urlquery.net
Investigate/Report/71dab6fb-9a7c-4533-b784-e643ad7b8438
WEBSITE ANALYSIS REPORT

http://alebilet.728153t152.click/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET520document7.2 KB148 ms3 alerts
GET520document7.2 KB3286 ms3 alerts
GET200stylesheet7.8 KB32 ms3 alerts
GET200img484 B32 ms3 alerts

Transaction #06

Request / response

URL

GET HTTP
http://alebilet.728153t152.click/cdn-cgi/images/cf-icon-browser.png

IP / ASN

Country unknown 104.21.93.209

AS13335 · CLOUDFLARENET

Requested by
http://alebilet.728153t152.click/

Resource information

File type
PNG image data, 100 x 80, 8-bit colormap, non-interlaced
MIME type
image/png
First seen (UTC)
16 Apr 2023 · 05:42:45.000 UTC
Last seen (UTC)
24 Oct 2026 · 10:17:14.381 UTC
Times seen
60560
Size
484 B (484 bytes)
MD5
59caf3c7eb63af78f12db37f41433779
SHA1
8024e688e78e910ae1ea3bc25be7a7ab65444b02
SHA256
78a7d8b29cabf16831417dba1b9bbe36fae0d060a35a495e8f10e9663b3c9e65

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

  • Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Quad9 DNS SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /cdn-cgi/images/cf-icon-browser.png HTTP/1.1
Host: alebilet.728153t152.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate
Sec-GPC: 1
Connection: keep-alive
Referer: http://alebilet.728153t152.click/cdn-cgi/styles/main.css
Priority: u=4, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Date: Wed, 09 Sep 2026 18:53:07 GMT
Content-Type: image/png
Content-Length: 484
Connection: keep-alive
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=cUhfbePFV%2F4zG59Ob4risAswyTaXnY4MfTXChHpNuxGuPSbXjRVhuL7rTNIEFsbHcYgYyaohu9W5zXNve%2FpI8CJpNL5JiNkZfsWDqhwIAvgOd8XC2dkwIjLfUEyBo0HEsr3K44pYblMoklxm"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: a38864d718945696-OSL
GET200img946 B3122 ms3 alerts
GET200img1.4 KB3121 ms3 alerts
GET200img1.4 KB3130 ms3 alerts
GET200img854 B40 ms3 alerts
GET520img7.2 KB108 ms3 alerts
9 visible / 9 matching / 9 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot