WEBSITE ANALYSIS REPORT

https://vernier-09.pages.dev/

10 Oct 2026 · 13:04:55.000 UTCpublic

Report tags: scam urlquery_fir deceptive_site fake_prize
Submit tags: openphish

Request review

Suspicious activity

5 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:04:26.378 GET 403 document 4.4 KB 40 ms 4 alerts

13:04:26.868 GET 200 stylesheet 23.5 KB 5 ms 4 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://vernier-09.pages.dev/cdn-cgi/styles/cf.errors.css

IP / ASN

172.66.47.56

AS13335 · CLOUDFLARENET

Requested by: https://vernier-09.pages.dev/

Resource information

File type: ASCII text, with very long lines (24050)
MIME type: text/css
First seen (UTC): Not recorded
Last seen (UTC): 19 Oct 2026 · 22:37:38.052 UTC
Times seen: 654219

Size: 23.5 KB (24051 bytes)
MD5: 5e8c69a459a691b5d1b9be442332c87d
SHA1: f24dd1ad7c9080575d92a9a9a2c42620725ef836
SHA256: 84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091

Certificate information

Issuer: Let's Encrypt · YE1
Subject: vernier-09.pages.dev
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 9B:3A:F1:C7:A3:77:09:CD:3A:48:F3:09:90:FF:7B:19:93:CF:E4:65
Valid from: Fri, 09 Oct 2026 07:08:57 GMT
Valid until: Thu, 07 Jan 2027 07:08:56 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing

HTTP headers

Request headers

GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: vernier-09.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://vernier-09.pages.dev/
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sat, 10 Oct 2026 13:04:26 GMT
content-type: text/css
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=X2v4piXqysxiI38KGOcUwXSV8fR5q8jSi%2BTQte5jByBTVAhIYnmcqamDlLt1Qvkc1CKy455FRdJNsWPvlI7g6NGpXNfTbjD0sOTdx3fHc4fkoHD55z%2Fbf2aFKoB6SWygdAlAYMZf5A%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
server: cloudflare
cf-ray: a485d4b7eabc5ebd-OSL
X-Firefox-Spdy: h2

13:04:26.871 GET 302 script 0 B 26 ms —

13:04:26.904 GET 200 img 452 B 29 ms 4 alerts

13:04:26.940 GET 200 img 9.5 KB 222 ms 5 alerts

13:04:26.969 GET 200 script 84.7 KB 17 ms —

https://vernier-09.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://vernier-09.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://vernier-09.pages.dev/

Domain graph

Network requests