fudgeshop.
Fudgeshop.com.au presents as a Sydney party-equipment rental site but triggered phishing classification.
At a glance
Antivirus · registration · identity- 5 engines classified the URL as malicious and 1 as suspicious; 56 returned harmless, 30 returned undetected, and 0 returned no usable result.
- Operator identity: Claimed Only. A business record was found, but its connection to this domain was not independently verified
- Google Safe Browsing returned no listed threat categories for this address at scan time.
- The isolated page observation recorded 3 requests and did not mark the page as malicious.
- The site presented a valid TLSv1.3 certificate at scan time.
Intelligence
The domain claims to operate a family-run party-machine rental business at Darling Harbour since 1988, listing phone numbers and social links. However, the captured page displayed only an access-restriction notice, preventing verification of the claimed services. Five security engines marked the URL malicious and one suspicious, producing the phishing verdict despite a clean hosting reputation and valid TLS certificate.
Evidence Map
One or more reputation sources recorded a concern
A business record was found, but its connection to this domain was not independently verified
Only partial behavior evidence was available
Registration history was incomplete
- 1Five antivirus engines flagged the URL as malicious.
- 2Page rendered only a generic access-denial message, blocking content inspection.
- 3No domain email or postal address listed on the page.
- 1Valid TLSv1.3 certificate presented at scan time.
- 2Hosting IP carried zero abuse reports.
- 3Two phone numbers and six social links listed.
Claimed Business and Visitor Journey
The page title and description present fudgeshop.com.au as a long-established Sydney party-equipment rental service offering coffee carts, fairy-floss machines, hot-dog units, popcorn machines, and slushie equipment. Contact fields show two phone numbers and links to six social profiles, yet no domain email or postal address appears.
Observed Page Content
Despite the service claims, the captured page rendered only a generic access-denial message. No product listings, booking forms, testimonials, or navigation menus were visible, making it impossible to confirm the advertised offerings.
Security Engine Findings
Five antivirus engines classified the URL malicious and one additional engine flagged it suspicious. The hosting IP carried an abuse-confidence score of zero, and the site presented a valid TLSv1.3 certificate.
Technical Path and Connections
The redirect path contained a single hop with no cross-domain, homoglyph, or internationalized-domain indicators. External resources were limited to standard CDNs.
Website Preview
The page is fully rendered but provides no content other than a generic access denial message, making it impossible to evaluate for malicious intent.
- 1Page displays an access restriction message
Web Research
Threat Detection
Antivirus results, browser warnings, isolated page observations, and the threat pattern identified in this report.
Antivirus engine results
Evidence behind this threat profile
- 1Five antivirus engines flagged the URL as malicious.
- 2Page rendered only a generic access-denial message, blocking content inspection.
- 3No domain email or postal address listed on the page.
1 of 21 categories showed signals
This profile separates the site's primary threat from other patterns supported by the saved page evidence, public research, and security findings.
- Five antivirus engines flagged the URL as malicious.
- Page rendered only a generic access-denial message, blocking content inspection.
- No domain email or postal address listed on the page.
- AI analyst tagged this as phishing / data-harvesting.
Technical Details
Identity, domain, infrastructure, and connection facts saved with this scan.
July 20, 2026 at 3:05 AM UTCIdentity
6 facts- Operator
- Claimed Only
- On-domain email
- Not observed
- Other email
- Not observed
- Phone
- 2 numbers
- Postal address
- Not observed
- Social profiles
- 3 links
Domain
8 facts- Domain age
- Unavailable
- Registered
- Unavailable
- Registrar
- Tucows (Australia) Pty Ltd trading as OpenSRS
- Expires
- Unavailable
- WHOIS updated
- Nov 9, 2025
- Registrant
- Unavailable
- Registration country
- Unavailable
- WHOIS privacy
- Not observed
Infrastructure
14 facts- HTTPS
- Valid certificate
- TLS protocol
- TLSv1.3
- Certificate issuer
- Google Trust Services · WE1
- Certificate subject
- fudgeshop.com.au
- Certificate valid from
- Jun 20, 2026
- Certificate valid to
- Sep 18, 2026
- Network address
- 104.21.42.183
- ASN
- AS13335
- Hosting organization
- CLOUDFLARENET - Cloudflare, Inc., US
- Country
- US
- Server
- cloudflare
- Site platform
- Elementor 4.1.4; features: additional_cu
- IP reputation
- 0% confidence · 0 reports
- Tor exit node
- No
Connections
13 facts- Scan scope
- Domain
- Destination host
- fudgeshop.com.au
- Redirects
- 1
- Cross-domain redirect
- No
- Redirect status codes
- 301 → 403
- Lookalike characters
- Not observed
- Internationalized domain
- No
- Page response
- 200
- Observation coverage
- Complete
- Extracted links
- 3
- Unique IPs contacted
- 0
- Countries contacted
- 2
- Referenced domains
- 9
What to do
Do not enter personal or payment information. Verify the business directly via known contact channels before proceeding.
If you entered a password, change it on the official service by typing its known address yourself, enable two-factor authentication, and review recent account activity. Contact your bank if you also entered payment details.
Final Verdict
Why this verdict
The site is classified suspicious under the phishing category. Five antivirus engines flagged the URL as malicious, one as suspicious, while the rendered page showed only a generic access-denial message with no functional content.
Do not enter personal or payment information. Verify the business directly via known contact channels before proceeding.
Key evidence
- 1Five antivirus engines flagged the URL as malicious.
- 2Page rendered only a generic access-denial message, blocking content inspection.
- 3No domain email or postal address listed on the page.
Safety FAQ
Is fudgeshop.com.au safe to use?+
The site is classified suspicious under the phishing category. Five antivirus engines flagged the URL as malicious, one as suspicious, while the rendered page showed only a generic access-denial message with no functional content.
What should I do about fudgeshop.com.au?+
Do not enter personal or payment information. Verify the business directly via known contact channels before proceeding.
How old is fudgeshop.com.au?+
A reliable public registration date was not available for fudgeshop.com.au.
What if I already interacted with fudgeshop.com.au?+
If you entered a password, change it on the official service by typing its known address yourself, enable two-factor authentication, and review recent account activity. Contact your bank if you also entered payment details.
When was this report updated?+
This report reflects the scan completed July 20, 2026 at 3:05 AM UTC.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.