WEBSITE ANALYSIS REPORT

https://sp28ct-jorem-biz-zumel-qitek.pages.dev/

23 Oct 2026 · 07:22:51.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:22:12.412 GET 403 document 4.9 KB 66 ms 2 alerts

Transaction #12

Request / response

URL

GET HTTPS

https://sp28ct-jorem-biz-zumel-qitek.pages.dev/

IP / ASN

172.66.44.143

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text, with very long lines (396)
MIME type: text/html; charset=utf-8
First seen (UTC): 23 Oct 2026 · 07:23:18.675 UTC
Last seen (UTC): 23 Oct 2026 · 07:23:18.675 UTC
Times seen: 1

Size: 4.9 KB (5051 bytes)
MD5: 228a04834f6bed87e13803eae3d41b9b
SHA1: ae4e57fe73bbc6d3c00f7b580145bd912a0cfcfe
SHA256: 6db87dd9b46920241b0a2e670cd1609349d61c020e30fdaa71e6aa984f4e93ca

Certificate information

Issuer: Google Trust Services · WE1
Subject: sp28ct-jorem-biz-zumel-qitek.pages.dev
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 47:D0:1C:7E:D6:5D:CD:AC:E6:E5:68:BD:FC:DA:2D:E3:25:09:F8:C6
Valid from: Thu, 22 Oct 2026 06:41:00 GMT
Valid until: Wed, 20 Jan 2027 07:40:44 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: sp28ct-jorem-biz-zumel-qitek.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 403 
content-type: text/html; charset=utf-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
referrer-policy: same-origin
date: Fri, 23 Oct 2026 07:22:12 GMT
x-frame-options: SAMEORIGIN
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UZwp0608ym5HXTuwP9sSM%2F5QZx8ASQR83v8n5AcQXS0ZCztUt2YW%2B4QpTHQtaStjd1JAEoEkdnh5D3Zk%2BqozWrOPXhaDOYt3vn%2BP%2B4xhzdXmC1kkTEaLY47rXmO5PNMvrsV5zVEAu%2FZ4MYGR1BwmFHVF7nmePMdsrg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
server: cloudflare
cf-ray: a4eefd43ccc156b7-OSL

07:22:12.873 GET 200 stylesheet 23.5 KB 23 ms 2 alerts

07:22:12.876 GET 302 script 0 B 20 ms —

07:22:12.925 GET 200 img 4.2 KB 115 ms 2 alerts

07:22:12.933 GET 200 img 452 B 24 ms 2 alerts

07:22:12.963 GET 200 script 84.7 KB 11 ms —

07:22:13.030 GET 200 subdocument 261.5 KB 33 ms —

07:22:13.434 POST 200 xhr 805.1 KB 237 ms —

07:22:14.506 GET 200 img 839 B 7 ms —

07:22:15.717 POST 200 xhr 119.8 KB 45 ms —

07:22:19.108 POST 200 xhr 12.5 KB 24 ms —

07:22:29.148 GET 200 subdocument 279.2 KB 20 ms —

07:22:29.513 POST 200 xhr 786.2 KB 296 ms —

07:22:30.272 GET No response fetch 0 B 0 ms —

07:22:30.445 GET 200 img 584 B 8 ms —

07:22:31.389 POST 200 xhr 119.8 KB 43 ms —

https://sp28ct-jorem-biz-zumel-qitek.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://sp28ct-jorem-biz-zumel-qitek.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://sp28ct-jorem-biz-zumel-qitek.pages.dev/

Domain graph

Network requests