjs.cloudflare.com
- facebook.com
- instagram.com
- cdn.jsdelivr.net
- 161.97.85.141
- https://whizcraft.co.uk/
- https://whizcraft.co.uk/assets/user/images/favicon.png
- https://whizcraft.co.uk/assets/user/images/favicon.jpg
- https://whizcraft.co.uk/assets/admin/vendors/general/bootstrap-markdown/css/bootstrap-markdown.min.css
- https://whizcraft.co.uk/assets/admin/vendors/general/animate.css/animate.css
- https://whizcraft.co.uk/assets/admin/vendors/general/toastr/build/toastr.css
- https://whizcraft.co.uk/assets/user/css/vendor/bootstrap.min.css
- https://whizcraft.co.uk/assets/user/css/vendor/fontawesome.min.css
- https://whizcraft.co.uk/assets/user/css/vendor/themify-icons.css
- https://whizcraft.co.uk/assets/user/css/vendor/customFonts.css
- https://whizcraft.co.uk/assets/user/css/plugins/select2.min.css
- https://whizcraft.co.uk/assets/user/css/plugins/slick.css
- https://whizcraft.co.uk/assets/user/css/fancybox.min.css
- https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.13/css/intlTelInput.css
Questions about whizcraft.co.uk
- Is whizcraft.co.uk safe?
- The scan of whizcraft.co.uk on 19 Aug 2026 reached no verdict either way (score -2). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with whizcraft.co.uk?
- 1 analysed samples communicate with this URL.
- How was whizcraft.co.uk checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of whizcraft.co.uk
Scanned on MalwareAnalyzer by Cyble · Open interactive scan