WEBSITE ANALYSIS REPORT

http://kondor.redo.link

03 Oct 2026 · 21:43:58.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:43:11.028 GET 301 document 0 B 51 ms —

21:43:11.090 GET 301 document 0 B 430 ms —

21:43:11.525 GET 200 document 346.7 KB 136 ms 1 alerts

Transaction #134

Request / response

URL

GET HTTPS

https://redo.com/

IP / ASN

172.66.170.21

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text, with very long lines (8810)
MIME type: text/html; charset=utf-8
First seen (UTC): 03 Oct 2026 · 18:34:22.173 UTC
Last seen (UTC): 03 Oct 2026 · 21:44:23.580 UTC
Times seen: 2

Size: 346.7 KB (355047 bytes)
MD5: 40ba426e87a019a88198801d36b8b181
SHA1: 3eb86094c7abbab104a0906dcd954fcaecfedb50
SHA256: 8f05585f7a9c4138f2084cbe65f8ac500e1dbfc3ce51ca3d7cb9441e36ca9f7d

Certificate information

Issuer: Google Trust Services · WE1
Subject: redo.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: D9:CB:3A:C4:BD:22:27:4B:71:5B:F6:64:62:BE:C7:42:91:23:24:0B
Valid from: Wed, 30 Sep 2026 17:06:27 GMT
Valid until: Tue, 29 Dec 2026 18:06:21 GMT

Technology fingerprints

Cloudflare (CDN)
jQuery:3.5.1 (JavaScript libraries)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: redo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sat, 03 Oct 2026 21:43:11 GMT
content-type: text/html; charset=utf-8
cf-ray: a44f1ef93ebf0b61-OSL
cf-cache-status: DYNAMIC
age: 278539
last-modified: Thu, 01 Oct 2026 14:51:02 GMT
link: <https://cdn.prod.website-files.com>; rel=preconnect; crossorigin, <https://cdn.prod.website-files.com/6980daf3c097d8adb570d9bb/css/redo-5-0.shared.11e4da9b4.min.css>; rel=preload; as=style; crossorigin; integrity="sha384-EeTam0SzGFq8pjnm2dSTWW3S6mVAyE2FmgEauWYrV4Pa0tAEmhPArbQnNehmn39k"
server: cloudflare
set-cookie: _cfuvid=QScv3r0peycRgC.WL6ep44JZajgLjvh7X3XnX2LX6gM-1791063791.6107533-1.0.1.1-Z0a28N3Qaw8ICoMEy8aJJsIXzdkZ7bHDfUBVsHwSje8; HttpOnly; SameSite=None; Secure; Path=/; Domain=redo.com
strict-transport-security: max-age=31536000
vary: accept-encoding
o2o-cache-status: HIT
surrogate-control: max-age=432000
surrogate-key: redo.com 6980daf3c097d8adb570d9bb pageId:6980daf6c097d8adb570d9e5 69861bd1ec9f1e828b3ac02b 69a72472e9aed82938280a2e 698668cfd91a51ec39d3f7cd
x-lambda-id: 56a2beaf-6ad4-4c03-8dfe-b1ac7973abd2
x-wf-region: us-east-1
content-encoding: br
X-Firefox-Spdy: h2

21:43:12.190 GET 200 stylesheet 206.7 KB 33 ms —

21:43:12.193 GET 200 font 26.6 KB 13 ms —

21:43:12.196 GET 200 script 87.4 KB 35 ms —

21:43:12.199 GET 200 script 4.6 KB 17 ms —

21:43:12.209 GET 200 img 2.5 KB 12 ms —

21:43:12.297 GET 200 script 539.3 KB 140 ms —

21:43:12.383 GET 200 font 341.2 KB 21 ms —

21:43:12.421 GET 200 script 654.2 KB 68 ms —

21:43:12.471 GET 200 lazy-img 779 B 12 ms —

21:43:12.494 GET 200 lazy-img 3.1 KB 16 ms —

21:43:12.500 GET 200 lazy-img 2.6 KB 15 ms —

21:43:12.502 GET 200 lazy-img 2.7 KB 14 ms —

21:43:12.504 GET 200 lazy-img 1.5 KB 14 ms —

21:43:12.507 GET 200 lazy-img 2.5 KB 15 ms —

21:43:12.523 GET 200 lazy-img 3.7 KB 12 ms —

21:43:12.525 GET 200 lazy-img 1.3 KB 11 ms —

21:43:12.529 GET 200 lazy-img 2.5 KB 17 ms —

21:43:12.531 GET 200 lazy-img 3.2 KB 13 ms —

21:43:12.533 GET 200 lazy-img 2.2 KB 13 ms —

21:43:12.535 GET 200 lazy-img 2.9 KB 16 ms —

21:43:12.537 GET 200 lazy-img 1.1 KB 14 ms —

21:43:12.539 GET 200 lazy-img 5.2 KB 18 ms —

21:43:12.541 GET 200 lazy-img 1.4 KB 13 ms —

21:43:12.554 GET 200 lazy-img 2.7 KB 15 ms —

21:43:12.556 GET 200 lazy-img 3.5 KB 13 ms —

21:43:12.559 GET 200 lazy-img 5.4 KB 16 ms —

21:43:12.564 GET 200 lazy-img 2.8 KB 15 ms —

21:43:12.567 GET 200 lazy-img 4.3 KB 14 ms —

21:43:12.569 GET 200 lazy-img 1.8 KB 15 ms —

21:43:12.570 GET 200 lazy-img 2.7 KB 15 ms —

21:43:12.573 GET 200 lazy-img 4.6 KB 14 ms —

21:43:12.575 GET 200 lazy-img 3.3 KB 13 ms —

21:43:12.576 GET 200 lazy-img 5.6 KB 16 ms —

21:43:12.625 GET 200 script 23.4 KB 16 ms —

21:43:12.626 GET 200 script 1.3 KB 17 ms —

21:43:12.629 GET 200 script 1.2 KB 14 ms —

21:43:12.631 GET 200 script 2.6 KB 13 ms —

21:43:12.635 GET 200 script 1007 B 17 ms —

21:43:12.636 GET 200 script 2.4 KB 15 ms —

21:43:12.638 GET 200 script 1.5 KB 18 ms —

21:43:12.640 GET 200 script 2.3 KB 16 ms —

21:43:12.642 GET 200 script 1.1 KB 15 ms —

21:43:12.644 GET 200 script 40.5 KB 17 ms —

21:43:12.646 GET 200 script 75.6 KB 18 ms —

21:43:12.648 GET 200 script 1.1 KB 14 ms —

21:43:12.650 GET 200 script 9.3 KB 17 ms —

21:43:12.652 GET 200 script 7.4 KB 12 ms —

http://kondor.redo.link

Domain graph

Hostnames

Connections