urlquery.net
WEBSITE ANALYSIS REPORT

http://velxori-mpt-fazqano-h3d6ka91.pages.dev/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET403document4.9 KB54 ms3 alerts
GET403document4.9 KB21 ms3 alerts
GET200stylesheet23.5 KB220 ms3 alerts
GET200img452 B11 ms3 alerts
GET301img0 B10 ms3 alerts
GET200img4.2 KB475 ms3 alerts

Transaction #03

Request / response

URL

GET HTTPS
https://velxori-mpt-fazqano-h3d6ka91.pages.dev/favicon.ico

IP / ASN

Country unknown 172.66.44.126

AS13335 · CLOUDFLARENET

Requested by
http://velxori-mpt-fazqano-h3d6ka91.pages.dev/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
OpenDNS Phishing BlockmediumPhishing
Cloudflare DNS SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: velxori-mpt-fazqano-h3d6ka91.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sun, 18 Oct 2026 00:01:29 GMT
content-type: image/x-icon
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=RDRzixPI0Rhrd3C4KA3hDPZxEednmY5cIBM%2BqmPwtw03bFsLgoQ%2BD1E%2B5oRFcc3hxIMq90VeGa7C6WrTCGgSHiFuC9ydmjzBYHDilevuguV%2FkgBB7kNz8p5ikKzqPlCOOjDWy4wAcBOU7EN2Iy8%2BwKd9D11%2Bj1cZpA%3D%3D"}]}
etag: W/"f9f7b21d70f1f7ca06b1df25a84512b4"
content-encoding: br
server: cloudflare
cf-ray: a4c344d0ea22c759-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET200script84.7 KB15 ms—
GET200subdocument279.3 KB25 ms—
POST200xhr805.1 KB36 ms—
GETNo responsefetch0 B0 ms—
GET200img821 B6 ms—
POST200xhr119.8 KB47 ms—
POST200xhr11.3 KB64 ms—
GET200subdocument264.0 KB16 ms—
POST200xhr786.2 KB30 ms—
GETNo responsefetch0 B0 ms—
GET200img971 B5 ms—
POST200xhr119.8 KB62 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot