WEBSITE ANALYSIS REPORT

http://sp28ct-rumel-biz-zavel-qonak.pages.dev/

01 Sep 2026 · 15:32:02.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

15:31:34.564 GET 403 document 4.4 KB 51 ms 3 alerts

15:31:34.749 GET 403 document 4.4 KB 3190 ms 3 alerts

15:31:38.230 GET 200 stylesheet 23.5 KB 25 ms 3 alerts

15:31:38.233 GET 302 script 0 B 27 ms —

15:31:38.277 GET 200 img 452 B 59 ms 3 alerts

15:31:38.342 GET 301 img 0 B 33 ms 3 alerts

Transaction #02

Request / response

URL

GET HTTP

http://sp28ct-rumel-biz-zavel-qonak.pages.dev/favicon.ico

IP / ASN

172.66.47.104

AS13335 · CLOUDFLARENET

Requested by: http://sp28ct-rumel-biz-zavel-qonak.pages.dev/

Resource information

File type: Not recorded
MIME type: image/x-icon
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 02:29:54.290 UTC
Times seen: 19321257

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: sp28ct-rumel-biz-zavel-qonak.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate
Referer: http://sp28ct-rumel-biz-zavel-qonak.pages.dev/
Sec-GPC: 1
Connection: keep-alive
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 301 Moved Permanently
Date: Tue, 01 Sep 2026 15:31:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://sp28ct-rumel-biz-zavel-qonak.pages.dev/favicon.ico
Report-To: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tWVlPbO6aX2OIpOs2JTegIt%2FQCdUwRNyPLNTiM4JmNyBi3dcqCxgRnU2ifgYDboZASlPhVUyZQui0zB904rQP%2BmNKfhVJqSR6yRHcyCxFWwjCFV5jLs2RDpuR82ARohKzc4A91I54YAz07iHSzBseEOmfk%2BwAAJZKg%3D%3D"}]}
Nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Server: cloudflare
CF-RAY: a34552b4a9a756a8-OSL
alt-svc: h2=":443"; ma=60

15:31:38.374 GET 200 script 82.3 KB 17 ms —

15:31:38.379 GET 200 img 4.2 KB 6690 ms 3 alerts

http://sp28ct-rumel-biz-zavel-qonak.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://sp28ct-rumel-biz-zavel-qonak.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://sp28ct-rumel-biz-zavel-qonak.pages.dev/

Domain graph

Network requests