urlquery.net
Investigate/Report/dfd6cf4d-4f31-4921-9e6f-4fd70d969bca
WEBSITE ANALYSIS REPORT

http://mpl.pages.dev/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET403document4.4 KB31 ms2 alerts
GET200stylesheet23.5 KB6 ms2 alerts

Transaction #02

Request / response

URL

GET HTTPS
https://mpl.pages.dev/cdn-cgi/styles/cf.errors.css

IP / ASN

Country unknown 172.66.44.71

AS13335 · CLOUDFLARENET

Requested by
https://mpl.pages.dev/

Resource information

File type
ASCII text, with very long lines (24050)
MIME type
text/css
First seen (UTC)
Not recorded
Last seen (UTC)
20 Oct 2026 · 17:42:42.242 UTC
Times seen
655432
Size
23.5 KB (24051 bytes)
MD5
5e8c69a459a691b5d1b9be442332c87d
SHA1
f24dd1ad7c9080575d92a9a9a2c42620725ef836
SHA256
84e3c77025ace5af143972b4a40fc834dcdfd4e449d4b36a57e62326f16b3091

Certificate information

Issuer
Google Trust Services · WE1
Subject
mpl.pages.dev
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
FD:EA:BD:8A:0B:E3:2F:A0:76:E0:EB:A6:3C:A0:C2:61:B3:8C:17:A4
Valid from
Sun, 14 Jun 2026 02:48:18 GMT
Valid until
Sat, 12 Sep 2026 03:45:56 GMT

Technology fingerprints

  • Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Cloudflare DNS SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /cdn-cgi/styles/cf.errors.css HTTP/1.1
Host: mpl.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://mpl.pages.dev/
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Thu, 25 Jun 2026 01:52:34 GMT
content-type: text/css
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=t4s5a9RTjw76a4zoNI0Tj3ACtGuHLzm3rLzkMvteG4DQqepqarZG5Mk2cHZsk9ZyvOwqqaFJdqXJc08RPLmmoEmOgLefXaCujpNnlLuV5faYEI7zA7QdrT6J4wlzBPl3"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
server: cloudflare
cf-ray: a11055672883783d-OSL
GET302script0 B23 ms—
GET200img452 B3 ms2 alerts
GET200img1.8 KB94 ms2 alerts
GET200script65.5 KB13 ms—
6 visible / 6 matching / 6 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot