urlquery.net
WEBSITE ANALYSIS REPORT

http://norqumi-gld-zentavi-a2x5fq96.pages.dev

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document715 B216 ms3 alerts
GET200script0 B0 ms3 alerts
GET200stylesheet0 B0 ms3 alerts

Transaction #16

Request / response

URL

GET HTTPS
https://norqumi-gld-zentavi-a2x5fq96.pages.dev/static/css/main.1ab92d2f.css

IP / ASN

Country unknown 172.66.44.231

AS13335 · CLOUDFLARENET

Requested by
https://norqumi-gld-zentavi-a2x5fq96.pages.dev/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Cloudflare DNS SinkholedmediumMalicious
Quad9 DNS SinkholedmediumMalicious
CIRA Canadian Shield DNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /static/css/main.1ab92d2f.css HTTP/1.1
Host: norqumi-gld-zentavi-a2x5fq96.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://norqumi-gld-zentavi-a2x5fq96.pages.dev/
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Sun, 12 Jul 2026 17:19:53 GMT
content-type: text/css; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
priority: u=2,i=?0
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=AQWkPGvn6FLmAwLQ0KneNcMHlcD9vxvt4QwHWkZTHI%2F3YzgRDYVJK0Se3%2Fap9LYkrRzrP5eQXnZtHtULyb1AolbUaetwdzdxFCOnLCBoqxFb6PO7FNIN832deRuCUfs4lq6fsEUJZd1qKvpPqQ0SCP6%2BSgCGTorLdg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"51a04497d27630860ed0c0293bf277b7"
content-encoding: br
server: cloudflare
cf-ray: a1a1b727098c56a2-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET200document368.5 KB703 ms—
GET200stylesheet1.30 MB80 ms—
POST200beacon94 B163 ms—
GET200img4.9 KB16 ms—
GET200script310.6 KB16 ms—
GET200script1.21 MB27 ms—
GET200script387.9 KB27 ms—
GET200script882.9 KB32 ms—
GET200script170.1 KB33 ms—
GET200script338.1 KB32 ms—
GET200script34.0 KB30 ms—
GET200img19.9 KB13 ms—
GET200script494.6 KB30 ms—
GET200script243.0 KB29 ms—
GET200script212.1 KB29 ms—
GET200script299.3 KB29 ms—
GET200stylesheet165.2 KB15 ms—
GET200script26.1 KB14 ms—
GET200script45.0 KB14 ms—
GET200script31.6 KB13 ms—
GET200script394.9 KB15 ms—
GET200script801 B15 ms—
GET200script288.2 KB14 ms—
POST200xhr94 B138 ms—
GET200xhr22 B156 ms—
GET200img177.2 KB50 ms—
GET200img25.8 KB26 ms—
GET200img25.1 KB26 ms—
GET200img39.5 KB27 ms—
GET200img19.7 KB24 ms—
GET200font29.2 KB15 ms—
GET200font178.9 KB17 ms—
POST200xhr94 B139 ms—
POST200xhr94 B144 ms—
POST200xhr94 B143 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot