urlquery.net
Investigate/Report/0bc2542e-9c9d-4b60-9912-d4ddb857c613
WEBSITE ANALYSIS REPORT

http://ledgionavera.click/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…
Domain graph details

Hostnames

Connections

    Network requests

    Click any request row to expand it in place. Multiple transactions can remain open.

    UTC · milliseconds
    Reset
    Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
    Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
    GET404document147 B808 ms9 alerts
    GET301document147 B14 ms9 alerts
    GET404document147 B195 ms9 alerts
    GET404img146 B387 ms8 alerts

    Transaction #04

    Request / response

    URL

    GET HTTPS
    https://ledgionavera.click/favicon.ico

    IP / ASN

    Country unknown 188.114.97.1

    AS13335 · CLOUDFLARENET

    Requested by
    https://ledgionavera.click/

    Resource information

    File type
    HTML document, ASCII text, with CRLF line terminators
    MIME type
    text/html
    First seen (UTC)
    07 Mar 2023 · 12:05:15.000 UTC
    Last seen (UTC)
    18 Oct 2026 · 02:37:13.332 UTC
    Times seen
    568777
    Size
    146 B (146 bytes)
    MD5
    8eec510e57f5f732fd2cce73df7b73ef
    SHA1
    3c0af39ecb3753c5fee3b53d063c7286019eac3b
    SHA256
    55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0

    Certificate information

    Issuer
    Google Trust Services · WE1
    Subject
    ledgionavera.click
    Protocol / cipher
    TLSv1.3 · TLS_AES_128_GCM_SHA256
    SHA1 fingerprint
    B2:A4:A3:06:03:E2:E5:3F:66:C3:A1:37:F8:06:73:05:7F:69:95:BA
    Valid from
    Thu, 09 Oct 2025 16:52:09 GMT
    Valid until
    Wed, 07 Jan 2026 17:50:51 GMT

    Technology fingerprints

    • Cloudflare (CDN)

    Detections

    Detection observations attached to this HTTP transaction.
    DetectionSeverityVerdict
    DigiCert UltraDNS SinkholedmediumMalicious
    DNS4EU SinkholedmediumMalicious
    Quad9 DNS SinkholedmediumMalicious
    Hagezi Threat Feed SinkholedmediumMalicious
    OpenDNS Phishing BlockmediumPhishing
    CIRA Canadian Shield DNS SinkholedmediumMalicious
    Cloudflare DNS SinkholedmediumMalicious
    DNS0 Zero SinkholedmediumMalicious

    HTTP headers

    Request headers

    GET /favicon.ico HTTP/1.1
Host: ledgionavera.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ledgionavera.click/
Cookie: 392d0516=6488d9d2cefaa3bd4694fe2af8a3253e44de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

    Response headers

    HTTP/3 404 Not Found
date: Sat, 18 Oct 2025 18:02:55 GMT
content-type: text/html
server: cloudflare
cache-control: max-age=14400
cf-cache-status: MISS
priority: u=6,i=?0
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=79d0UYSe5ARnN6sv9uKzY5okcGM1zofDX8rknd2mt3VfECg4KEWrw6F62xVj9pmpWZADfVTrSOadqTllpQEa9ziIsAFFhPMceUO2pasAcpcK%2FQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: br
cf-ray: 9909f30bde3723eb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
    4 visible / 4 matching / 4 captured
    First
    Loading evidence…
    WORKSPACE SETTINGS

    Display preferences

    Saved on this device.

    SuccessInfoWarningDangerCriticalUnknown

    Security colors remain independent of your accent.

    Go to…

    Recent scans ↵ Search reports /Search hosts ↵

    No matching commands.

    Ctrl/⌘ K Commands · Esc Close
    LOCAL DEMONSTRATION

    Notifications

    No live event connection.

    No notifications yet. Preview an event below.

    Full request body

    Full screenshot

    Full browser screenshot